$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa File: 8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa (raw, json) Hash identifier: RUp1XdwnRMU6ZPSIo7GnNX8GsAV/QJMpEeECysGGz0w= Subject key identifier: 72:62:5C:DB:F9:B9:E6:44:72:96:12:20:49:43:DB:93:73:24:63:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB29BAEE465F29394F6400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:29:ba:ee:46:5f:29:39:4f:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0b85c313-0ea7-43b9-a3cd-62b8d08050d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:6c:e8:1a:36:29:78:56:05:04:cf:56:fa: 26:39:9d:ed:72:fe:fd:0a:4e:28:34:a6:e8:b3:d6: 25:b0:04:f1:11:60:8f:93:fd:0f:f1:b3:41:20:c8: a0:e1:6d:ab:a5:0a:e2:a3:b5:0c:3b:01:21:a6:d1: 9c:e2:cd:3d:a3:23:ba:d3:d2:c2:8a:a2:43:5c:22: 37:61:b2:94:55:09:24:22:8a:75:bc:09:ac:c0:09: 5d:e5:06:cd:07:cf:e3:5a:04:b1:ab:3b:a0:fe:95: 1b:95:52:b0:74:07:bb:70:37:59:f7:91:38:30:72: 06:c6:10:50:04:3f:ca:ab:1f:10:08:27:37:47:b1: c7:88:c4:c9:00:91:14:62:83:2b:8c:31:48:ce:f1: aa:81:06:d0:31:f4:50:5f:ba:4b:3f:3d:cf:2f:ab: 81:ed:e1:fe:35:26:25:8d:ed:d0:07:9b:1d:91:57: 2d:81:d9:4e:7a:c7:9d:42:bc:ce:46:17:b8:08:a1: 18:3b:8e:e8:96:e5:5f:95:2d:d7:6b:9b:e6:c5:a2: 8e:48:08:b7:ec:bb:f3:e4:b8:e1:5c:2c:3b:30:68: 63:2e:e7:40:ac:79:96:71:73:79:04:1f:74:a4:c5: c3:89:bd:ce:9e:f1:7a:09:65:5e:a0:cd:c4:d3:30: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:5C:DB:F9:B9:E6:44:72:96:12:20:49:43:DB:93:73:24:63:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f396276-3d59-34ad-8ee1-c940abc4c9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:14:e2:77:28:e9:7b:50:55:e8:12:e4:12:29:58:de:57:37: 1a:2b:ae:33:ed:49:eb:5e:3f:4e:ed:83:8b:95:64:85:47:dd: 49:d0:71:65:38:93:9a:9f:00:b4:da:b4:13:dd:25:3f:80:be: f2:f4:35:e2:d8:d8:f9:b4:42:91:67:f1:a5:15:b5:c5:68:44: 6f:90:b0:14:d9:b7:26:86:e2:5d:39:aa:f4:e3:e8:9d:35:ac: 3f:03:83:6a:f3:b8:7f:e1:49:e3:68:64:17:c6:5a:b8:ed:e0: 57:df:81:66:31:cd:4e:38:db:08:f2:77:25:96:33:5a:e5:f3: b8:28:9c:b3:39:85:02:02:9e:f1:11:70:95:92:df:ff:e6:b6: 81:7a:8e:b2:32:5d:36:d2:52:ff:17:aa:65:b0:6a:ef:2a:2b: e0:2d:ef:60:5d:cb:5d:0e:29:e4:05:f2:15:8d:59:8a:38:55: c8:e4:e8:dd:b2:75:54:50:14:99:cf:5d:45:a8:71:b0:f0:ee: 4e:ab:a7:c8:c2:2c:bf:7c:cb:60:9c:ad:88:52:0b:bd:2a:1f: ef:23:f9:6e:9a:bd:b8:cc:c3:bf:8e:a8:e0:ea:96:44:f6:32: d1:e2:a5:8c:f4:23:36:ea:01:85:fb:45:fb:d8:b9:6c:14:67: 6b:26:cd:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuym67kZfKTlPZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGI4NWMzMTMtMGVhNy00M2I5LWEzY2QtNjJiOGQwODA1MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0ls6Bo2KXhWBQTPVvomOZ3tcv79Ck4oNKbo s9YlsATxEWCPk/0P8bNBIMig4W2rpQrio7UMOwEhptGc4s09oyO609LCiqJDXCI3 YbKUVQkkIop1vAmswAld5QbNB8/jWgSxqzug/pUblVKwdAe7cDdZ95E4MHIGxhBQ BD/Kqx8QCCc3R7HHiMTJAJEUYoMrjDFIzvGqgQbQMfRQX7pLPz3PL6uB7eH+NSYl je3QB5sdkVctgdlOesedQrzORhe4CKEYO47oluVflS3Xa5vmxaKOSAi37Lvz5Ljh XCw7MGhjLudArHmWcXN5BB90pMXDib3OnvF6CWVeoM3E0zDZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJiXNv5ueZEcpYSIElD25NzJGM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGYzOTYyNzYtM2Q1OS0z NGFkLThlZTEtYzk0MGFiYzRjOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgU4nco6XtQVegS5BIpWN5XNxorrjPtSeteP07tg4uVZIVH3UnQcWU4 k5qfALTatBPdJT+AvvL0NeLY2Pm0QpFn8aUVtcVoRG+QsBTZtyaG4l05qvTj6J01 rD8Dg2rzuH/hSeNoZBfGWrjt4FffgWYxzU442wjydyWWM1rl87gonLM5hQICnvER cJWS3//mtoF6jrIyXTbSUv8XqmWwau8qK+At72Bdy10OKeQF8hWNWYo4Vcjk6N2y dVRQFJnPXUWocbDw7k6rp8jCLL98y2CcrYhSC70qH+8j+W6avbjMw7+OqODqlkT2 MtHipYz0IzbqAYX7RfvYuWwUZ2smzQA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:18:00 2025 by rpki-client