$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/900dd190-4fe2-34bf-80f8-fc3bfe9d6760.roa File: 900dd190-4fe2-34bf-80f8-fc3bfe9d6760.roa (raw, json) Hash identifier: cOPxc4oH6Ztbuiv8I4d1sJQuzipcBMMIISEe4tXoRpI= Subject key identifier: 7C:53:61:21:E7:34:7B:5A:EF:20:44:2F:FC:CD:04:61:29:AF:B7:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB272EBB99236BA716300C Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/900dd190-4fe2-34bf-80f8-fc3bfe9d6760.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:27:2e:bb:99:23:6b:a7:16:30:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=75fa27b0-23e5-48d2-a385-a42b88e4268b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:74:66:00:e7:ae:cd:18:94:91:25:0b:af: 49:d1:67:f2:bb:de:c9:ab:8d:54:f5:6c:32:32:e8: 35:4a:42:f5:7c:f7:90:9a:13:5b:5d:89:63:f4:5e: d5:76:27:70:0d:d6:5e:d6:1f:2e:e2:07:30:32:d2: e5:7e:bf:a1:79:02:dc:5f:ab:b4:a6:1b:13:d8:6f: 5a:a6:ca:22:ca:28:8a:f4:55:d6:eb:d2:39:82:77: a4:b7:5d:0f:b2:43:64:9b:09:e7:be:78:4d:8a:db: 62:10:8a:a4:7a:a3:d8:f5:e5:98:62:82:d2:14:42: 47:6e:c5:9b:19:6b:2b:f9:e8:3e:3e:34:05:7b:8a: c5:91:6f:ee:6c:f9:cc:c9:ce:5e:23:0a:ba:80:ca: a1:d2:2d:14:50:18:de:f0:4a:4f:54:56:17:4d:b7: ce:49:f0:e4:ab:b9:36:78:86:37:8f:a3:c4:3c:de: d2:8f:be:94:5a:b6:f4:13:8d:0e:92:a9:13:37:9c: aa:40:90:a0:07:de:52:20:90:f9:53:0f:fa:5f:80: 10:6d:6f:45:52:df:4f:dc:aa:0d:8b:50:ac:17:82: bc:bc:e9:0f:02:d4:2c:68:09:a1:33:b9:79:17:07: 68:4b:68:e6:6a:31:e4:7b:e8:77:9f:dd:e2:e6:d7: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:53:61:21:E7:34:7B:5A:EF:20:44:2F:FC:CD:04:61:29:AF:B7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/900dd190-4fe2-34bf-80f8-fc3bfe9d6760.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f8:9c:70:a6:55:dd:87:f6:b1:cb:8b:13:c1:78:92:08:18: fc:2f:44:33:4c:d1:a0:25:56:58:05:23:be:34:c6:be:e3:c9: 5d:ee:4c:f7:0c:98:1a:c9:0a:d8:94:11:e2:44:87:1c:90:c3: 3d:67:9d:3e:a5:9c:24:7c:a5:08:21:23:ec:f5:d5:8b:11:c7: 87:b6:40:ac:c8:29:ed:ea:89:c5:b1:56:1d:ef:06:fa:7d:dd: dd:21:49:85:71:b2:1b:07:2e:7a:c0:c7:0a:b9:1d:5d:b5:c5: f2:b0:58:c9:45:49:5b:26:96:60:81:5c:c5:76:bf:37:0e:cf: 7d:77:c5:23:0b:4d:ec:f6:18:b4:25:b3:39:fa:91:18:9a:a2: 5d:58:1a:cd:96:cf:b8:27:7b:53:e3:5b:50:f0:35:3b:bb:bc: e8:8e:3d:65:51:8c:6c:f6:89:6b:60:1b:ea:b1:d1:9c:fd:1e: c8:b2:ec:30:f9:00:e9:1d:ae:42:56:0f:22:b2:f5:89:7d:8c: ef:a3:27:29:42:a8:62:f5:69:d8:54:de:8c:df:8a:dc:b4:2c: 1d:04:8d:04:8c:8e:09:c7:d8:82:44:9a:89:ce:22:e3:4e:37: cb:bc:bf:8c:8d:3f:db:34:1a:9d:3f:5d:84:f4:94:bc:e0:06: 03:36:5a:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuycuu5kja6cWMAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzVmYTI3YjAtMjNlNS00OGQyLWEzODUtYTQyYjg4ZTQyNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rt0ZgDnrs0YlJElC69J0Wfyu97Jq41U9Wwy Mug1SkL1fPeQmhNbXYlj9F7VdidwDdZe1h8u4gcwMtLlfr+heQLcX6u0phsT2G9a psoiyiiK9FXW69I5gnekt10PskNkmwnnvnhNittiEIqkeqPY9eWYYoLSFEJHbsWb GWsr+eg+PjQFe4rFkW/ubPnMyc5eIwq6gMqh0i0UUBje8EpPVFYXTbfOSfDkq7k2 eIY3j6PEPN7Sj76UWrb0E40OkqkTN5yqQJCgB95SIJD5Uw/6X4AQbW9FUt9P3KoN i1CsF4K8vOkPAtQsaAmhM7l5FwdoS2jmajHke+h3n93i5tfU5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxTYSHnNHta7yBEL/zNBGEpr7f2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTAwZGQxOTAtNGZlMi0z NGJmLTgwZjgtZmMzYmZlOWQ2NzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv4nHCmVd2H9rHLixPBeJIIGPwvRDNM0aAlVlgFI740xr7jyV3uTPcM mBrJCtiUEeJEhxyQwz1nnT6lnCR8pQghI+z11YsRx4e2QKzIKe3qicWxVh3vBvp9 3d0hSYVxshsHLnrAxwq5HV21xfKwWMlFSVsmlmCBXMV2vzcOz313xSMLTez2GLQl szn6kRiaol1YGs2Wz7gne1PjW1DwNTu7vOiOPWVRjGz2iWtgG+qx0Zz9Hsiy7DD5 AOkdrkJWDyKy9Yl9jO+jJylCqGL1adhU3ozfity0LB0EjQSMjgnH2IJEmonOIuNO N8u8v4yNP9s0Gp0/XYT0lLzgBgM2Wv4= -----END CERTIFICATE-----Generated at Tue Apr 29 10:18:54 2025 by rpki-client