$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa File: 924d5c82-5fd2-3781-949e-453b857408b2.roa (raw, json) Hash identifier: dTv1MvmojBZzS6ef4vBImvIa5+Fll9q2YoeBJ2MLv9M= Subject key identifier: 7B:42:B6:78:77:F5:5F:0C:B3:A8:7F:81:CB:89:FD:D9:6D:B8:57:DE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB25EA06C49628AB4458E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:25:ea:06:c4:96:28:ab:44:58:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ccaba73d-49d3-4ad3-82ac-5bea3d61ac16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:39:31:19:3f:8c:4c:c2:61:ef:e3:7f:57:8f: b3:0c:3b:2e:d7:5f:e6:db:2e:f3:a0:7f:8e:7a:3e: a5:b7:46:c1:a6:4e:36:d1:42:86:da:bd:a2:e7:31: cb:e0:50:02:96:7c:1f:a9:85:24:6d:ed:e9:2b:52: 61:0e:90:56:d4:38:e5:de:59:20:54:d2:5c:9f:37: df:fa:1c:84:de:54:47:f4:65:61:c1:a9:25:b0:cf: 9b:21:07:3d:d7:73:91:e0:cc:e0:d4:51:60:35:0a: b4:0b:a8:78:5d:69:fa:c0:02:43:26:3c:f1:82:25: 79:f8:75:cd:36:8b:45:1f:7a:81:a0:3c:fd:eb:ea: 28:76:58:7a:f9:7a:16:ef:d2:31:10:e7:6d:9f:cb: 5f:c2:45:65:77:40:cf:72:7d:16:d1:ed:5d:06:dd: 32:57:fc:fc:02:45:7a:78:41:a3:0d:d5:92:6f:68: 76:c6:5e:53:85:28:5e:3e:63:4b:cf:1e:dd:86:7f: 5d:b0:92:a1:ce:81:5b:4b:e4:c8:67:89:29:3f:ba: 51:c0:b9:8a:cb:5e:97:ae:b7:e4:6e:02:d1:90:ef: 04:77:53:f6:87:48:b5:cc:98:02:f3:ae:f8:82:ca: 03:c2:20:33:7d:27:60:6b:0c:67:7f:a5:ea:e2:22: 01:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:42:B6:78:77:F5:5F:0C:B3:A8:7F:81:CB:89:FD:D9:6D:B8:57:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:86:09:36:85:4c:7f:fe:69:5f:f9:f1:c0:60:f8:4d:d6:93: 8e:6a:bc:bc:e0:f7:80:71:87:2e:b9:50:4b:8b:d6:a7:8a:5a: fc:ff:48:7f:94:8f:2e:8a:33:94:64:75:0f:b0:a1:3b:f1:5c: b1:0c:0b:70:fe:b2:57:71:b8:13:8c:c9:ac:6c:41:b7:87:42: 21:31:82:4f:67:45:3b:af:90:89:ef:82:46:4f:f1:15:10:cc: bb:39:3a:80:0e:01:4e:db:82:1e:f4:a5:4b:ca:7d:a0:e3:1a: 2b:56:e3:55:77:85:a7:4d:fe:00:d2:cc:93:bd:7d:72:7c:d8: c4:8f:ef:b6:aa:1b:02:08:11:61:ee:c3:2d:d9:84:c0:0d:a3: dc:16:ac:fc:2d:32:86:ab:bf:f7:95:dd:d7:47:47:64:29:b7: 12:08:10:6d:a4:34:19:c8:2c:aa:fb:47:09:18:e0:ef:b0:11: 28:1a:7c:19:58:90:92:ce:42:59:43:a2:99:46:ae:e0:72:0b: 5a:ea:fe:51:1e:51:38:a0:55:a1:d7:7c:e4:7e:d4:5a:53:b6: 43:1c:c5:38:2a:8e:7d:6f:d4:b7:74:f1:c4:fd:53:6c:ea:e8: 24:1b:46:c0:71:0c:8e:6e:2a:52:bf:30:ab:75:af:30:35:51: f7:b7:ca:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyXqBsSWKKtEWOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2NhYmE3M2QtNDlkMy00YWQzLTgyYWMtNWJlYTNkNjFhYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizkxGT+MTMJh7+N/V4+zDDsu11/m2y7zoH+O ej6lt0bBpk420UKG2r2i5zHL4FAClnwfqYUkbe3pK1JhDpBW1Djl3lkgVNJcnzff +hyE3lRH9GVhwaklsM+bIQc913OR4Mzg1FFgNQq0C6h4XWn6wAJDJjzxgiV5+HXN NotFH3qBoDz96+oodlh6+XoW79IxEOdtn8tfwkVld0DPcn0W0e1dBt0yV/z8AkV6 eEGjDdWSb2h2xl5ThShePmNLzx7dhn9dsJKhzoFbS+TIZ4kpP7pRwLmKy16Xrrfk bgLRkO8Ed1P2h0i1zJgC8674gsoDwiAzfSdgawxnf6Xq4iIBMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtCtnh39V8Ms6h/gcuJ/dltuFfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTI0ZDVjODItNWZkMi0z NzgxLTk0OWUtNDUzYjg1NzQwOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqGCTaFTH/+aV/58cBg+E3Wk45qvLzg94Bxhy65UEuL1qeKWvz/SH+U jy6KM5RkdQ+woTvxXLEMC3D+sldxuBOMyaxsQbeHQiExgk9nRTuvkInvgkZP8RUQ zLs5OoAOAU7bgh70pUvKfaDjGitW41V3hadN/gDSzJO9fXJ82MSP77aqGwIIEWHu wy3ZhMANo9wWrPwtMoarv/eV3ddHR2QptxIIEG2kNBnILKr7RwkY4O+wESgafBlY kJLOQllDoplGruByC1rq/lEeUTigVaHXfOR+1FpTtkMcxTgqjn1v1Ld08cT9U2zq 6CQbRsBxDI5uKlK/MKt1rzA1Ufe3yvY= -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:00 2025 by rpki-client