$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98977db4-491f-315f-ada4-83c5f5d9e1e1.roa File: 98977db4-491f-315f-ada4-83c5f5d9e1e1.roa (raw, json) Hash identifier: WImRtGWkyorH3RyRMdh4lJhumNcCQFVJAGmjMRmZK1I= Subject key identifier: 48:E5:22:E0:19:F6:0B:C5:6E:74:A9:44:A7:10:A4:73:90:B2:E3:FF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB28878EAABAF80255B680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98977db4-491f-315f-ada4-83c5f5d9e1e1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:28:87:8e:aa:ba:f8:02:55:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9de9b8cb-7e5a-48e1-95cf-32268ad566d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:e7:17:3c:7b:b9:07:b9:e2:f7:d3:39:9a: 53:ec:8f:24:91:60:e3:49:d3:15:60:4e:a2:d9:e6: ed:9b:4e:63:bf:3a:74:6a:5f:79:cb:68:03:2a:cf: 90:e0:c9:2c:17:bc:5d:5f:fe:87:40:a8:1a:5a:24: 5a:30:44:23:44:3e:8d:ca:4e:6e:b7:b9:da:62:72: d6:f5:06:72:60:31:cb:27:21:4b:de:ca:a0:ff:4a: aa:4a:75:aa:7d:d5:02:04:51:27:c5:1e:4d:4e:3f: 9d:19:7a:20:84:53:0a:11:7f:43:8e:ac:9a:62:74: bd:8a:e0:00:1d:7d:fb:c2:98:e2:ef:66:a4:53:f4: d9:64:d7:72:95:e1:18:ec:70:a6:f0:a6:b6:27:ec: c2:c3:29:3c:26:1b:88:d2:46:a8:a1:ac:65:68:6f: c6:2c:28:ab:92:fb:71:ca:1a:73:b4:ad:5a:0b:28: d3:ad:ca:21:2d:d9:62:5b:aa:20:be:6b:e7:fc:74: 0f:db:a8:56:f6:1c:36:58:92:11:32:4c:18:59:76: bf:d8:7a:54:39:cd:0b:6c:92:b5:27:e2:2e:d4:99: c1:e1:99:ee:02:41:38:3e:58:66:25:37:c4:94:c2: 27:0e:32:94:e8:9a:f5:09:69:8b:87:49:2b:3c:b7: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E5:22:E0:19:F6:0B:C5:6E:74:A9:44:A7:10:A4:73:90:B2:E3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98977db4-491f-315f-ada4-83c5f5d9e1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:1a:70:2e:bc:85:01:0a:68:e3:ab:68:58:5f:2c:41:ec:a0: 0f:79:88:7d:92:19:90:6f:64:a2:ca:1d:7f:81:f4:ef:5e:54: 66:f9:a0:f8:f2:b9:5f:d7:7c:30:92:cc:0f:da:cf:ed:39:2d: a4:58:57:93:30:a4:43:57:62:7d:08:3c:ff:aa:cb:0b:c1:b4: 77:68:97:2d:6a:5d:68:e1:dc:3c:14:3b:23:ee:55:78:dc:19: 21:a1:47:31:91:db:30:a9:de:e9:61:c3:0d:a2:48:33:ce:c4: 03:96:fb:4a:9b:3f:5f:eb:e8:c7:6f:15:d7:13:70:5c:02:55: f4:c9:68:b0:3c:f5:a2:04:9a:41:64:2a:7a:52:5c:66:31:9e: 10:36:ab:15:35:15:f4:51:a6:75:f7:16:3e:b6:75:35:d6:82: 1d:61:5d:44:90:44:76:c9:f1:32:8b:55:c0:fc:6f:72:60:4e: 50:a1:9f:df:3d:8a:bf:ec:83:b4:cf:9c:a2:c6:c3:12:2c:4e: 41:c3:32:81:a8:e5:8f:f2:05:60:b9:4c:b0:22:fe:a4:03:9b: b2:41:65:a1:29:f1:6b:5d:b9:d0:35:dd:10:53:37:8e:05:d9: ed:90:8f:3f:16:fd:10:d0:d5:b4:df:e5:b8:86:7c:c0:39:32: 61:83:db:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyiHjqq6+AJVtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWRlOWI4Y2ItN2U1YS00OGUxLTk1Y2YtMzIyNjhhZDU2NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfnnFzx7uQe54vfTOZpT7I8kkWDjSdMVYE6i 2ebtm05jvzp0al95y2gDKs+Q4MksF7xdX/6HQKgaWiRaMEQjRD6Nyk5ut7naYnLW 9QZyYDHLJyFL3sqg/0qqSnWqfdUCBFEnxR5NTj+dGXoghFMKEX9DjqyaYnS9iuAA HX37wpji72akU/TZZNdyleEY7HCm8Ka2J+zCwyk8JhuI0kaooaxlaG/GLCirkvtx yhpztK1aCyjTrcohLdliW6ogvmvn/HQP26hW9hw2WJIRMkwYWXa/2HpUOc0LbJK1 J+Iu1JnB4ZnuAkE4PlhmJTfElMInDjKU6Jr1CWmLh0krPLciQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjlIuAZ9gvFbnSpRKcQpHOQsuP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTg5NzdkYjQtNDkxZi0z MTVmLWFkYTQtODNjNWY1ZDllMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8acC68hQEKaOOraFhfLEHsoA95iH2SGZBvZKLKHX+B9O9eVGb5oPjy uV/XfDCSzA/az+05LaRYV5MwpENXYn0IPP+qywvBtHdoly1qXWjh3DwUOyPuVXjc GSGhRzGR2zCp3ulhww2iSDPOxAOW+0qbP1/r6MdvFdcTcFwCVfTJaLA89aIEmkFk KnpSXGYxnhA2qxU1FfRRpnX3Fj62dTXWgh1hXUSQRHbJ8TKLVcD8b3JgTlChn989 ir/sg7TPnKLGwxIsTkHDMoGo5Y/yBWC5TLAi/qQDm7JBZaEp8WtdudA13RBTN44F 2e2Qjz8W/RDQ1bTf5biGfMA5MmGD2xU= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:42 2025 by rpki-client