$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f14fd72-4b29-3cc8-b37c-5460a5a3e148.roa File: 9f14fd72-4b29-3cc8-b37c-5460a5a3e148.roa (raw, json) Hash identifier: 82dsTbd+V1npmYVulyRBAn3q1g8GuA8BnIP1Vbwcscc= Subject key identifier: CE:01:08:27:0E:95:A9:DB:29:B3:7E:9A:9F:20:41:A7:FA:5C:58:B0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB24644A75ED93FE1EC800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f14fd72-4b29-3cc8-b37c-5460a5a3e148.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:24:64:4a:75:ed:93:fe:1e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=21dadb55-44ae-4565-9491-5570abd06358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:a2:9c:4b:9b:bc:6f:23:6e:68:2e:8b:cf: c0:5d:84:b5:05:58:94:73:0d:61:74:df:85:20:c7: e3:42:75:cc:16:30:ec:76:da:9b:fd:40:af:25:b9: cd:b0:de:b5:44:58:cd:c4:2c:a4:1c:d6:e5:41:4d: 32:7f:4e:36:6a:e3:8e:ba:cb:2b:02:7d:39:0d:66: 0c:b4:5a:47:aa:00:8e:5c:96:5c:40:35:96:4e:be: 63:e6:8f:f9:4f:d8:95:75:e6:5c:f2:1f:fa:e3:4c: 84:73:d0:55:5c:07:ff:cf:0e:6f:57:f3:9e:de:f7: a7:87:0e:11:b4:f6:92:8c:2e:1c:cd:b7:f7:86:ba: 66:94:75:79:db:20:db:4f:e9:07:3f:6a:b9:1a:d8: 14:77:49:41:79:bc:49:79:11:d0:da:d4:14:4b:eb: cd:4c:ba:f8:7c:f3:f4:be:b9:cc:cb:bb:16:b8:1d: b3:12:35:25:f4:d1:56:d2:2e:93:56:55:04:8e:7d: 31:ea:f2:6a:da:7e:ac:78:15:b7:21:d9:2c:3b:13: 68:3a:14:af:a4:44:c5:54:6d:73:27:2b:fc:71:81: 24:a1:77:92:fd:e2:0b:36:6c:66:e4:af:76:f8:43: 5a:98:75:20:b2:d7:f4:36:c8:69:7c:c3:9a:37:42: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:01:08:27:0E:95:A9:DB:29:B3:7E:9A:9F:20:41:A7:FA:5C:58:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f14fd72-4b29-3cc8-b37c-5460a5a3e148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:c5:64:f2:07:77:a8:9f:a4:de:e9:da:88:c6:19:59:9e:e2: f3:3a:2e:65:1e:5d:79:11:9f:93:44:1e:ac:23:e6:0d:ff:fc: 6f:a8:32:86:b3:3a:a6:8b:f7:27:ff:53:fc:05:60:22:10:e8: 41:8b:4a:bf:1c:6c:2a:e0:a4:6e:29:19:7f:ce:c5:9a:ae:b4: ad:c9:40:d1:dc:8f:14:19:c0:cc:d3:69:02:87:85:6b:83:dd: 2e:fa:eb:6a:31:4c:b4:0d:40:fb:9d:a7:51:4c:73:6f:f0:da: 94:d3:cd:a7:fb:d0:c8:cf:e4:c1:ab:31:ac:d3:b7:9c:72:25: ab:0e:2d:95:2c:91:a5:51:1a:8c:b8:4c:80:4a:15:09:fb:2d: 5f:23:c7:8b:3a:f7:f5:88:84:47:01:e8:d0:90:ed:56:df:7e: a8:3e:0f:0b:5e:16:fc:a1:90:c6:e5:8d:91:49:84:c7:c0:bd: e8:25:b2:bc:51:b5:b0:08:ca:de:49:ac:a2:83:fd:f2:f5:67: 9d:fb:df:41:48:ee:c9:c6:8c:85:8e:02:7b:b9:04:ef:3e:9d: 08:7f:9b:9a:97:19:a1:91:3c:e0:4b:52:97:bf:eb:f8:fc:cf: 53:a5:ab:50:50:60:14:eb:d3:39:9d:24:96:8a:ac:d1:54:a6: 6d:3b:0f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyRkSnXtk/4eyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjFkYWRiNTUtNDRhZS00NTY1LTk0OTEtNTU3MGFiZDA2MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk6inEubvG8jbmgui8/AXYS1BViUcw1hdN+F IMfjQnXMFjDsdtqb/UCvJbnNsN61RFjNxCykHNblQU0yf042auOOussrAn05DWYM tFpHqgCOXJZcQDWWTr5j5o/5T9iVdeZc8h/640yEc9BVXAf/zw5vV/Oe3venhw4R tPaSjC4czbf3hrpmlHV52yDbT+kHP2q5GtgUd0lBebxJeRHQ2tQUS+vNTLr4fPP0 vrnMy7sWuB2zEjUl9NFW0i6TVlUEjn0x6vJq2n6seBW3IdksOxNoOhSvpETFVG1z Jyv8cYEkoXeS/eILNmxm5K92+ENamHUgstf0NshpfMOaN0JNjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4BCCcOlanbKbN+mp8gQaf6XFiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWYxNGZkNzItNGIyOS0z Y2M4LWIzN2MtNTQ2MGE1YTNlMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTFZPIHd6ifpN7p2ojGGVme4vM6LmUeXXkRn5NEHqwj5g3//G+oMoaz OqaL9yf/U/wFYCIQ6EGLSr8cbCrgpG4pGX/OxZqutK3JQNHcjxQZwMzTaQKHhWuD 3S7662oxTLQNQPudp1FMc2/w2pTTzaf70MjP5MGrMazTt5xyJasOLZUskaVRGoy4 TIBKFQn7LV8jx4s69/WIhEcB6NCQ7Vbffqg+DwteFvyhkMbljZFJhMfAveglsrxR tbAIyt5JrKKD/fL1Z53730FI7snGjIWOAnu5BO8+nQh/m5qXGaGRPOBLUpe/6/j8 z1Olq1BQYBTr0zmdJJaKrNFUpm07D90= -----END CERTIFICATE-----Generated at Sun Apr 27 07:28:06 2025 by rpki-client