$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a22ba7a6-ec4c-3fca-a2e1-6626dbf9e5e8.roa File: a22ba7a6-ec4c-3fca-a2e1-6626dbf9e5e8.roa (raw, json) Hash identifier: tf/MmaN3ecAef00JEXSTlD8rxfu6rUyQEn+5XZQN/Wc= Subject key identifier: BE:7D:DA:91:B3:E5:26:24:A8:EC:85:65:5B:44:CC:02:16:57:9F:F7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB290B4593AC9E5226B280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a22ba7a6-ec4c-3fca-a2e1-6626dbf9e5e8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:29:0b:45:93:ac:9e:52:26:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d1c378e8-f094-4730-9139-015221bd5818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:f5:5c:02:ec:2f:10:f1:a8:57:16:ad:9a: df:2e:77:06:e2:10:cc:ae:77:bb:12:fe:1c:d3:d8: de:60:10:3d:57:57:5b:de:bf:5f:e0:a1:1a:73:48: c6:f9:71:5a:be:22:5e:62:18:c3:a8:cf:a7:6d:87: 08:4d:18:68:ac:47:b9:ac:88:d5:da:27:2e:de:3f: 07:dd:b1:d7:f7:ce:b7:9d:62:96:a6:b2:0b:51:47: 42:4a:f4:19:5e:93:b0:cc:69:d6:27:ef:c0:57:1b: c5:fe:36:24:95:43:37:77:e5:55:2c:4f:ac:54:c7: 29:48:38:97:32:ab:92:6d:09:c6:b8:1f:67:6c:f0: cd:56:7c:68:ce:f6:d7:17:b0:f1:d6:35:2c:3a:ba: e4:4c:56:6a:b0:94:7a:0b:bc:54:e2:7b:78:dc:27: 9f:61:5e:7d:7e:f9:83:dc:cc:c5:d9:60:83:91:bf: 73:b8:f1:a3:4c:dd:52:14:f5:4c:c0:07:d2:59:8a: 6a:de:fc:66:6e:6b:4c:be:13:12:78:bf:d9:75:f7: 19:f5:c8:92:30:f5:a8:a4:ff:e1:6e:9b:f5:94:c0: f7:ba:84:61:c9:f2:3c:0a:37:c3:a8:f6:68:2f:2f: 96:5a:27:c9:b0:c7:c0:29:c7:cc:58:ad:53:6a:ea: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7D:DA:91:B3:E5:26:24:A8:EC:85:65:5B:44:CC:02:16:57:9F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a22ba7a6-ec4c-3fca-a2e1-6626dbf9e5e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:78:fd:17:1b:1d:74:09:81:d1:ee:44:3b:a1:4f:a0:75:02: eb:7f:f6:c9:9e:cf:92:ca:95:5b:ea:f0:cc:1a:3f:84:92:7f: 97:c7:09:ea:b2:1a:4f:89:a7:1d:ac:c4:99:cf:e4:79:c4:15: 73:26:08:9a:b6:a4:e6:5f:b6:06:eb:63:7b:1e:dd:88:1c:12: a0:4a:a7:7c:84:98:96:79:35:ba:35:af:e9:89:de:f0:84:9e: e3:91:9e:4d:60:8d:84:3f:c1:99:3a:58:b7:e7:0a:1e:cd:5a: 06:18:de:e7:dd:e5:44:fb:e7:63:a4:41:d8:48:22:47:a0:9b: 4d:7d:b9:6d:43:10:34:b7:37:24:30:29:69:1d:92:da:4d:fa: 19:ec:45:f1:ad:a4:68:a4:2a:15:41:59:ba:e6:2d:54:96:ab: 08:98:68:d4:d4:d3:d1:6c:b5:d3:4f:a6:a7:85:42:28:8a:0e: 71:cd:f0:8b:6a:72:50:c9:1b:32:0f:c2:5d:57:34:2f:22:99: 95:22:40:8b:2c:01:77:6e:62:aa:4a:1b:e8:1f:8b:fd:ab:fd: 80:22:43:29:02:80:90:fa:db:be:57:e5:f9:30:ba:5e:20:e6: 06:29:9e:fe:54:bb:b9:8c:57:77:32:ce:d6:f4:19:d9:2e:22: c3:73:02:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuykLRZOsnlImsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDFjMzc4ZTgtZjA5NC00NzMwLTkxMzktMDE1MjIxYmQ1ODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl/1XALsLxDxqFcWrZrfLncG4hDMrne7Ev4c 09jeYBA9V1db3r9f4KEac0jG+XFaviJeYhjDqM+nbYcITRhorEe5rIjV2icu3j8H 3bHX9863nWKWprILUUdCSvQZXpOwzGnWJ+/AVxvF/jYklUM3d+VVLE+sVMcpSDiX MquSbQnGuB9nbPDNVnxozvbXF7Dx1jUsOrrkTFZqsJR6C7xU4nt43CefYV59fvmD 3MzF2WCDkb9zuPGjTN1SFPVMwAfSWYpq3vxmbmtMvhMSeL/ZdfcZ9ciSMPWopP/h bpv1lMD3uoRhyfI8CjfDqPZoLy+WWifJsMfAKcfMWK1TauqzUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL592pGz5SYkqOyFZVtEzAIWV5/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTIyYmE3YTYtZWM0Yy0z ZmNhLWEyZTEtNjYyNmRiZjllNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV4/RcbHXQJgdHuRDuhT6B1Aut/9smez5LKlVvq8MwaP4SSf5fHCeqy Gk+Jpx2sxJnP5HnEFXMmCJq2pOZftgbrY3se3YgcEqBKp3yEmJZ5Nbo1r+mJ3vCE nuORnk1gjYQ/wZk6WLfnCh7NWgYY3ufd5UT752OkQdhIIkegm019uW1DEDS3NyQw KWkdktpN+hnsRfGtpGikKhVBWbrmLVSWqwiYaNTU09FstdNPpqeFQiiKDnHN8Itq clDJGzIPwl1XNC8imZUiQIssAXduYqpKG+gfi/2r/YAiQykCgJD6275X5fkwul4g 5gYpnv5Uu7mMV3cyztb0GdkuIsNzAic= -----END CERTIFICATE-----Generated at Sun Apr 27 01:02:56 2025 by rpki-client