$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaaa298e-c7e8-3d05-bd32-3f78c5eafd52.roa File: aaaa298e-c7e8-3d05-bd32-3f78c5eafd52.roa (raw, json) Hash identifier: lbUBax/EmM3dOWuyoWtCxJIYKiflYWePTb0S6S+ytAs= Subject key identifier: 8E:B0:2C:E9:7A:6D:48:8B:F1:C2:D3:59:9C:20:B7:23:DF:39:63:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB2102890CA3F0839C9E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaaa298e-c7e8-3d05-bd32-3f78c5eafd52.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:21:02:89:0c:a3:f0:83:9c:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=af1a2cf5-9f74-45f5-9ed7-a1fbd142bb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ba:ef:85:76:b0:0e:a6:e1:f5:da:4e:ab:08: bd:e5:17:cb:0e:4e:0f:10:11:75:8c:2d:60:9e:25: 2a:cc:a1:45:81:cb:39:7a:ee:b2:a5:5c:34:7a:97: 52:72:6a:14:82:50:de:a4:16:e2:18:b2:d5:12:d7: a1:b2:49:0f:b8:ef:1d:f3:4e:08:41:55:1b:c1:79: 3a:b7:b1:76:1b:96:24:34:f6:ad:15:cb:a2:09:2f: 45:54:e2:9c:7a:93:2b:be:81:85:6d:98:16:ab:a7: da:1f:d6:30:28:55:27:42:d8:b4:8d:80:14:7b:ee: 29:c2:49:b0:93:4d:ca:33:b7:44:c7:29:c4:6f:eb: 52:13:db:9d:8e:97:3d:c2:45:a6:79:fe:82:1d:48: ee:c6:fa:88:20:f9:b8:e0:ca:b8:f8:3f:07:cf:83: 5c:19:0e:4c:fa:41:2b:ac:bf:32:9b:1f:c1:1b:07: 54:18:4b:9a:c5:f5:5b:c0:da:fe:c4:32:b0:4b:eb: 8b:9f:e8:62:ba:5e:b2:b2:3c:83:5a:91:45:43:bf: 58:27:43:8a:21:c0:c8:39:06:0b:f8:55:74:d4:ed: ca:32:9c:76:ed:e6:51:d0:fa:63:c1:3b:ce:c2:be: ca:82:02:25:43:eb:6a:47:e7:9f:14:2a:88:a7:dd: d9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B0:2C:E9:7A:6D:48:8B:F1:C2:D3:59:9C:20:B7:23:DF:39:63:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaaa298e-c7e8-3d05-bd32-3f78c5eafd52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:bb:78:03:5a:23:95:55:bd:e3:5b:4a:f4:36:35:9f:9b:42: 69:1e:7f:97:98:df:d0:f5:62:67:9b:20:20:6e:29:2e:f6:d1: 45:e2:83:2d:17:71:9e:a7:ca:c9:21:ff:16:53:46:18:77:eb: bf:6b:ef:22:85:69:24:76:5f:4b:98:7e:b5:59:6a:49:2b:c6: 7b:46:e1:4a:1e:9d:6e:56:ea:ab:91:67:45:f8:8b:fa:46:25: f5:87:72:d0:4e:91:e8:e0:c9:ab:3e:de:dc:f9:e3:4d:a5:ab: 22:6c:6a:3a:c8:64:78:c0:6f:24:2d:51:cd:a0:6c:60:e8:99: 86:82:40:f9:31:8d:89:4c:8a:dc:79:02:20:87:b2:95:d3:12: 1f:87:3a:03:e3:fc:2d:08:ab:7d:84:38:7d:79:e2:57:46:c2: e7:28:6e:eb:9e:2e:5a:98:14:ac:d8:4b:a8:c5:5c:be:78:30: 48:b7:6f:1e:eb:d0:34:0d:a1:cc:0d:4d:8c:4e:ea:68:67:1b: 0f:fa:90:54:31:a8:0b:71:a8:93:00:5e:20:12:c7:60:25:f2: 9d:3d:14:0b:ad:89:0c:45:7b:a5:f1:dc:f3:92:c8:5c:67:65: 97:4a:63:4d:af:0d:5a:cb:6c:d3:ea:b7:73:83:e3:2c:ea:08: ed:09:b5:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyECiQyj8IOcnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWYxYTJjZjUtOWY3NC00NWY1LTllZDctYTFmYmQxNDJiYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7rvhXawDqbh9dpOqwi95RfLDk4PEBF1jC1g niUqzKFFgcs5eu6ypVw0epdScmoUglDepBbiGLLVEtehskkPuO8d804IQVUbwXk6 t7F2G5YkNPatFcuiCS9FVOKcepMrvoGFbZgWq6faH9YwKFUnQti0jYAUe+4pwkmw k03KM7dExynEb+tSE9udjpc9wkWmef6CHUjuxvqIIPm44Mq4+D8Hz4NcGQ5M+kEr rL8ymx/BGwdUGEuaxfVbwNr+xDKwS+uLn+hiul6ysjyDWpFFQ79YJ0OKIcDIOQYL +FV01O3KMpx27eZR0PpjwTvOwr7KggIlQ+tqR+efFCqIp93ZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6wLOl6bUiL8cLTWZwgtyPfOWOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWFhYTI5OGUtYzdlOC0z ZDA1LWJkMzItM2Y3OGM1ZWFmZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANC7eANaI5VVveNbSvQ2NZ+bQmkef5eY39D1YmebICBuKS720UXigy0X cZ6nyskh/xZTRhh3679r7yKFaSR2X0uYfrVZakkrxntG4UoenW5W6quRZ0X4i/pG JfWHctBOkejgyas+3tz5402lqyJsajrIZHjAbyQtUc2gbGDomYaCQPkxjYlMitx5 AiCHspXTEh+HOgPj/C0Iq32EOH154ldGwucobuueLlqYFKzYS6jFXL54MEi3bx7r 0DQNocwNTYxO6mhnGw/6kFQxqAtxqJMAXiASx2Al8p09FAutiQxFe6Xx3POSyFxn ZZdKY02vDVrLbNPqt3OD4yzqCO0Jtc4= -----END CERTIFICATE-----Generated at Sun Apr 27 11:23:54 2025 by rpki-client