$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b23d8920-fb36-3e67-9eaf-42bcfd43f71f.roa File: b23d8920-fb36-3e67-9eaf-42bcfd43f71f.roa (raw, json) Hash identifier: IBwPaoaEuv+H8M5pwhOyS7OT2GJ3kufPnuYE6383hog= Subject key identifier: 87:04:68:9B:96:D9:17:18:9C:49:09:59:EB:29:61:68:4D:0C:1C:29 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADA5F1A4FE314AB777CF0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b23d8920-fb36-3e67-9eaf-42bcfd43f71f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 99.196.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:da:5f:1a:4f:e3:14:ab:77:7c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2ef15834-739f-40aa-9274-3455203af4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:8d:0d:d8:7e:07:b0:e0:01:a7:61:3a:0c: c0:85:ef:1b:68:0f:7c:e1:46:9a:8f:ea:9f:17:02: 1c:85:eb:36:44:d0:6c:01:9b:07:3c:54:5a:0e:8c: 6f:6f:77:d4:4f:2c:93:db:6c:b7:9d:35:33:cc:86: d6:72:ca:cc:dc:47:12:0a:e7:c8:92:52:8a:57:2b: 4d:6d:81:54:f4:36:b0:ea:3c:df:d2:dd:d7:26:62: 30:7d:3d:24:b5:2c:4f:3f:94:c0:fe:0a:11:9d:8b: a9:06:88:24:4b:50:47:b8:2b:fe:3f:ad:5b:35:39: f1:a1:f4:e4:d6:aa:f9:5e:99:f4:40:e9:6f:45:01: 2c:d4:6a:8c:9a:1e:f6:3f:80:86:e6:a7:da:20:10: 01:55:1d:93:da:9d:28:bd:33:2f:d6:10:aa:12:0a: bc:9d:cf:c4:c9:75:4c:9b:bd:52:bb:79:61:df:a3: ec:6a:ee:6d:be:93:ea:b3:1d:30:d6:01:d2:f3:c4: d0:b6:09:cf:6e:bb:d9:50:69:a1:83:ef:62:de:2c: 53:d9:0e:84:30:67:7a:a7:af:3d:51:6c:58:30:08: ea:78:7d:d3:d3:6e:30:d0:65:29:02:ab:55:92:3f: c1:55:b5:1c:e7:4c:f4:69:de:7a:84:ab:e2:c1:d7: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:04:68:9B:96:D9:17:18:9C:49:09:59:EB:29:61:68:4D:0C:1C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b23d8920-fb36-3e67-9eaf-42bcfd43f71f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:32:9e:b2:c4:52:c7:44:5f:13:51:02:df:70:27:3e:de:d0: 39:9b:f6:b4:b1:67:e1:b3:a4:98:a9:08:53:12:fe:d9:f3:4c: 9b:8f:2a:68:95:1a:37:95:d7:f3:86:83:6e:eb:3e:bd:24:e1: 9a:34:bc:6f:73:f9:04:b0:1d:66:98:44:b4:ab:a7:16:e5:c1: 9b:bc:8a:d5:27:f7:d6:c3:7f:24:e6:45:1f:8d:c4:72:d0:1c: 0a:92:ba:e7:59:73:e6:28:38:75:b2:15:83:07:ff:17:01:c9: 98:4d:29:b8:e8:85:59:be:b6:bd:19:e9:10:7d:ad:0c:d8:2b: 40:39:6e:ea:cb:29:a7:82:7a:83:91:18:c6:b3:9a:3e:98:12: 51:d8:e1:db:20:10:5e:8b:97:d4:c8:fa:e3:e5:84:4d:3b:89: d6:be:d4:db:9c:bc:6e:07:d1:b1:3e:63:4c:15:d8:b0:95:a1: 12:69:2c:17:0e:ae:75:b7:23:c3:39:14:cb:19:68:13:5b:ae: 76:a1:65:51:e5:8b:bb:34:4e:b8:b8:1c:cd:45:7e:16:a2:7d: 36:0d:a5:42:91:66:41:18:02:9f:88:9d:ef:39:7f:1c:1d:50: 89:ea:a2:c4:21:96:6a:c2:52:cc:6b:ba:e0:15:7b:38:70:8e: 65:9e:a6:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutpfGk/jFKt3fPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmVmMTU4MzQtNzM5Zi00MGFhLTkyNzQtMzQ1NTIwM2FmNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbONDdh+B7DgAadhOgzAhe8baA984Uaaj+qf FwIches2RNBsAZsHPFRaDoxvb3fUTyyT22y3nTUzzIbWcsrM3EcSCufIklKKVytN bYFU9Daw6jzf0t3XJmIwfT0ktSxPP5TA/goRnYupBogkS1BHuCv+P61bNTnxofTk 1qr5Xpn0QOlvRQEs1GqMmh72P4CG5qfaIBABVR2T2p0ovTMv1hCqEgq8nc/EyXVM m71Su3lh36Psau5tvpPqsx0w1gHS88TQtgnPbrvZUGmhg+9i3ixT2Q6EMGd6p689 UWxYMAjqeH3T024w0GUpAqtVkj/BVbUc50z0ad56hKviwde8WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcEaJuW2RcYnEkJWespYWhNDBwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjIzZDg5MjAtZmIzNi0z ZTY3LTllYWYtNDJiY2ZkNDNmNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCY8R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMynrLEUsdEXxNRAt9wJz7e0Dmb9rSxZ+GzpJipCFMS/tnzTJuPKmiV GjeV1/OGg27rPr0k4Zo0vG9z+QSwHWaYRLSrpxblwZu8itUn99bDfyTmRR+NxHLQ HAqSuudZc+YoOHWyFYMH/xcByZhNKbjohVm+tr0Z6RB9rQzYK0A5burLKaeCeoOR GMazmj6YElHY4dsgEF6Ll9TI+uPlhE07ida+1NucvG4H0bE+Y0wV2LCVoRJpLBcO rnW3I8M5FMsZaBNbrnahZVHli7s0Tri4HM1FfhaifTYNpUKRZkEYAp+Ine85fxwd UInqosQhlmrCUsxruuAVezhwjmWepvM= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:24 2025 by rpki-client