$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa File: bbb8337a-8c73-3691-9038-f5a02949da6f.roa (raw, json) Hash identifier: 7YlMfposc8FePSoFJS/kBPb5vtGIPfK9M/OhG9fBRGA= Subject key identifier: 0C:27:8A:32:E3:C7:B6:B4:50:05:E5:45:68:4A:90:AB:E0:A3:8A:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA85C96EC8376510583700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:85:c9:6e:c8:37:65:10:58:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3f2f1f75-d5ae-45a5-857a-4ddd3138cf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:9f:7f:5f:9b:8c:ad:69:4e:01:6f:b0:b5: e8:26:ee:0e:21:50:ec:37:92:09:95:43:a1:89:1d: 0f:7d:fe:d8:ac:e2:97:e5:66:b8:48:90:16:9c:43: ee:77:c1:bd:08:29:1a:32:84:7b:2c:1d:c1:c6:30: 4f:e9:a2:af:b8:79:b7:30:5a:92:5c:c4:9a:c8:0a: 38:d2:fd:d2:db:7a:ea:b5:8e:98:ed:e6:dd:59:56: ad:ae:be:3b:3f:95:3a:e3:61:df:28:57:76:45:1c: cf:94:03:37:ab:7f:20:ad:90:3f:d4:1a:98:0b:cd: af:78:ce:3b:bd:d0:0e:d6:5d:15:7f:9c:58:cd:37: c7:24:9e:a0:7f:c0:83:5f:83:b7:f6:e7:55:88:b9: c8:da:7e:68:8f:6e:85:80:ba:8f:fc:1b:92:51:bf: 4b:06:b4:53:bd:a7:35:98:69:75:b6:82:68:1a:11: 3c:64:4f:00:ef:8b:67:c3:56:b0:4c:5e:5a:15:e1: 14:64:41:1d:c5:92:52:e4:b8:e1:56:ce:79:05:6a: bd:9c:ed:93:c5:10:eb:17:75:78:19:7e:e5:03:e9: 9c:3b:d6:34:af:9b:d3:a4:a3:64:fb:ce:d2:66:e2: 37:84:a3:e5:0f:63:cf:09:8e:f9:1f:87:2e:e3:79: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:27:8A:32:E3:C7:B6:B4:50:05:E5:45:68:4A:90:AB:E0:A3:8A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb8337a-8c73-3691-9038-f5a02949da6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:20:73:be:fc:e8:7c:81:8d:81:13:b0:d0:31:71:15:0e:8b: 02:f7:bb:cd:4e:d5:db:1c:76:21:54:0e:f3:54:8b:c9:b0:fa: d7:da:4b:d9:9b:67:2b:72:9c:1b:c1:e8:25:63:eb:6b:68:09: 1a:9c:47:e3:28:7b:b7:7b:cf:21:06:83:b6:9a:02:ef:bd:6e: 40:a9:21:13:37:cc:d7:03:fb:f0:26:fa:d4:ee:a1:f7:76:1d: 46:ff:b6:ef:2e:5e:75:42:4b:e9:60:1c:54:46:c5:c1:e5:60: 0c:ef:2d:51:0f:da:bb:76:8a:66:e8:03:c6:1a:1f:20:17:a7: 3b:f7:28:b4:2e:94:52:6b:26:01:08:3e:b9:a5:13:51:84:b5: 98:b7:45:14:4c:59:ca:fa:56:90:79:0f:01:02:6c:ab:0d:84: 13:6f:f8:dc:3e:bf:7d:1b:b6:22:22:3a:ea:f2:66:a2:35:d5: 48:d8:f6:a3:af:0b:55:ee:90:65:20:9e:71:6c:df:9b:5c:20: 5a:09:90:2d:8f:bc:eb:67:67:41:97:b8:40:b5:d2:18:42:47: b5:43:af:9c:d1:92:5e:18:36:f5:e7:d6:27:1a:e2:c7:18:8d: ee:0b:b1:74:a5:19:b4:b2:f3:46:2e:f3:44:85:f4:3c:af:36: 4a:d7:26:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuoXJbsg3ZRBYNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2YyZjFmNzUtZDVhZS00NWE1LTg1N2EtNGRkZDMxMzhjZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib+ff1+bjK1pTgFvsLXoJu4OIVDsN5IJlUOh iR0Pff7YrOKX5Wa4SJAWnEPud8G9CCkaMoR7LB3BxjBP6aKvuHm3MFqSXMSayAo4 0v3S23rqtY6Y7ebdWVatrr47P5U642HfKFd2RRzPlAM3q38grZA/1BqYC82veM47 vdAO1l0Vf5xYzTfHJJ6gf8CDX4O39udViLnI2n5oj26FgLqP/BuSUb9LBrRTvac1 mGl1toJoGhE8ZE8A74tnw1awTF5aFeEUZEEdxZJS5LjhVs55BWq9nO2TxRDrF3V4 GX7lA+mcO9Y0r5vTpKNk+87SZuI3hKPlD2PPCY75H4cu43n2vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwnijLjx7a0UAXlRWhKkKvgo4qCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmJiODMzN2EtOGM3My0z NjkxLTkwMzgtZjVhMDI5NDlkYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUgc7786HyBjYETsNAxcRUOiwL3u81O1dscdiFUDvNUi8mw+tfaS9mb ZytynBvB6CVj62toCRqcR+Moe7d7zyEGg7aaAu+9bkCpIRM3zNcD+/Am+tTuofd2 HUb/tu8uXnVCS+lgHFRGxcHlYAzvLVEP2rt2imboA8YaHyAXpzv3KLQulFJrJgEI PrmlE1GEtZi3RRRMWcr6VpB5DwECbKsNhBNv+Nw+v30btiIiOuryZqI11UjY9qOv C1XukGUgnnFs35tcIFoJkC2PvOtnZ0GXuEC10hhCR7VDr5zRkl4YNvXn1ica4scY je4LsXSlGbSy80Yu80SF9DyvNkrXJu8= -----END CERTIFICATE-----Generated at Sun Apr 27 04:12:45 2025 by rpki-client