$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5599ece-181d-3d11-b3e4-f8e0a8223897.roa File: c5599ece-181d-3d11-b3e4-f8e0a8223897.roa (raw, json) Hash identifier: woHnWN5/F6lIreENyQX9zyePdOH+aTUQ0QOfulG+Tgw= Subject key identifier: 1B:A8:74:D3:2C:2A:91:06:07:02:BB:3F:0E:6E:98:8F:82:DE:8E:F3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB258A9F54AFE6A1792B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5599ece-181d-3d11-b3e4-f8e0a8223897.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:25:8a:9f:54:af:e6:a1:79:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0bad32d7-7a7c-4ae2-9193-a43778fcccd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:7e:4b:ba:c8:4c:01:01:ce:61:27:17:05: 99:cc:f3:be:fa:72:83:9d:51:10:76:4f:32:7b:f9: e8:ac:86:53:d0:c7:40:88:34:46:f8:83:e2:1f:68: 6b:e1:db:46:b4:ca:d8:d6:1d:b5:79:39:84:94:76: 66:5e:4d:65:6b:ec:11:00:c4:a3:66:eb:5e:cf:f4: ec:ea:42:c0:36:2d:c0:bb:e0:d8:c0:d2:c7:7e:c7: 4c:ef:97:74:7a:32:24:ec:91:29:1c:47:9a:7b:fa: a9:7d:e9:41:15:e2:8e:6c:38:ab:38:da:97:ea:41: 72:76:3a:3a:18:bf:f2:db:f8:7e:2c:35:80:b1:c1: 83:09:64:a1:01:14:a1:a3:1d:5c:67:b7:67:1f:f3: fd:4f:50:b4:11:cd:06:ad:57:37:ec:59:21:02:19: 61:84:e3:a2:4f:0d:75:08:96:a7:80:f2:50:7d:b5: 0f:ee:59:1c:e3:ac:e1:e7:bd:9c:a7:b6:16:63:ba: 95:5f:2c:4c:3c:29:90:2d:5b:95:41:94:f9:33:38: 38:81:3c:c1:1c:ea:0a:30:59:67:81:a3:42:d3:4f: d0:ed:9c:68:07:fd:5a:cb:4e:cf:97:cc:4b:7e:2f: de:1f:78:fe:af:20:9a:ef:f6:79:bd:29:32:53:40: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A8:74:D3:2C:2A:91:06:07:02:BB:3F:0E:6E:98:8F:82:DE:8E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5599ece-181d-3d11-b3e4-f8e0a8223897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:47:53:32:95:df:1d:11:b7:89:17:df:e3:63:e3:d9:21:d3: 7f:17:ea:83:89:c0:f8:c1:ec:53:48:3e:23:bc:77:d4:9f:7f: 35:2f:2f:a7:8b:3f:98:a2:ab:70:49:46:cb:49:14:9e:2a:10: c2:a5:d6:1e:c6:1c:68:81:8a:4b:be:7d:53:16:60:78:cd:45: eb:57:63:6e:49:d8:b4:1b:d5:09:d1:57:3e:f8:55:eb:7b:50: f6:a0:52:74:d7:af:94:08:d0:16:fb:b1:a5:7e:fb:a8:5e:d9: 43:15:8d:12:88:cf:4c:43:8b:78:2d:06:68:83:e0:4a:47:0b: 70:4a:74:96:f2:f2:69:65:8f:e6:f9:b9:0f:29:c0:77:c0:15: 6a:75:85:48:65:0f:8d:a1:bf:9e:53:05:2d:51:61:60:db:21: 80:6a:6d:a8:f4:7e:b2:ca:12:a6:9e:a9:71:07:f5:3d:f8:95: 4b:da:bc:d4:aa:bd:82:a5:b8:04:01:5f:ad:34:89:8c:0e:2e: 22:bd:be:f7:2a:0c:ca:28:a4:24:36:54:8b:aa:4b:d0:21:95: dd:e8:86:eb:c7:76:36:88:8d:f5:ce:ad:01:44:de:e5:40:74: 38:db:71:78:ca:aa:c0:2a:0b:dd:06:11:db:f3:84:8c:91:e7: b1:ec:e9:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyWKn1Sv5qF5K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGJhZDMyZDctN2E3Yy00YWUyLTkxOTMtYTQzNzc4ZmNjY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbp+S7rITAEBzmEnFwWZzPO++nKDnVEQdk8y e/norIZT0MdAiDRG+IPiH2hr4dtGtMrY1h21eTmElHZmXk1la+wRAMSjZutez/Ts 6kLANi3Au+DYwNLHfsdM75d0ejIk7JEpHEeae/qpfelBFeKObDirONqX6kFydjo6 GL/y2/h+LDWAscGDCWShARShox1cZ7dnH/P9T1C0Ec0GrVc37FkhAhlhhOOiTw11 CJangPJQfbUP7lkc46zh572cp7YWY7qVXyxMPCmQLVuVQZT5Mzg4gTzBHOoKMFln gaNC00/Q7ZxoB/1ay07Pl8xLfi/eH3j+ryCa7/Z5vSkyU0D6OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuodNMsKpEGBwK7Pw5umI+C3o7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzU1OTllY2UtMTgxZC0z ZDExLWIzZTQtZjhlMGE4MjIzODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpHUzKV3x0Rt4kX3+Nj49kh038X6oOJwPjB7FNIPiO8d9SffzUvL6eL P5iiq3BJRstJFJ4qEMKl1h7GHGiBiku+fVMWYHjNRetXY25J2LQb1QnRVz74Vet7 UPagUnTXr5QI0Bb7saV++6he2UMVjRKIz0xDi3gtBmiD4EpHC3BKdJby8mllj+b5 uQ8pwHfAFWp1hUhlD42hv55TBS1RYWDbIYBqbaj0frLKEqaeqXEH9T34lUvavNSq vYKluAQBX600iYwOLiK9vvcqDMoopCQ2VIuqS9Ahld3ohuvHdjaIjfXOrQFE3uVA dDjbcXjKqsAqC90GEdvzhIyR57Hs6ck= -----END CERTIFICATE-----Generated at Sun Apr 27 18:52:00 2025 by rpki-client