$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d0713b-588a-3a6f-a31f-c112de601541.roa File: c5d0713b-588a-3a6f-a31f-c112de601541.roa (raw, json) Hash identifier: 3dXhfD6qQLaEYDTYXLRMTKpEgQdDGMF3fSL4oTncotU= Subject key identifier: EA:14:21:52:27:37:A3:D2:84:35:67:14:3F:A7:4B:F0:FF:98:70:76 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB235A1DDDF404DB055D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d0713b-588a-3a6f-a31f-c112de601541.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:23:5a:1d:dd:f4:04:db:05:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5a8271a2-d2c3-4539-b383-d3537db15488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:16:92:8d:47:21:d9:3c:d0:48:1d:6b:a8: 4e:c1:8c:a7:86:ac:d1:46:3e:ce:af:e5:da:88:4e: 21:6e:a6:18:81:00:a7:14:93:db:ae:fd:c9:5d:2f: 45:7e:b2:d7:18:fe:23:80:9c:cb:48:e8:c2:2c:96: b2:b4:33:22:94:d1:24:ea:de:54:10:80:8d:0c:e4: 5d:8d:88:b2:7e:04:c6:7d:c7:26:38:14:82:89:46: 26:be:ab:42:0c:f1:c1:1a:bc:96:80:a6:b0:ff:5c: 45:d6:db:57:71:f7:b3:49:b0:62:8b:81:57:f2:33: 01:b1:9c:33:99:34:22:9c:e4:60:99:c5:7e:e7:57: cb:e7:26:9e:25:dd:70:36:f5:c7:f6:dd:50:35:a5: 92:fd:c8:9b:04:1a:cc:08:53:c7:c2:8a:2e:e5:7d: 29:9c:f0:b4:25:61:df:2b:d6:66:e6:fb:8c:d8:e4: 17:00:34:43:c6:ed:32:93:e4:64:e2:f2:9e:58:d3: 18:99:b4:da:c3:98:7e:60:fd:b3:b1:a7:42:0b:e7: 80:3f:fc:50:fb:a3:4d:ca:44:9e:f2:5c:0f:d5:68: 77:dc:db:84:62:ee:93:da:ed:0e:43:39:f9:b4:0d: c4:d3:17:21:ca:db:69:cb:86:ad:25:86:da:85:54: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:14:21:52:27:37:A3:D2:84:35:67:14:3F:A7:4B:F0:FF:98:70:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d0713b-588a-3a6f-a31f-c112de601541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fa:d2:45:38:d8:cf:a8:c2:b8:8a:74:3d:17:6e:0f:cd:4c: 52:ac:c5:9e:9c:69:dc:b6:f1:ff:e1:be:cb:ee:e9:6d:ae:e8: 96:6a:b4:31:d1:ce:e2:12:17:b9:ce:6b:4b:3a:85:06:4a:0d: f7:a7:19:ab:3d:17:60:87:fa:fe:36:f2:a5:a7:37:6d:36:40: 84:d1:0e:f0:84:75:3d:8f:8f:71:ac:73:2d:47:1c:e4:44:3d: 6a:c1:01:36:4f:d4:65:6c:d7:3e:b4:8e:ca:82:05:d9:24:3a: 08:54:2a:2b:79:ee:1e:fc:98:be:ec:7c:43:42:8d:1b:c2:56: 16:ff:a1:ec:c9:89:c1:cd:84:3e:72:12:e3:49:62:db:d9:94: 25:8b:d4:54:03:bf:50:65:bc:26:45:91:e5:97:32:27:a1:d9: 5c:34:ad:18:57:b0:a1:e2:03:85:80:64:e9:c1:76:00:7e:7f: 32:88:be:d2:ae:b5:83:13:46:76:54:34:19:cf:a5:7c:96:66: f3:94:4f:e8:8e:0e:70:9a:b9:36:f4:71:ef:a3:38:94:3b:e0: 96:1b:05:56:88:2d:ef:12:56:03:7b:14:3a:27:fd:bf:e4:4d: b5:ec:1b:75:74:ca:fd:db:ce:4f:19:a9:d5:13:aa:b1:74:41: d8:54:e0:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyNaHd30BNsFXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWE4MjcxYTItZDJjMy00NTM5LWIzODMtZDM1MzdkYjE1NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi4Wko1HIdk80Egda6hOwYynhqzRRj7Or+Xa iE4hbqYYgQCnFJPbrv3JXS9FfrLXGP4jgJzLSOjCLJaytDMilNEk6t5UEICNDORd jYiyfgTGfccmOBSCiUYmvqtCDPHBGryWgKaw/1xF1ttXcfezSbBii4FX8jMBsZwz mTQinORgmcV+51fL5yaeJd1wNvXH9t1QNaWS/cibBBrMCFPHwoou5X0pnPC0JWHf K9Zm5vuM2OQXADRDxu0yk+Rk4vKeWNMYmbTaw5h+YP2zsadCC+eAP/xQ+6NNykSe 8lwP1Wh33NuEYu6T2u0OQzn5tA3E0xchyttpy4atJYbahVRXKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoUIVInN6PShDVnFD+nS/D/mHB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzVkMDcxM2ItNTg4YS0z YTZmLWEzMWYtYzExMmRlNjAxNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH60kU42M+owriKdD0Xbg/NTFKsxZ6cady28f/hvsvu6W2u6JZqtDHR zuISF7nOa0s6hQZKDfenGas9F2CH+v428qWnN202QITRDvCEdT2Pj3Gscy1HHORE PWrBATZP1GVs1z60jsqCBdkkOghUKit57h78mL7sfENCjRvCVhb/oezJicHNhD5y EuNJYtvZlCWL1FQDv1BlvCZFkeWXMieh2Vw0rRhXsKHiA4WAZOnBdgB+fzKIvtKu tYMTRnZUNBnPpXyWZvOUT+iODnCauTb0ce+jOJQ74JYbBVaILe8SVgN7FDon/b/k TbXsG3V0yv3bzk8ZqdUTqrF0QdhU4NI= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:32 2025 by rpki-client