$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43ceeb7-6d67-3fe2-9b66-d455d9c7148d.roa File: d43ceeb7-6d67-3fe2-9b66-d455d9c7148d.roa (raw, json) Hash identifier: SPNc3tpVwvOSi0Jh0+1uvyZfK6bfobNKdlaVSpA6QJU= Subject key identifier: 59:AC:A3:E9:B2:AE:19:0E:C1:79:95:3F:32:8A:B5:38:94:E7:F2:C6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB21C27459592628421780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43ceeb7-6d67-3fe2-9b66-d455d9c7148d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:21:c2:74:59:59:26:28:42:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=05fb9721-a7f5-47cc-8c02-05b7c2372474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:45:28:d4:06:f7:8a:6f:52:27:36:f0:f1:f7: 49:9c:54:e2:6b:32:a8:78:26:4f:ac:d8:6b:80:2e: 3f:44:ac:e4:6d:d2:44:f9:cb:6d:65:38:19:e9:0e: 03:69:f7:78:42:20:9a:71:3c:df:e1:09:b5:67:59: d0:b1:0c:5f:65:8b:75:6d:36:82:a7:41:3b:46:07: 2a:76:82:e8:e0:62:81:33:a9:02:54:d3:86:be:10: da:9d:02:39:20:68:93:97:d5:20:57:c6:7c:a4:02: 84:38:c9:4a:3a:ab:af:5e:28:41:a1:77:67:f3:21: 21:c4:97:93:29:73:5e:6f:34:40:0a:69:63:6f:4e: 4c:7f:1a:4e:66:2b:fb:75:53:d8:5e:98:5a:8e:f4: f7:17:3b:e5:a3:49:a8:56:9b:45:7e:a2:69:42:90: e4:b7:65:a5:be:3f:ea:ef:65:87:2e:e6:fe:46:22: f4:9f:1a:2e:f9:17:d3:9c:93:c8:30:49:38:be:7f: 27:a3:43:d9:3b:60:e5:ee:2f:00:a5:2d:f3:90:40: 12:7f:96:55:25:3b:05:d7:4c:cf:9a:49:6b:33:c5: ba:ec:0d:33:85:c1:0f:00:ae:a0:69:4e:54:3f:10: 38:15:57:73:d1:be:86:d2:17:2c:fc:0b:b2:79:3b: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AC:A3:E9:B2:AE:19:0E:C1:79:95:3F:32:8A:B5:38:94:E7:F2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43ceeb7-6d67-3fe2-9b66-d455d9c7148d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:70:39:f3:ff:61:dc:94:d1:89:ab:bb:f0:e8:f5:2a:63:db: 6a:64:95:b0:70:69:ff:de:c7:43:e2:49:08:2d:e8:77:3c:c9: 57:0a:4b:d1:35:a4:f1:73:fe:2a:91:aa:92:59:32:dd:48:5b: e9:dd:e4:3a:47:a7:e3:c3:8b:fc:85:62:cd:24:a0:46:3c:2d: 13:e2:66:dd:df:d1:bd:57:5b:21:1b:27:5a:ff:0f:64:93:0a: a5:fc:03:40:f8:9b:da:70:c1:c4:ac:3e:e9:d8:35:4a:1c:17: 60:23:37:21:ac:b8:84:e2:fe:f9:76:11:d6:5f:1f:be:41:8e: 0e:54:37:85:e1:eb:4e:c7:98:b5:eb:01:5e:2d:9e:5b:16:6e: ab:64:6c:df:f0:b1:63:c4:8c:80:01:2e:28:af:c5:4e:62:e3: d4:49:74:b5:55:33:ed:17:47:ac:e9:9d:a5:b0:19:b5:c5:1d: 8b:5b:08:0e:7b:85:30:96:b4:17:ef:54:d9:56:5d:28:a4:05: 58:c9:e9:a2:06:93:17:c8:c9:f5:86:47:ed:cc:34:e4:c4:f3: b9:f8:52:ed:e2:b7:c0:f5:71:5a:d6:8e:0d:8c:d6:4b:28:3a: 62:4c:b9:be:81:ac:ff:1d:8b:f7:91:fb:98:ca:81:d7:0c:4a: b3:2f:89:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyHCdFlZJihCF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDVmYjk3MjEtYTdmNS00N2NjLThjMDItMDViN2MyMzcyNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Uo1Ab3im9SJzbw8fdJnFTiazKoeCZPrNhr gC4/RKzkbdJE+cttZTgZ6Q4Dafd4QiCacTzf4Qm1Z1nQsQxfZYt1bTaCp0E7Rgcq doLo4GKBM6kCVNOGvhDanQI5IGiTl9UgV8Z8pAKEOMlKOquvXihBoXdn8yEhxJeT KXNebzRACmljb05MfxpOZiv7dVPYXphajvT3Fzvlo0moVptFfqJpQpDkt2Wlvj/q 72WHLub+RiL0nxou+RfTnJPIMEk4vn8no0PZO2Dl7i8ApS3zkEASf5ZVJTsF10zP mklrM8W67A0zhcEPAK6gaU5UPxA4FVdz0b6G0hcs/AuyeTuqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmso+myrhkOwXmVPzKKtTiU5/LGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDQzY2VlYjctNmQ2Ny0z ZmUyLTliNjYtZDQ1NWQ5YzcxNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdwOfP/YdyU0Ymru/Do9Spj22pklbBwaf/ex0PiSQgt6Hc8yVcKS9E1 pPFz/iqRqpJZMt1IW+nd5DpHp+PDi/yFYs0koEY8LRPiZt3f0b1XWyEbJ1r/D2ST CqX8A0D4m9pwwcSsPunYNUocF2AjNyGsuITi/vl2EdZfH75Bjg5UN4Xh607HmLXr AV4tnlsWbqtkbN/wsWPEjIABLiivxU5i49RJdLVVM+0XR6zpnaWwGbXFHYtbCA57 hTCWtBfvVNlWXSikBVjJ6aIGkxfIyfWGR+3MNOTE87n4Uu3it8D1cVrWjg2M1kso OmJMub6BrP8di/eR+5jKgdcMSrMviYQ= -----END CERTIFICATE-----Generated at Sun Apr 27 09:30:20 2025 by rpki-client