$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b6ab26-be42-312e-9dcc-4e20bf01eca2.roa File: d8b6ab26-be42-312e-9dcc-4e20bf01eca2.roa (raw, json) Hash identifier: 1ZbnMWTKSKiZw5qa15dJNVHBF3So86rlKbEON/8W9Ys= Subject key identifier: 18:98:72:2C:34:0A:D0:04:DA:79:ED:37:9C:D6:D5:AE:97:B5:97:22 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA887FE0E31ACE0BDD6900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b6ab26-be42-312e-9dcc-4e20bf01eca2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:88:7f:e0:e3:1a:ce:0b:dd:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e9fd2943-79ff-4450-99fc-bf8b2bc0f2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:25:48:52:52:f5:09:d3:4e:c3:74:9a:28: f0:d5:e7:8d:f2:08:cb:c2:8d:c2:a8:21:fc:85:5c: 98:f3:50:72:56:70:b3:01:22:3b:7f:32:30:a1:ca: 0c:30:ee:ae:9b:38:f7:e0:c8:64:68:c1:9e:06:e2: 8d:e4:22:d0:64:0e:4e:6a:90:b6:b6:3d:eb:14:f1: 2f:12:0d:da:81:4e:a1:57:e8:4d:33:f9:19:c0:f2: 78:c0:f6:ce:28:66:19:83:f5:f3:c4:67:23:0b:83: b4:c1:0c:9a:ae:4a:50:92:6d:74:8d:27:b4:1e:5e: df:c3:ad:92:14:f8:4a:34:c1:7a:e0:1d:6e:e3:ee: 5d:35:c5:92:d0:53:90:16:4a:13:e0:e5:7c:df:11: 23:d5:c4:5d:bc:6a:27:c0:f5:11:48:2d:5a:6a:b5: 70:78:59:8c:e9:23:7d:8e:a1:08:ad:b2:d0:68:26: 68:fb:76:8c:0c:5e:2c:6e:7a:ef:c3:0a:dc:a9:0e: 50:5d:f0:cb:3c:24:54:18:d2:be:c1:90:35:a0:df: 3f:43:92:d0:0b:75:88:af:60:22:d1:ad:03:57:92: f8:93:c4:e3:87:da:67:2e:3c:95:07:0c:59:b7:45: 15:6f:59:fa:58:a4:c1:18:f8:f8:53:30:48:76:b0: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:98:72:2C:34:0A:D0:04:DA:79:ED:37:9C:D6:D5:AE:97:B5:97:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b6ab26-be42-312e-9dcc-4e20bf01eca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fa:30:22:92:b1:9c:a7:96:3c:8d:7a:e7:93:f3:7a:af:30: fc:8f:eb:1f:4c:c0:6d:4f:11:1b:e9:6c:f4:b7:07:86:36:28: ea:5f:85:68:fc:77:7a:69:33:5b:b6:14:72:b8:bf:a7:1b:68: 19:b4:7e:4a:fc:68:44:34:f3:2e:e2:86:df:43:27:95:bf:42: 67:ae:a3:7f:21:73:d9:04:ac:62:74:cf:48:c1:a7:67:e9:fb: a7:a0:5b:e3:e1:e1:63:ae:3a:be:79:ce:19:47:d7:ad:96:cd: 81:72:f7:36:b8:b5:85:20:84:66:30:27:9e:42:39:37:e0:5c: 1d:23:1a:57:2b:e7:a4:81:37:00:71:13:67:20:0e:2d:eb:25: e9:6e:3b:0a:95:54:24:09:5b:9a:ca:fc:6a:18:35:a1:49:fc: 5f:9e:cf:11:56:ee:4c:ce:fb:26:84:29:1f:aa:5d:08:02:32: d6:fe:78:cf:77:d7:8e:0c:fa:a5:d8:6e:63:f7:c3:fa:b7:a4: 18:91:52:08:2f:18:c6:22:d0:53:65:e4:52:02:a0:4c:9c:bd: c5:37:86:f0:61:5b:92:b2:05:a3:20:28:3b:69:d0:4b:d6:ef: ae:f0:d9:8d:e7:82:04:6a:32:65:0e:25:90:c3:99:ae:4f:44: 1f:fb:b4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuoh/4OMazgvdaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTlmZDI5NDMtNzlmZi00NDUwLTk5ZmMtYmY4YjJiYzBmMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAElSFJS9QnTTsN0mijw1eeN8gjLwo3CqCH8 hVyY81ByVnCzASI7fzIwocoMMO6umzj34MhkaMGeBuKN5CLQZA5OapC2tj3rFPEv Eg3agU6hV+hNM/kZwPJ4wPbOKGYZg/XzxGcjC4O0wQyarkpQkm10jSe0Hl7fw62S FPhKNMF64B1u4+5dNcWS0FOQFkoT4OV83xEj1cRdvGonwPURSC1aarVweFmM6SN9 jqEIrbLQaCZo+3aMDF4sbnrvwwrcqQ5QXfDLPCRUGNK+wZA1oN8/Q5LQC3WIr2Ai 0a0DV5L4k8Tjh9pnLjyVBwxZt0UVb1n6WKTBGPj4UzBIdrChQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiYciw0CtAE2nntN5zW1a6XtZciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDhiNmFiMjYtYmU0Mi0z MTJlLTlkY2MtNGUyMGJmMDFlY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL6MCKSsZynljyNeueT83qvMPyP6x9MwG1PERvpbPS3B4Y2KOpfhWj8 d3ppM1u2FHK4v6cbaBm0fkr8aEQ08y7iht9DJ5W/Qmeuo38hc9kErGJ0z0jBp2fp +6egW+Ph4WOuOr55zhlH162WzYFy9za4tYUghGYwJ55COTfgXB0jGlcr56SBNwBx E2cgDi3rJeluOwqVVCQJW5rK/GoYNaFJ/F+ezxFW7kzO+yaEKR+qXQgCMtb+eM93 144M+qXYbmP3w/q3pBiRUggvGMYi0FNl5FICoEycvcU3hvBhW5KyBaMgKDtp0EvW 767w2Y3nggRqMmUOJZDDma5PRB/7tEk= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:30 2025 by rpki-client