$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dff76d0d-be80-30aa-9e42-695774e1939b.roa File: dff76d0d-be80-30aa-9e42-695774e1939b.roa (raw, json) Hash identifier: +ZHvlax9Oajg0vw6BvLivsiqyIQ3/0058fDylwhqZ9c= Subject key identifier: 6E:B4:23:FA:3E:7F:71:33:F2:26:BC:F1:DF:2A:5C:AA:C8:01:37:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB1EC2434246BCDB848AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dff76d0d-be80-30aa-9e42-695774e1939b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:1e:c2:43:42:46:bc:db:84:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=eb982601-e38e-482b-8a64-36143cec1331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:9f:86:c2:7b:90:3c:ca:09:2f:f9:e8:aa: a2:c0:07:c2:41:ca:54:fc:76:ca:2b:d7:c5:d2:9d: 3d:51:ad:a0:17:0f:67:b7:d1:9c:ab:d4:f8:6e:db: 9e:d9:46:0d:1e:84:a5:c5:39:d9:18:54:42:80:d6: 4b:92:8c:60:75:4e:56:9c:cb:cc:4b:a3:90:75:01: 69:a8:c3:20:b6:31:0d:4a:d9:9c:d1:a1:2a:82:1b: c4:27:c7:d1:96:ec:32:d4:4a:77:44:5a:17:64:a4: df:f4:70:53:5c:a3:43:dd:34:86:19:5d:44:1e:b7: f0:35:60:a0:56:47:27:55:63:ad:ca:80:dd:d6:22: 7a:47:9b:f4:45:29:5f:e1:90:50:57:12:62:cf:f8: ac:69:40:bf:ad:ee:b5:fa:7a:44:59:39:43:20:c7: 31:06:3f:ea:17:eb:a6:a4:42:58:ae:bf:0d:8b:2d: da:14:27:3c:63:03:06:ac:a3:7f:3b:9d:e2:ab:bd: 28:7c:7e:10:ca:bb:77:39:7b:a9:27:14:a1:a6:78: d3:45:75:bd:f9:55:3a:1a:6e:cd:49:3b:e3:ff:4e: c4:3d:3b:c2:1c:e1:2e:86:f4:a7:23:10:e4:e1:d1: 7c:b3:dd:a2:6f:11:f2:13:cc:68:58:88:e4:4c:c8: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B4:23:FA:3E:7F:71:33:F2:26:BC:F1:DF:2A:5C:AA:C8:01:37:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dff76d0d-be80-30aa-9e42-695774e1939b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:72:f8:f6:a0:c1:3e:43:88:3e:11:d9:46:de:40:2d:69:92: 51:a1:c0:6b:36:78:5f:6d:6c:4f:c4:30:a9:d9:5b:7f:f2:24: ee:28:fd:fc:6c:e0:31:a1:76:f1:45:2d:ac:8b:45:6e:f9:bd: 37:75:07:ca:a9:31:22:e2:39:af:4b:81:d3:9d:58:64:7d:b4: e4:4e:7e:c4:e0:52:cd:7b:50:b0:1f:6b:46:0f:ab:85:90:c2: bb:e4:ec:7b:7f:9f:e2:e0:83:aa:75:1b:1c:f0:95:9f:2d:c2: 0a:9c:11:af:0a:96:b1:6e:63:b0:8d:10:8d:09:af:a4:c8:7c: 76:6e:06:03:4b:6f:3d:98:5a:b6:b1:f6:e3:39:e9:76:2d:bc: ac:30:e7:82:43:dc:c4:81:e8:f7:f8:4d:e5:8c:0a:80:9c:8c: b9:55:3a:82:5a:94:d0:c1:20:aa:36:3a:e9:21:99:c6:2b:14: 4e:1d:c6:d0:82:ac:27:af:40:ba:9d:55:6d:6e:40:84:ff:da: ef:f5:fb:10:d4:12:40:5c:53:e6:ad:d2:0f:de:00:64:ab:e6: f2:cc:53:a5:11:6a:48:fc:db:ac:42:5d:5f:b0:b4:71:e0:e9: fd:31:43:25:ba:18:27:13:e5:c6:57:d3:62:a2:9d:21:98:b0: 66:94:4f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkux7CQ0JGvNuEisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWI5ODI2MDEtZTM4ZS00ODJiLThhNjQtMzYxNDNjZWMxMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bCfhsJ7kDzKCS/56KqiwAfCQcpU/HbKK9fF 0p09Ua2gFw9nt9Gcq9T4btue2UYNHoSlxTnZGFRCgNZLkoxgdU5WnMvMS6OQdQFp qMMgtjENStmc0aEqghvEJ8fRluwy1Ep3RFoXZKTf9HBTXKND3TSGGV1EHrfwNWCg VkcnVWOtyoDd1iJ6R5v0RSlf4ZBQVxJiz/isaUC/re61+npEWTlDIMcxBj/qF+um pEJYrr8Niy3aFCc8YwMGrKN/O53iq70ofH4Qyrt3OXupJxShpnjTRXW9+VU6Gm7N STvj/07EPTvCHOEuhvSnIxDk4dF8s92ibxHyE8xoWIjkTMil8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG60I/o+f3Ez8ia88d8qXKrIATduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGZmNzZkMGQtYmU4MC0z MGFhLTllNDItNjk1Nzc0ZTE5MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJy+PagwT5DiD4R2UbeQC1pklGhwGs2eF9tbE/EMKnZW3/yJO4o/fxs 4DGhdvFFLayLRW75vTd1B8qpMSLiOa9LgdOdWGR9tOROfsTgUs17ULAfa0YPq4WQ wrvk7Ht/n+Lgg6p1GxzwlZ8twgqcEa8KlrFuY7CNEI0Jr6TIfHZuBgNLbz2YWrax 9uM56XYtvKww54JD3MSB6Pf4TeWMCoCcjLlVOoJalNDBIKo2OukhmcYrFE4dxtCC rCevQLqdVW1uQIT/2u/1+xDUEkBcU+at0g/eAGSr5vLMU6URakj826xCXV+wtHHg 6f0xQyW6GCcT5cZX02KinSGYsGaUT3U= -----END CERTIFICATE-----Generated at Mon Apr 28 02:49:10 2025 by rpki-client