$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec2acfc4-da65-30a7-9bfd-3776e0c2c05a.roa File: ec2acfc4-da65-30a7-9bfd-3776e0c2c05a.roa (raw, json) Hash identifier: v/cMd1uhvLg6i2NmzbWLwVl5RpB4qmqkr8g3a/Aa7wY= Subject key identifier: 18:D0:80:D0:7A:27:BA:05:E3:C8:13:56:D4:C8:12:A1:FA:84:68:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB1D1696B21003E24C3300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec2acfc4-da65-30a7-9bfd-3776e0c2c05a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:1d:16:96:b2:10:03:e2:4c:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=00a6d6f9-23bd-4203-852e-2dd1530bd5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:14:e7:aa:64:aa:fe:c9:e5:b7:b0:fd:f6:94: f5:b2:ea:c8:ab:c7:4d:7b:93:c6:4a:32:57:56:17: b0:03:64:a5:5c:02:71:b3:a1:b0:26:37:17:14:58: f5:bf:c4:b6:e1:b3:2b:12:f1:cd:e7:9e:68:3a:cd: 4f:49:9b:e7:a9:c3:a9:ee:b1:43:00:42:f1:46:d4: 0b:76:e9:8b:5f:bd:1a:76:cd:56:7f:e4:0c:a0:ea: 90:64:ce:09:32:95:1d:f7:a0:59:45:5e:44:14:11: 12:fd:f3:b7:56:9f:e8:31:35:af:ca:97:3b:f4:6d: af:f9:1f:a7:9a:2a:38:c1:58:43:c3:e5:60:d3:98: c8:99:27:a5:10:19:2d:55:48:8b:df:02:a5:0e:3c: a8:79:eb:d3:4f:68:f2:5c:3e:0f:27:f5:75:d8:64: 2c:b1:b1:e2:ac:da:88:1c:fd:19:53:58:b3:50:61: 2a:46:23:8e:a3:dd:6a:4f:1e:0c:d9:c1:06:30:fe: de:c6:d0:47:29:91:5f:a0:00:89:4a:20:7d:95:4f: 1b:0d:a2:2e:5f:29:d0:f3:0a:77:59:d8:fe:26:9c: 5f:28:2f:b1:e4:67:d5:11:74:6f:50:03:e8:20:4e: ce:b4:5b:9c:cb:86:20:1c:c0:da:7b:69:36:f5:d1: 98:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:80:D0:7A:27:BA:05:E3:C8:13:56:D4:C8:12:A1:FA:84:68:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec2acfc4-da65-30a7-9bfd-3776e0c2c05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:58:fd:36:21:3b:cc:d5:9d:51:13:10:83:be:88:10:ba:df: 2b:00:a2:61:2b:59:9c:50:0d:49:b7:63:a2:6d:43:6e:0c:e9: d4:46:9c:1d:80:13:c7:d6:7f:b6:3b:0a:1f:74:1c:11:3f:f6: eb:fd:8f:2a:5d:e3:08:54:2a:f7:ff:f3:a6:c6:1d:43:b8:ca: ca:20:e7:6c:54:81:61:c6:ee:15:ab:8d:f8:9d:55:0d:77:1e: 71:23:b0:d9:be:88:98:5d:15:d7:68:7a:83:7a:1e:b7:5d:61: 7d:1e:8d:2f:8b:54:93:1b:c6:83:9a:68:6d:5c:b0:a2:cf:e0: 8b:4c:0f:c9:39:d9:c3:36:c6:ea:91:53:54:c0:3b:ea:84:02: 97:80:40:6d:25:d6:90:48:19:2a:52:5c:92:a2:5f:31:e0:4e: 24:08:00:a4:a5:c4:b2:ac:7b:eb:60:db:97:05:05:ab:ee:aa: 1f:99:fa:89:15:3c:07:57:aa:80:7f:85:dd:1a:09:71:a3:9f: d1:4c:ef:13:61:43:07:5b:fa:6f:1b:f9:ff:1d:5b:b2:0a:1c: 4d:b6:94:b0:aa:4b:34:13:d7:cd:b7:1f:47:19:b5:9c:f8:7d: 8b:f3:fb:9c:ee:92:01:fb:70:19:f3:31:f3:95:a0:2a:68:03: 1e:61:96:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkux0WlrIQA+JMMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDBhNmQ2ZjktMjNiZC00MjAzLTg1MmUtMmRkMTUzMGJkNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBTnqmSq/snlt7D99pT1surIq8dNe5PGSjJX VhewA2SlXAJxs6GwJjcXFFj1v8S24bMrEvHN555oOs1PSZvnqcOp7rFDAELxRtQL dumLX70ads1Wf+QMoOqQZM4JMpUd96BZRV5EFBES/fO3Vp/oMTWvypc79G2v+R+n mio4wVhDw+Vg05jImSelEBktVUiL3wKlDjyoeevTT2jyXD4PJ/V12GQssbHirNqI HP0ZU1izUGEqRiOOo91qTx4M2cEGMP7extBHKZFfoACJSiB9lU8bDaIuXynQ8wp3 Wdj+JpxfKC+x5GfVEXRvUAPoIE7OtFucy4YgHMDae2k29dGY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjQgNB6J7oF48gTVtTIEqH6hGjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWMyYWNmYzQtZGE2NS0z MGE3LTliZmQtMzc3NmUwYzJjMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRY/TYhO8zVnVETEIO+iBC63ysAomErWZxQDUm3Y6JtQ24M6dRGnB2A E8fWf7Y7Ch90HBE/9uv9jypd4whUKvf/86bGHUO4ysog52xUgWHG7hWrjfidVQ13 HnEjsNm+iJhdFddoeoN6HrddYX0ejS+LVJMbxoOaaG1csKLP4ItMD8k52cM2xuqR U1TAO+qEApeAQG0l1pBIGSpSXJKiXzHgTiQIAKSlxLKse+tg25cFBavuqh+Z+okV PAdXqoB/hd0aCXGjn9FM7xNhQwdb+m8b+f8dW7IKHE22lLCqSzQT1823H0cZtZz4 fYvz+5zukgH7cBnzMfOVoCpoAx5hllA= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:44 2025 by rpki-client