$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3a8c3d2-1cd0-3a75-8a01-a08f98321a53.roa File: f3a8c3d2-1cd0-3a75-8a01-a08f98321a53.roa (raw, json) Hash identifier: OUyqjJM9VXR/b01PWx3txMAVqw0gqlB24xpzPFP94Eg= Subject key identifier: 36:8C:BB:9D:72:81:54:DB:8D:76:5F:E7:0F:3C:DE:06:42:C7:3F:66 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB26DF0F5DD7BD23639740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3a8c3d2-1cd0-3a75-8a01-a08f98321a53.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:26:df:0f:5d:d7:bd:23:63:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=51f1aca9-72bb-4eca-b8b3-aef3dbe2ef8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:3f:7e:20:7c:14:1b:c6:cf:34:cc:05:15: 9a:6a:08:36:0b:72:46:66:1f:a4:81:aa:7e:7c:4d: a1:d7:75:ba:8c:d3:87:d4:ee:04:cf:86:93:bb:65: 79:8e:e1:2f:07:cb:0a:a5:fd:8f:cf:6c:b6:a6:68: ae:79:92:13:2d:81:21:81:0a:a9:46:5c:78:a7:4b: 91:03:32:72:5e:76:8e:43:43:b2:d4:e4:72:d1:df: c7:32:dd:5d:0e:6e:6f:a5:fa:5d:5f:0d:59:7b:67: d8:0c:b9:e6:52:f7:a9:b2:af:63:7b:1d:dc:6b:d9: d5:4f:dc:17:69:8b:d8:76:76:bc:bf:16:5b:78:7f: 3c:7d:dc:cd:54:91:16:dd:ae:4a:23:a3:40:c8:a9: 79:ec:ea:db:f8:bf:f0:f6:25:7e:ad:12:62:fc:66: 23:49:29:70:3e:37:5e:18:2d:55:b5:1a:48:22:79: f8:4e:59:12:9e:be:57:b1:9f:c6:be:31:c9:de:07: b7:cf:5a:c5:ba:1d:bb:40:9b:38:50:9c:46:ff:98: e8:00:b4:67:37:cb:d7:4e:ca:d8:69:a5:ad:79:c8: a0:27:74:a0:f7:3b:fa:72:cb:49:3d:16:1e:9b:41: d4:a2:76:5d:fb:82:5b:3e:46:ad:98:44:d9:7e:b0: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8C:BB:9D:72:81:54:DB:8D:76:5F:E7:0F:3C:DE:06:42:C7:3F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3a8c3d2-1cd0-3a75-8a01-a08f98321a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:81:55:45:f7:6a:13:65:ce:c0:8b:27:2f:ce:83:63:19:c8: db:4f:90:de:bf:05:83:a3:c0:e4:3c:1d:18:17:37:3a:fe:c0: 28:ac:04:79:90:28:27:a7:e6:14:8d:a6:30:03:fd:a3:b4:61: 7f:d6:c1:75:ce:1d:3d:d1:d8:b7:80:92:3b:c4:f0:43:f3:7e: 20:dd:5c:36:b4:33:53:3d:39:45:e4:cd:32:36:1f:c5:cf:df: 84:d7:13:a1:05:cc:5b:78:93:31:5a:52:ae:44:13:85:0d:df: 7b:dd:88:4a:9c:8f:ce:e4:07:b1:cb:2b:c2:5d:ee:3d:95:3a: bf:d2:d8:3f:cd:60:d7:a4:9c:4c:d6:b4:e9:fb:59:05:f7:a4: a3:40:7e:69:07:38:8e:5e:db:c2:dd:d2:b7:c1:97:61:43:2e: 87:80:22:a8:6a:12:e8:04:a4:e8:18:fc:ef:33:87:f1:5d:ec: 26:80:0c:2f:ab:c0:bd:d1:ac:95:af:da:fe:d2:f2:fb:92:77: f7:bd:62:44:31:04:41:26:c4:39:27:d2:a1:58:d8:55:de:a9: 21:38:37:55:d7:eb:d0:b5:ae:4f:a9:56:e7:22:68:5e:0b:e5: 29:c4:33:b9:cb:f1:63:35:03:48:f3:37:70:16:30:1d:a0:5f: 39:ee:75:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuybfD13XvSNjl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTFmMWFjYTktNzJiYi00ZWNhLWI4YjMtYWVmM2RiZTJlZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/8/fiB8FBvGzzTMBRWaagg2C3JGZh+kgap+ fE2h13W6jNOH1O4Ez4aTu2V5juEvB8sKpf2Pz2y2pmiueZITLYEhgQqpRlx4p0uR AzJyXnaOQ0Oy1ORy0d/HMt1dDm5vpfpdXw1Ze2fYDLnmUvepsq9jex3ca9nVT9wX aYvYdna8vxZbeH88fdzNVJEW3a5KI6NAyKl57Orb+L/w9iV+rRJi/GYjSSlwPjde GC1VtRpIInn4TlkSnr5XsZ/GvjHJ3ge3z1rFuh27QJs4UJxG/5joALRnN8vXTsrY aaWtecigJ3Sg9zv6cstJPRYem0HUonZd+4JbPkatmETZfrDwAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaMu51ygVTbjXZf5w883gZCxz9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjNhOGMzZDItMWNkMC0z YTc1LThhMDEtYTA4Zjk4MzIxYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWBVUX3ahNlzsCLJy/Og2MZyNtPkN6/BYOjwOQ8HRgXNzr+wCisBHmQ KCen5hSNpjAD/aO0YX/WwXXOHT3R2LeAkjvE8EPzfiDdXDa0M1M9OUXkzTI2H8XP 34TXE6EFzFt4kzFaUq5EE4UN33vdiEqcj87kB7HLK8Jd7j2VOr/S2D/NYNeknEzW tOn7WQX3pKNAfmkHOI5e28Ld0rfBl2FDLoeAIqhqEugEpOgY/O8zh/Fd7CaADC+r wL3RrJWv2v7S8vuSd/e9YkQxBEEmxDkn0qFY2FXeqSE4N1XX69C1rk+pVuciaF4L 5SnEM7nL8WM1A0jzN3AWMB2gXznudRc= -----END CERTIFICATE-----Generated at Sun Apr 27 09:28:09 2025 by rpki-client