$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f52990c8-e80a-3c1d-8b9f-a856f50c9573.roa File: f52990c8-e80a-3c1d-8b9f-a856f50c9573.roa (raw, json) Hash identifier: Q81Gw7nfFYSMEZEsFZ3/DE1gC3zOVyHEbyYCfQXbhEE= Subject key identifier: 89:B9:53:4B:E9:5F:DD:54:1E:A8:E8:F1:0B:30:4B:FA:39:73:34:7C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB273A27D37C5D9D03FA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f52990c8-e80a-3c1d-8b9f-a856f50c9573.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:27:3a:27:d3:7c:5d:9d:03:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2a291b32-87e6-48af-bed5-270255519c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:b7:6d:4c:88:da:0f:c1:24:a8:6f:06:37: 38:39:3b:00:ad:a7:c3:81:74:af:78:d7:ac:ad:e0: a6:af:92:0d:2b:6f:54:02:f4:99:66:01:6c:86:01: 5a:5e:30:ac:82:0c:4f:e6:a1:11:bd:91:21:49:26: d1:79:1f:1d:01:94:4f:be:43:2c:1d:76:43:34:6f: 5e:2c:fb:ef:b3:fe:5a:4f:81:de:1f:c4:67:37:e6: 47:bf:49:90:bd:fa:a1:bc:3c:ff:4e:46:e8:76:c0: 79:b2:f5:f1:84:92:39:5f:72:4f:97:25:cf:05:b4: 94:dd:27:b9:69:49:64:95:93:7d:c4:a9:42:65:00: 60:2f:5e:d5:0f:fe:1e:ae:b4:a3:cb:20:1b:ed:f0: ae:cf:8c:c8:34:1e:7c:57:2a:0d:54:d8:f0:36:49: c1:20:ce:d2:ba:3f:99:74:1b:5c:cf:f1:9d:5e:4b: 05:39:d6:f7:63:b5:36:fe:42:1d:33:9c:98:bd:17: 65:a9:85:e4:01:bb:7a:65:c8:87:fa:86:c4:23:71: 55:ef:d5:c8:87:a5:7b:ae:80:53:7d:8c:7d:59:1e: 13:71:76:52:51:89:2c:2b:0e:45:9d:30:56:13:dc: 00:ac:dc:27:6c:f8:c3:86:15:1d:a0:1d:39:12:28: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:53:4B:E9:5F:DD:54:1E:A8:E8:F1:0B:30:4B:FA:39:73:34:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f52990c8-e80a-3c1d-8b9f-a856f50c9573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d3:ac:4a:d3:80:c5:d5:bd:50:ef:f9:ed:15:be:2e:a6:a6: 31:b3:53:94:90:40:54:28:f0:1c:90:80:fb:34:f1:6b:a1:30: 9e:29:5b:5b:ff:dc:fa:56:45:96:69:0f:f5:d8:5c:70:33:8a: 9e:2f:dd:4b:bd:9a:a2:c4:e8:e2:8c:e8:63:06:80:10:af:8e: 8c:42:1d:36:aa:c2:31:33:a2:02:fc:30:55:7f:bf:8b:23:27: 27:eb:98:51:19:bb:b0:a1:6f:13:cd:19:b9:10:6a:6a:0b:5b: 28:f7:f0:02:c5:29:a8:4e:51:e1:62:9a:2c:d0:ad:c8:01:e7: d1:b0:8c:49:c5:e2:4a:c2:83:e8:bf:20:40:1a:10:e4:ac:05: 67:68:b5:19:f5:cf:39:01:75:f9:ea:e5:bb:33:bd:9e:1c:9f: b2:c8:b1:aa:3c:0a:39:e4:d5:31:52:44:77:84:de:02:b7:e9: 68:79:47:45:2f:58:8b:8a:a9:18:6e:23:d7:ea:df:0a:e9:c5: 70:15:4d:e3:35:e9:ee:82:ce:c0:41:29:fd:b2:e3:b1:31:f6: 3b:31:da:88:4b:43:bb:42:e5:26:bf:4e:5f:39:2b:21:3e:7d: c9:c2:3c:4e:21:b3:62:9e:0b:97:fc:5c:2c:91:36:3a:69:84: 15:fd:42:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyc6J9N8XZ0D+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmEyOTFiMzItODdlNi00OGFmLWJlZDUtMjcwMjU1NTE5YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooS3bUyI2g/BJKhvBjc4OTsArafDgXSveNes reCmr5INK29UAvSZZgFshgFaXjCsggxP5qERvZEhSSbReR8dAZRPvkMsHXZDNG9e LPvvs/5aT4HeH8RnN+ZHv0mQvfqhvDz/TkbodsB5svXxhJI5X3JPlyXPBbSU3Se5 aUlklZN9xKlCZQBgL17VD/4errSjyyAb7fCuz4zINB58VyoNVNjwNknBIM7Suj+Z dBtcz/GdXksFOdb3Y7U2/kIdM5yYvRdlqYXkAbt6ZciH+obEI3FV79XIh6V7roBT fYx9WR4TcXZSUYksKw5FnTBWE9wArNwnbPjDhhUdoB05EihxlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm5U0vpX91UHqjo8QswS/o5czR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjUyOTkwYzgtZTgwYS0z YzFkLThiOWYtYTg1NmY1MGM5NTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHTrErTgMXVvVDv+e0Vvi6mpjGzU5SQQFQo8ByQgPs08WuhMJ4pW1v/ 3PpWRZZpD/XYXHAzip4v3Uu9mqLE6OKM6GMGgBCvjoxCHTaqwjEzogL8MFV/v4sj JyfrmFEZu7ChbxPNGbkQamoLWyj38ALFKahOUeFimizQrcgB59GwjEnF4krCg+i/ IEAaEOSsBWdotRn1zzkBdfnq5bszvZ4cn7LIsao8Cjnk1TFSRHeE3gK36Wh5R0Uv WIuKqRhuI9fq3wrpxXAVTeM16e6CzsBBKf2y47Ex9jsx2ohLQ7tC5Sa/Tl85KyE+ fcnCPE4hs2KeC5f8XCyRNjpphBX9Qmg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:11:52 2025 by rpki-client