$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a7c7472-db0f-3b19-af6e-7445bc573de4.roa File: 1a7c7472-db0f-3b19-af6e-7445bc573de4.roa (raw, json) Hash identifier: gvxKgEXk9wcluj7uHAs3YoJwK/+kIKPcd2Fi2u/5WME= Subject key identifier: 34:30:72:BE:91:93:8D:2B:60:C0:DE:D8:8D:6C:AB:B6:C5:B4:3E:F1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB1E3C5D3FB8F339B30440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a7c7472-db0f-3b19-af6e-7445bc573de4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:1e:3c:5d:3f:b8:f3:39:b3:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f315896e-c831-440e-9a7b-78dd8e6b9d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:53:b7:10:3d:ab:37:da:e5:de:d5:34:07: 3b:63:58:27:2a:51:62:e3:ea:f2:a8:a4:15:c3:45: f6:f3:09:4b:9b:bf:7c:e7:93:5e:c9:3a:65:b4:f4: 64:b5:8d:6b:50:e5:5a:d0:23:c7:0f:8c:45:7b:54: 4b:39:db:90:c4:18:d5:50:b9:47:13:44:3b:39:b0: 00:75:aa:d5:62:1e:71:e1:50:e6:f4:b6:83:00:58: 58:88:41:48:c8:75:9d:14:d5:2f:15:e9:b2:66:a4: 02:aa:ff:e7:f6:4f:c4:9f:7d:0d:d6:4a:50:93:87: 50:fc:22:c4:b5:f7:32:35:69:ea:fb:2f:78:5b:de: 80:68:fb:a7:75:ad:56:22:bd:5c:57:c5:de:04:c9: 5f:26:45:46:62:14:d1:00:16:fb:a8:ba:15:92:8d: e6:5a:95:01:97:d2:f5:b2:c5:cf:92:65:58:bb:58: a3:50:e6:c4:9b:26:c6:8c:b5:2e:57:c5:43:e1:88: 39:43:25:4a:76:cf:5a:a8:4b:91:87:9c:81:b6:94: 65:88:f7:07:77:f4:5e:d6:8a:7d:bd:a8:96:ec:db: 11:7f:1a:bd:52:62:75:1a:77:c2:d7:7d:ae:c2:21: 5e:1f:6e:5d:95:ef:68:9e:94:c6:da:65:1e:9f:85: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:30:72:BE:91:93:8D:2B:60:C0:DE:D8:8D:6C:AB:B6:C5:B4:3E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a7c7472-db0f-3b19-af6e-7445bc573de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:ad:a2:f7:5c:03:2d:98:da:fa:e4:88:7b:7d:00:0c:70:e8: 97:a5:e3:11:c9:ca:d9:31:09:ea:e2:76:57:fa:8e:15:63:05: 58:19:f7:d6:c3:3c:5d:b4:0e:0d:ea:e3:40:1a:00:13:4b:40: b0:9f:dc:f4:eb:50:92:13:dc:ed:a4:71:4f:0f:90:e3:ae:8b: 75:fc:50:f4:96:a4:1f:cf:30:f8:be:bd:9e:5d:f8:ff:df:e9: 85:16:48:b2:fa:02:ed:b1:48:3d:79:48:6c:83:5f:e2:78:4c: e9:3e:5e:ee:ea:93:4f:07:94:68:55:bb:81:0b:cb:27:bf:24: c6:7f:09:28:b5:74:14:32:8b:0a:4b:23:72:79:67:03:1a:7d: 9b:63:af:c4:c1:13:7a:76:d9:d3:c2:ab:08:df:c9:71:30:46: e8:e9:ac:80:44:14:02:c5:2f:48:a7:ab:e1:57:7b:64:80:95: 22:f1:5f:a6:06:f0:3a:e1:fc:5d:4a:7c:e7:24:5d:50:4a:54: 64:d8:aa:6f:0a:4c:d6:da:cd:9d:c0:62:d4:16:6f:5a:b8:05: db:bc:05:59:37:2b:9e:a3:33:0f:4c:e5:84:a5:58:30:d9:95: d2:f9:16:21:5d:4a:97:f4:7e:bb:c3:ec:46:e2:92:67:24:5d: 3b:24:9e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkux48XT+48zmzBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjMxNTg5NmUtYzgzMS00NDBlLTlhN2ItNzhkZDhlNmI5ZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrNTtxA9qzfa5d7VNAc7Y1gnKlFi4+ryqKQV w0X28wlLm79855NeyTpltPRktY1rUOVa0CPHD4xFe1RLOduQxBjVULlHE0Q7ObAA darVYh5x4VDm9LaDAFhYiEFIyHWdFNUvFemyZqQCqv/n9k/En30N1kpQk4dQ/CLE tfcyNWnq+y94W96AaPunda1WIr1cV8XeBMlfJkVGYhTRABb7qLoVko3mWpUBl9L1 ssXPkmVYu1ijUObEmybGjLUuV8VD4Yg5QyVKds9aqEuRh5yBtpRliPcHd/Re1op9 vaiW7NsRfxq9UmJ1GnfC132uwiFeH25dle9onpTG2mUen4UV9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQwcr6Rk40rYMDe2I1sq7bFtD7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWE3Yzc0NzItZGIwZi0z YjE5LWFmNmUtNzQ0NWJjNTczZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8R7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOtovdcAy2Y2vrkiHt9AAxw6Jel4xHJytkxCeridlf6jhVjBVgZ99bD PF20Dg3q40AaABNLQLCf3PTrUJIT3O2kcU8PkOOui3X8UPSWpB/PMPi+vZ5d+P/f 6YUWSLL6Au2xSD15SGyDX+J4TOk+Xu7qk08HlGhVu4ELyye/JMZ/CSi1dBQyiwpL I3J5ZwMafZtjr8TBE3p22dPCqwjfyXEwRujprIBEFALFL0inq+FXe2SAlSLxX6YG 8Drh/F1KfOckXVBKVGTYqm8KTNbazZ3AYtQWb1q4Bdu8BVk3K56jMw9M5YSlWDDZ ldL5FiFdSpf0frvD7EbikmckXTskntM= -----END CERTIFICATE-----Generated at Tue May 6 17:40:25 2025 by rpki-client