$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a6f34d7-b9d3-3452-913a-18649a86a45d.roa File: 3a6f34d7-b9d3-3452-913a-18649a86a45d.roa (raw, json) Hash identifier: wE2H0qgbJ7eQ7U2vxx6L1ljPCb9uHoMnfHdB7K2pHTs= Subject key identifier: 81:4A:4F:A2:95:59:5A:96:A4:52:6C:4D:56:A7:AD:95:28:52:CC:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB1DB22BC28F8544909080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a6f34d7-b9d3-3452-913a-18649a86a45d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:1d:b2:2b:c2:8f:85:44:90:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ce01b22e-f512-4b3d-aa35-66697e150d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:71:32:e6:c6:38:ed:ae:31:ad:94:14:c8: 01:a0:48:23:fd:52:fd:7d:57:fd:a5:c0:39:59:1b: 30:2d:f8:c1:88:47:cf:22:32:ce:6d:19:b0:1e:ab: 31:70:b3:e2:a6:60:a0:36:57:bb:08:0b:f1:f2:48: 85:c9:05:09:29:1d:4b:76:ea:4c:89:89:99:d7:6f: d4:ea:a5:94:94:1b:be:9a:d0:ff:89:6e:90:68:45: 2f:d7:a2:1f:a9:d0:18:86:0a:4b:7d:8b:39:09:fb: 6a:a5:69:33:d0:95:d6:54:e1:4b:cf:ba:bf:75:a7: 7f:2f:16:09:82:3b:0b:d4:0a:3f:62:1e:f0:de:1f: 65:9a:b8:75:c9:0a:44:fe:b6:32:60:78:08:37:1b: 8f:28:4c:c5:4c:5d:d0:17:a8:c1:78:9b:4d:8d:76: 00:5b:22:2a:71:bb:d6:35:50:c1:45:7b:55:12:6d: f8:5c:8b:cf:7b:6f:03:7b:41:05:d8:61:59:79:a7: 3b:be:84:d8:07:e8:ca:1f:5a:6f:de:e5:31:de:fb: 5b:12:42:9c:10:26:c8:d0:98:b0:17:5d:af:cc:2f: d3:45:5d:22:5b:25:d4:0c:0c:a9:dc:a1:63:64:1e: 16:15:a3:56:16:99:8c:7b:3c:9b:25:aa:fa:c6:33: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4A:4F:A2:95:59:5A:96:A4:52:6C:4D:56:A7:AD:95:28:52:CC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a6f34d7-b9d3-3452-913a-18649a86a45d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:69:8b:8c:41:36:4f:eb:7d:56:94:26:e0:23:0f:1f:6c:d1: 98:a2:d4:3f:44:eb:c4:cf:ca:ab:eb:ec:c9:1a:80:a9:a1:a3: 9e:f8:04:35:25:81:b1:be:8e:99:0f:de:d8:13:44:53:68:d3: a4:40:eb:76:89:0f:46:66:34:45:34:cf:ce:8d:d8:93:3a:fb: 9b:07:4b:90:bb:47:06:90:e2:ea:68:70:ed:55:1f:cc:d9:8b: 90:2d:4c:f1:db:7c:7c:7e:53:aa:53:35:17:4d:9c:2b:55:72: 86:f7:8d:c7:a1:be:bc:02:66:20:4f:55:23:d7:25:5f:b2:f8: d5:c5:ed:9e:15:3e:cb:5c:32:05:fa:c0:5a:e7:ee:09:7f:9e: 05:3a:23:99:db:8e:c9:f5:21:db:1e:62:e4:a6:76:45:cb:a4: d1:7b:45:31:51:c9:28:2d:4e:d0:1b:91:12:b0:03:4a:a8:4d: 96:71:b6:1e:3a:90:fc:0e:5a:6b:ce:a6:44:a7:44:6b:00:f2: ca:86:1b:07:8b:7f:d9:c2:52:e5:55:e1:73:b9:72:c1:d4:94: 22:fa:fc:cc:a3:9e:68:19:f0:0e:2e:64:c0:56:c7:04:df:0f: ea:8b:4b:74:92:1a:45:33:32:45:e5:bd:39:e4:c5:db:73:e0: a8:59:2e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkux2yK8KPhUSQkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2UwMWIyMmUtZjUxMi00YjNkLWFhMzUtNjY2OTdlMTUwZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvVxMubGOO2uMa2UFMgBoEgj/VL9fVf9pcA5 WRswLfjBiEfPIjLObRmwHqsxcLPipmCgNle7CAvx8kiFyQUJKR1LdupMiYmZ12/U 6qWUlBu+mtD/iW6QaEUv16IfqdAYhgpLfYs5CftqpWkz0JXWVOFLz7q/dad/LxYJ gjsL1Ao/Yh7w3h9lmrh1yQpE/rYyYHgINxuPKEzFTF3QF6jBeJtNjXYAWyIqcbvW NVDBRXtVEm34XIvPe28De0EF2GFZeac7voTYB+jKH1pv3uUx3vtbEkKcECbI0Jiw F12vzC/TRV0iWyXUDAyp3KFjZB4WFaNWFpmMezybJar6xjOepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFKT6KVWVqWpFJsTVanrZUoUszwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2E2ZjM0ZDctYjlkMy0z NDUyLTkxM2EtMTg2NDlhODZhNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVpi4xBNk/rfVaUJuAjDx9s0Zii1D9E68TPyqvr7MkagKmho574BDUl gbG+jpkP3tgTRFNo06RA63aJD0ZmNEU0z86N2JM6+5sHS5C7RwaQ4upocO1VH8zZ i5AtTPHbfHx+U6pTNRdNnCtVcob3jcehvrwCZiBPVSPXJV+y+NXF7Z4VPstcMgX6 wFrn7gl/ngU6I5nbjsn1IdseYuSmdkXLpNF7RTFRySgtTtAbkRKwA0qoTZZxth46 kPwOWmvOpkSnRGsA8sqGGweLf9nCUuVV4XO5csHUlCL6/MyjnmgZ8A4uZMBWxwTf D+qLS3SSGkUzMkXlvTnkxdtz4KhZLls= -----END CERTIFICATE-----Generated at Wed May 7 19:41:25 2025 by rpki-client