$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d28b2b-6f32-32c7-a81b-d17f6cdf2d35.roa File: a3d28b2b-6f32-32c7-a81b-d17f6cdf2d35.roa (raw, json) Hash identifier: Lv8cEl8rQYHtXqN+sb+vS7qNLUXfmuTtAsro9u8sntQ= Subject key identifier: D9:E2:E4:3C:57:79:B5:7B:D5:AF:9C:0D:58:C0:96:30:1F:54:1C:C0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB1BAE9818E9E1F9545620 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d28b2b-6f32-32c7-a81b-d17f6cdf2d35.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:1b:ae:98:18:e9:e1:f9:54:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d7af9af7-b564-4ae6-a984-6a8301ce2072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0a:26:a8:b0:8f:a1:e0:59:0f:8f:db:0d:e3: b7:c8:ff:79:c2:1c:e5:c2:89:2f:71:0f:e0:ed:78: 10:e2:5b:22:20:89:c7:90:25:3e:6e:0d:8f:15:26: 18:e2:61:9d:63:c2:c1:47:ea:ea:d0:92:d6:b6:59: 74:c0:53:fc:69:ae:69:98:c1:f0:a8:87:d0:8f:07: 99:a3:c0:84:66:d7:07:4c:b2:cb:fc:e8:b5:f4:3d: ff:68:5b:ef:d7:45:75:4f:af:6b:9a:98:cd:03:28: 5b:78:0e:18:06:0a:2d:83:a7:7a:bc:98:f6:5f:da: 95:3f:23:e1:aa:16:83:00:a4:81:06:29:53:29:6f: a3:09:0b:32:9d:42:68:1f:d5:11:7f:83:20:2c:be: f5:fa:73:e9:6d:3e:ad:60:0b:43:24:94:cd:4c:d0: fe:76:14:dd:e1:00:c4:2e:20:86:4a:73:36:cd:b4: 5d:8a:9a:0f:e1:d8:22:36:d2:b4:a5:59:66:6b:6e: a9:06:bf:8c:17:d0:f6:4c:be:23:90:52:49:78:d7: c4:11:00:49:76:5f:28:d7:eb:6d:90:5c:44:36:13: 97:44:9d:7a:64:e9:81:be:fc:5a:83:5a:3e:cd:c0: 77:bb:66:a5:57:ac:65:42:df:5f:e5:b2:46:84:54: f5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E2:E4:3C:57:79:B5:7B:D5:AF:9C:0D:58:C0:96:30:1F:54:1C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d28b2b-6f32-32c7-a81b-d17f6cdf2d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:4b:5c:4f:60:a4:8a:49:78:94:db:58:3d:8a:dd:e1:e0:38: 49:a8:90:48:22:2d:70:f8:9d:bf:b2:32:a1:af:a9:cf:09:99: b8:0a:4d:b8:1b:b0:68:81:16:59:e7:40:41:f1:d1:70:c4:29: 5f:2c:7b:34:27:81:fc:f2:87:cd:a7:d2:ce:04:48:17:53:ab: 4b:3c:55:33:a5:a2:7f:be:6e:cf:52:fa:50:34:c3:d0:42:39: 30:5f:03:e0:33:99:f6:fe:55:ca:48:c5:b2:87:9e:53:67:3d: 0b:be:0b:7c:9a:2e:92:50:94:4c:e3:c6:f2:76:14:46:da:75: 63:41:be:0e:4c:a7:6c:75:58:dd:60:81:6e:08:57:02:2a:a1: ed:b6:a7:87:bf:5c:a8:71:2f:34:a0:c5:d6:48:06:e2:29:47: 5a:4c:e0:18:d8:03:7e:3a:5a:ac:18:f0:7f:1f:69:0e:4a:34: 76:a0:38:14:ea:b8:ca:bf:27:a9:ac:d1:d0:0e:17:8b:58:f7: 53:07:47:86:54:94:43:6d:94:df:67:0a:03:f3:71:a9:00:a5: fb:51:e5:b1:a4:1b:18:74:d2:d9:80:04:3e:36:b8:2d:0c:8d: 42:03:43:67:5b:51:51:dc:26:b6:74:46:82:25:36:ba:0b:07: d2:01:92:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuxuumBjp4flUViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDdhZjlhZjctYjU2NC00YWU2LWE5ODQtNmE4MzAxY2UyMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQomqLCPoeBZD4/bDeO3yP95whzlwokvcQ/g 7XgQ4lsiIInHkCU+bg2PFSYY4mGdY8LBR+rq0JLWtll0wFP8aa5pmMHwqIfQjweZ o8CEZtcHTLLL/Oi19D3/aFvv10V1T69rmpjNAyhbeA4YBgotg6d6vJj2X9qVPyPh qhaDAKSBBilTKW+jCQsynUJoH9URf4MgLL71+nPpbT6tYAtDJJTNTND+dhTd4QDE LiCGSnM2zbRdipoP4dgiNtK0pVlma26pBr+MF9D2TL4jkFJJeNfEEQBJdl8o1+tt kFxENhOXRJ16ZOmBvvxag1o+zcB3u2alV6xlQt9f5bJGhFT1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNni5DxXebV71a+cDVjAljAfVBzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTNkMjhiMmItNmYzMi0z MmM3LWE4MWItZDE3ZjZjZGYyZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9LXE9gpIpJeJTbWD2K3eHgOEmokEgiLXD4nb+yMqGvqc8JmbgKTbgb sGiBFlnnQEHx0XDEKV8sezQngfzyh82n0s4ESBdTq0s8VTOlon++bs9S+lA0w9BC OTBfA+Azmfb+VcpIxbKHnlNnPQu+C3yaLpJQlEzjxvJ2FEbadWNBvg5Mp2x1WN1g gW4IVwIqoe22p4e/XKhxLzSgxdZIBuIpR1pM4BjYA346WqwY8H8faQ5KNHagOBTq uMq/J6ms0dAOF4tY91MHR4ZUlENtlN9nCgPzcakApftR5bGkGxh00tmABD42uC0M jUIDQ2dbUVHcJrZ0RoIlNroLB9IBktg= -----END CERTIFICATE-----Generated at Tue May 6 03:06:00 2025 by rpki-client