$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4fe23f-e309-3763-86e7-290bf33085dd.roa File: bc4fe23f-e309-3763-86e7-290bf33085dd.roa (raw, json) Hash identifier: LjpugC8EtfasCg89ES1Lu41Pu7cKcuEFjBVlmzxJIs4= Subject key identifier: 21:9F:3B:D1:FD:D8:F7:63:9D:A3:23:8F:39:78:18:8C:5F:CF:FE:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB29C64DD1AA7E1CE64600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4fe23f-e309-3763-86e7-290bf33085dd.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.198.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:29:c6:4d:d1:aa:7e:1c:e6:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cb403849-a0b2-4981-adc6-eaee04a0f21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:79:5d:90:33:da:73:59:64:4f:d4:6c:01: 1e:8c:ea:ca:2b:c2:11:25:26:ea:dc:4f:64:a5:1f: 7e:3f:14:a7:cb:61:ed:d7:4c:b7:39:34:ed:40:16: 31:87:63:53:65:52:9a:2d:87:bb:f6:bb:83:e0:76: f8:12:f7:eb:4c:a2:2e:02:9a:b3:e7:fa:5c:34:95: 7d:d8:4c:ae:40:e9:f5:cf:de:64:01:f0:03:9e:a1: 08:6c:98:89:61:d8:7f:c7:b1:df:ed:f1:fe:49:ba: 0e:75:d3:50:60:87:2c:6e:57:de:43:c0:e7:0c:1f: 85:d2:2f:ee:ee:65:c5:1f:6e:6f:e4:b5:46:a6:8f: b7:12:96:bf:47:3b:c9:b9:e8:cc:6d:f4:e3:9e:72: 50:16:18:e4:b7:33:f7:6c:6c:7c:e5:8a:db:52:78: df:9d:22:7e:d1:08:3b:1b:c3:fa:c8:2c:42:34:51: 1b:6c:98:04:93:9c:02:a6:07:82:c1:8f:5f:3b:6a: c2:38:44:29:b9:a9:dc:1a:9b:f9:bb:e8:30:a9:70: 95:93:70:9c:d3:dd:52:29:82:40:20:bb:34:8b:de: eb:95:f2:68:7d:08:f7:08:f2:f9:b2:1b:60:1a:37: 6a:78:7c:a6:6e:96:64:76:81:e3:90:6a:b4:f3:54: 79:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9F:3B:D1:FD:D8:F7:63:9D:A3:23:8F:39:78:18:8C:5F:CF:FE:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4fe23f-e309-3763-86e7-290bf33085dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.198.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:9d:69:92:35:0d:ca:1d:1c:39:bf:08:f3:90:12:0e:19:d5: fa:99:a1:aa:06:1c:a8:83:19:8c:09:f3:25:ee:b4:5a:ff:94: ac:41:3d:ff:f5:28:9d:9e:ee:e7:36:93:5e:9c:5e:3d:82:c0: a1:08:e5:84:31:73:33:2f:4e:02:f2:9c:a3:d8:61:cc:d6:a8: 3d:8c:c8:2b:71:e5:b3:4e:8c:d5:ce:61:2a:24:f2:0e:39:e9: f6:07:de:96:dc:4a:6d:fc:b5:11:4a:f9:61:df:f8:3a:14:70: bf:b2:26:68:fc:82:4c:6f:90:f1:25:b7:18:af:1b:6d:57:c7: e9:b7:60:da:49:23:0c:bd:d2:4c:be:76:3d:09:32:d4:9a:aa: 7b:e0:0a:c5:77:52:49:18:d7:bb:cf:92:01:67:50:6a:a5:b9: 57:a9:e2:b0:5b:b8:d0:3f:bd:af:4a:0b:b3:9a:33:c5:1f:cc: f3:30:8b:be:d3:83:7a:e7:69:8c:0f:a5:06:f3:c7:81:f9:cf: 63:43:65:fe:69:8a:fc:dd:63:d4:5c:32:de:50:eb:ac:da:2a: 7b:d9:ad:3a:15:eb:f3:7e:8e:4a:48:cc:a8:82:30:8f:0d:67: 60:b3:bd:d7:dd:66:eb:f2:8e:df:8e:0c:b5:1b:65:aa:35:c5: df:de:52:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuynGTdGqfhzmRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2I0MDM4NDktYTBiMi00OTgxLWFkYzYtZWFlZTA0YTBmMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUB5XZAz2nNZZE/UbAEejOrKK8IRJSbq3E9k pR9+PxSny2Ht10y3OTTtQBYxh2NTZVKaLYe79ruD4Hb4EvfrTKIuApqz5/pcNJV9 2EyuQOn1z95kAfADnqEIbJiJYdh/x7Hf7fH+SboOddNQYIcsblfeQ8DnDB+F0i/u 7mXFH25v5LVGpo+3Epa/RzvJuejMbfTjnnJQFhjktzP3bGx85YrbUnjfnSJ+0Qg7 G8P6yCxCNFEbbJgEk5wCpgeCwY9fO2rCOEQpuancGpv5u+gwqXCVk3Cc091SKYJA ILs0i97rlfJofQj3CPL5shtgGjdqeHymbpZkdoHjkGq081R5rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGfO9H92PdjnaMjjzl4GIxfz/4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmM0ZmUyM2YtZTMwOS0z NzYzLTg2ZTctMjkwYmYzMzA4NWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANmdaZI1DcodHDm/CPOQEg4Z1fqZoaoGHKiDGYwJ8yXutFr/lKxBPf/1 KJ2e7uc2k16cXj2CwKEI5YQxczMvTgLynKPYYczWqD2MyCtx5bNOjNXOYSok8g45 6fYH3pbcSm38tRFK+WHf+DoUcL+yJmj8gkxvkPEltxivG21Xx+m3YNpJIwy90ky+ dj0JMtSaqnvgCsV3UkkY17vPkgFnUGqluVep4rBbuNA/va9KC7OaM8UfzPMwi77T g3rnaYwPpQbzx4H5z2NDZf5pivzdY9RcMt5Q66zaKnvZrToV6/N+jkpIzKiCMI8N Z2CzvdfdZuvyjt+ODLUbZao1xd/eUiE= -----END CERTIFICATE-----Generated at Sun May 11 01:37:29 2025 by rpki-client