$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c9c905-99f1-37cb-95e1-55e1409e4463.roa File: d6c9c905-99f1-37cb-95e1-55e1409e4463.roa (raw, json) Hash identifier: ijPx05R7wt4xFvxB0WrdqVe+dP5cUAvg6m20m9NcfVw= Subject key identifier: DC:6C:E6:00:B1:72:D3:58:FF:DE:13:40:51:5E:E7:DF:36:62:52:90 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB26182224C76E5B38D400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c9c905-99f1-37cb-95e1-55e1409e4463.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.197.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:26:18:22:24:c7:6e:5b:38:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bd6a2438-4990-409f-bfef-f29cb347dc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:da:05:d9:dc:52:91:72:2c:ab:8c:12:8e: 3d:67:77:42:18:ec:c2:02:a9:b6:40:a2:35:2f:cc: 00:cf:9a:8b:ee:0f:e4:1d:07:29:94:d7:ef:eb:41: ba:1b:e7:00:c0:43:03:66:39:57:a6:d3:88:0a:41: cc:e9:b1:6a:87:16:4e:5b:a6:f7:8b:4a:e8:74:30: 14:a3:50:d5:bf:0c:ee:ca:f7:d4:a9:c4:0e:97:94: 10:7d:09:c4:e4:3a:04:28:14:0f:fa:77:df:a6:a9: 2e:63:d9:23:97:49:69:6f:38:5a:1e:7c:ff:c6:cb: 3a:ad:cf:56:c1:98:a3:b9:6c:2c:76:cf:cd:03:28: 14:4d:86:17:64:25:4a:cf:55:42:f0:e4:09:6a:80: 5f:7d:a3:f8:eb:9a:cf:39:ab:82:75:c6:8f:b3:3a: 01:d7:d2:26:84:f3:3f:b4:38:6b:66:0b:0a:35:35: 11:d4:03:ff:3a:90:6d:31:a1:9b:96:1d:4b:86:aa: 77:08:17:58:67:f7:8d:8a:8d:ad:2d:71:69:ea:9e: 02:dd:bf:f0:47:7a:c9:bd:36:bf:b6:79:21:f0:d8: a8:6d:c0:47:80:d2:45:e6:ba:c7:ea:56:80:2b:f7: 1b:79:2f:de:c9:28:3e:9d:61:69:b2:0b:58:a9:89: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:E6:00:B1:72:D3:58:FF:DE:13:40:51:5E:E7:DF:36:62:52:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6c9c905-99f1-37cb-95e1-55e1409e4463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:da:12:9b:c1:53:4e:b7:cc:ee:52:43:03:19:de:90:fa:cb: ad:52:ba:0c:74:f1:80:38:2a:4c:3d:52:86:d0:6f:d9:6a:74: a6:2f:3d:39:92:25:f3:7d:30:90:5e:2d:5d:b0:3f:a4:cd:ce: 03:b6:88:d9:9a:dd:f4:cd:5c:20:59:82:8b:8b:22:bc:10:e9: d7:da:3d:64:bc:8f:82:6c:17:f1:54:3f:ba:e5:82:7b:01:0d: 2e:4a:f7:6e:26:8a:02:d2:e2:59:3c:ba:f4:51:03:44:a3:2f: 7a:21:63:01:fa:5d:3e:53:d2:ba:a6:d5:da:c6:7c:7f:c2:82: df:8b:44:ed:1e:bf:bb:8f:c7:f8:32:d1:cd:2d:38:ff:1b:6d: 14:ad:b6:43:c7:81:37:7b:28:06:f4:ff:19:79:15:20:ee:5e: 47:28:3a:8f:bb:a8:ca:7b:91:f1:8b:0b:6b:47:0e:f7:59:01: 9b:94:60:02:7a:83:e1:4c:c2:87:36:da:58:fa:ae:d2:ea:07: e6:5e:04:bb:3a:97:1a:18:ca:14:96:8f:e2:b7:b8:b5:dc:7b: 79:80:59:d4:86:e0:6f:3b:fc:cc:2f:d4:2b:26:1d:da:20:ea: 40:5b:29:58:49:dc:df:41:90:79:19:1e:dc:ef:fa:89:f5:c7: 1a:b4:1c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuyYYIiTHbls41AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmQ2YTI0MzgtNDk5MC00MDlmLWJmZWYtZjI5Y2IzNDdkYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1raBdncUpFyLKuMEo49Z3dCGOzCAqm2QKI1 L8wAz5qL7g/kHQcplNfv60G6G+cAwEMDZjlXptOICkHM6bFqhxZOW6b3i0rodDAU o1DVvwzuyvfUqcQOl5QQfQnE5DoEKBQP+nffpqkuY9kjl0lpbzhaHnz/xss6rc9W wZijuWwsds/NAygUTYYXZCVKz1VC8OQJaoBffaP465rPOauCdcaPszoB19ImhPM/ tDhrZgsKNTUR1AP/OpBtMaGblh1Lhqp3CBdYZ/eNio2tLXFp6p4C3b/wR3rJvTa/ tnkh8NiobcBHgNJF5rrH6laAK/cbeS/eySg+nWFpsgtYqYmnCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxs5gCxctNY/94TQFFe5982YlKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDZjOWM5MDUtOTlmMS0z N2NiLTk1ZTEtNTVlMTQwOWU0NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8WkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3aEpvBU063zO5SQwMZ3pD6y61Sugx08YA4Kkw9UobQb9lqdKYvPTmS JfN9MJBeLV2wP6TNzgO2iNma3fTNXCBZgouLIrwQ6dfaPWS8j4JsF/FUP7rlgnsB DS5K924migLS4lk8uvRRA0SjL3ohYwH6XT5T0rqm1drGfH/Cgt+LRO0ev7uPx/gy 0c0tOP8bbRSttkPHgTd7KAb0/xl5FSDuXkcoOo+7qMp7kfGLC2tHDvdZAZuUYAJ6 g+FMwoc22lj6rtLqB+ZeBLs6lxoYyhSWj+K3uLXce3mAWdSG4G87/Mwv1CsmHdog 6kBbKVhJ3N9BkHkZHtzv+on1xxq0HNs= -----END CERTIFICATE-----Generated at Sun May 11 10:34:21 2025 by rpki-client