$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1ece5b0-b7e4-3463-9b1e-a41bf9d77651.roa File: e1ece5b0-b7e4-3463-9b1e-a41bf9d77651.roa (raw, json) Hash identifier: XefIo9cVwHZd/o9TnvZDJYwW50eMAb25gJlaTaMahv8= Subject key identifier: 77:48:6C:65:4A:BE:7E:FE:09:A1:EB:FF:FF:E6:87:53:0D:0D:12:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA7F5B9D34875EAB3F9E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1ece5b0-b7e4-3463-9b1e-a41bf9d77651.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 99.196.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:7f:5b:9d:34:87:5e:ab:3f:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=367546a8-5e7b-4d4e-8366-6993177729e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:62:a9:fc:32:c3:e2:47:c4:49:19:87:a8: 43:de:5b:de:6e:41:02:c1:5f:97:40:52:a3:c6:ad: ac:3f:d2:bf:6f:80:ea:31:db:f6:c8:34:7b:35:ec: 37:aa:25:c3:fb:5c:17:f8:0f:c1:e1:66:ce:c1:19: 25:34:64:0a:a1:05:77:40:69:47:6e:df:4d:b8:9e: 7c:6c:9a:be:ee:f1:e9:42:07:d1:44:84:83:7a:36: d1:79:5d:c7:24:34:df:83:6f:6a:db:66:8c:8e:b9: 16:32:a6:05:22:d5:9d:bf:a6:72:9f:fb:d4:ca:15: a0:8d:0f:07:98:10:ea:b5:15:7d:2e:7e:d6:a3:82: 9a:0d:6d:76:af:b0:36:01:67:ad:66:68:0f:74:17: c6:f8:b9:e0:a1:64:51:ed:d3:4e:c4:bb:d7:05:1b: a8:8a:8f:01:ad:24:9e:5b:b0:ae:7c:f0:95:5b:8a: 9e:83:02:e2:83:02:e7:a1:c9:8d:66:a6:af:eb:7e: c0:19:93:07:e1:fe:50:2b:d0:37:08:df:f3:ca:f8: 1c:0b:43:a0:31:23:48:88:48:ea:5b:0c:fb:2f:4e: 96:8b:35:4a:ca:15:54:0a:83:7c:5e:9b:12:81:b0: e2:c8:87:cf:a5:40:3e:3b:f3:38:f6:b5:dd:3c:8f: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:48:6C:65:4A:BE:7E:FE:09:A1:EB:FF:FF:E6:87:53:0D:0D:12:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1ece5b0-b7e4-3463-9b1e-a41bf9d77651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b8:35:f5:63:ac:9d:9a:a4:70:09:22:e3:4e:ab:09:94:48: 1e:ec:3e:fd:35:f0:7a:4d:ec:32:83:42:a9:ae:f6:08:36:ca: c8:34:cd:f5:0b:2c:e7:a1:80:99:9b:91:fc:08:41:2f:83:68: fe:aa:c7:cb:ee:b5:e7:ab:5b:8a:4d:e5:1f:51:35:47:a6:b7: 5c:3d:64:61:d7:d2:43:d5:98:47:a5:1f:f2:02:2d:e1:8a:d2: e7:15:83:3a:f1:f7:26:c7:68:f0:01:18:3d:5b:4e:64:43:80: 8d:83:cb:92:04:fe:ac:d3:f0:44:05:60:23:96:91:10:f8:d7: b2:1d:d1:6c:5f:90:33:f6:e7:ae:f1:8d:c1:f9:d9:e0:2f:97: 87:5f:68:9d:6f:9b:02:b9:89:08:2b:de:df:bf:f6:1b:55:28: bb:6c:53:2b:1c:44:57:34:17:4f:fe:ef:8b:8f:01:db:41:0a: 82:48:b9:82:d6:5c:a1:a4:17:b2:55:1e:9f:53:78:a7:9d:89: d7:f3:47:b8:91:10:e4:36:0e:73:11:48:12:b7:ca:1a:11:c0: df:5f:85:b0:2a:cb:01:68:a5:b3:24:3e:eb:cc:4b:cf:ab:a1: 06:36:5d:5a:ca:c7:17:13:9e:c2:c0:41:57:c2:0f:aa:99:98: 4c:cd:41:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkun9bnTSHXqs/nkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzY3NTQ2YTgtNWU3Yi00ZDRlLTgzNjYtNjk5MzE3NzcyOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkhiqfwyw+JHxEkZh6hD3lvebkECwV+XQFKj xq2sP9K/b4DqMdv2yDR7New3qiXD+1wX+A/B4WbOwRklNGQKoQV3QGlHbt9NuJ58 bJq+7vHpQgfRRISDejbReV3HJDTfg29q22aMjrkWMqYFItWdv6Zyn/vUyhWgjQ8H mBDqtRV9Ln7Wo4KaDW12r7A2AWetZmgPdBfG+LngoWRR7dNOxLvXBRuoio8BrSSe W7CufPCVW4qegwLigwLnocmNZqav637AGZMH4f5QK9A3CN/zyvgcC0OgMSNIiEjq Wwz7L06WizVKyhVUCoN8XpsSgbDiyIfPpUA+O/M49rXdPI8LsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdIbGVKvn7+CaHr///mh1MNDRL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTFlY2U1YjAtYjdlNC0z NDYzLTliMWUtYTQxYmY5ZDc3NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS4NfVjrJ2apHAJIuNOqwmUSB7sPv018HpN7DKDQqmu9gg2ysg0zfUL LOehgJmbkfwIQS+DaP6qx8vuteerW4pN5R9RNUemt1w9ZGHX0kPVmEelH/ICLeGK 0ucVgzrx9ybHaPABGD1bTmRDgI2Dy5IE/qzT8EQFYCOWkRD417Id0WxfkDP2567x jcH52eAvl4dfaJ1vmwK5iQgr3t+/9htVKLtsUyscRFc0F0/+74uPAdtBCoJIuYLW XKGkF7JVHp9TeKedidfzR7iREOQ2DnMRSBK3yhoRwN9fhbAqywFopbMkPuvMS8+r oQY2XVrKxxcTnsLAQVfCD6qZmEzNQRI= -----END CERTIFICATE-----Generated at Wed May 7 08:34:26 2025 by rpki-client