$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057e13e8-1c78-378a-a39a-bea5a182afc4.roa File: 057e13e8-1c78-378a-a39a-bea5a182afc4.roa (raw, json) Hash identifier: KDyKUaaP8zv0fyZTJBvhM4Sq2dZGC13zq09MmNhpiZM= Subject key identifier: 9B:8A:16:0A:92:4C:84:CB:D9:F1:CD:80:21:74:A9:5D:AB:2B:1E:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D5644CA1395BC7FBB7B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057e13e8-1c78-378a-a39a-bea5a182afc4.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33490 IP address blocks: 96.76.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:56:44:ca:13:95:bc:7f:bb:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=01a8d9a3-4380-445a-ace7-a6b2736c940b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:cf:44:17:37:71:b4:d0:8d:0b:bd:5d:43: 75:43:80:ba:45:d0:a9:90:4d:de:76:cd:b7:b2:49: 9b:0d:dc:84:5a:67:b9:6b:d1:92:12:79:e3:2d:0d: dc:f3:c3:57:db:7d:49:c1:61:84:0c:dd:b7:c5:b6: 9d:ce:04:02:f1:3d:b0:11:7b:1c:bd:06:a6:97:28: ab:ba:0c:e0:6c:03:ba:93:b0:54:ca:4c:5a:95:f9: 9e:11:98:09:41:8a:13:da:56:e0:21:a6:56:42:c5: 2d:24:70:c8:22:3c:27:e7:40:e4:b8:41:38:a4:e7: 5c:db:20:fa:6c:b3:d3:c9:10:5c:04:a4:de:a3:a7: d6:4b:2e:21:64:76:e0:9d:4c:89:c3:f6:2c:b5:10: 40:fa:10:a4:11:21:c2:0c:e0:1e:4a:ad:c3:98:25: 3f:82:46:34:5b:18:e9:2e:b0:93:e3:47:1a:f2:52: e6:d5:50:f1:0c:58:9f:30:ee:d5:56:9b:9f:64:bf: ff:d3:de:15:5e:25:70:19:11:f3:80:27:b0:75:4a: 87:bf:af:d2:c4:04:dd:e3:c7:ad:77:85:14:de:23: b0:74:50:8f:31:78:05:82:93:c3:ac:58:3e:a4:99: ed:1a:5d:c0:46:ea:f3:76:de:ca:34:e5:a9:98:02: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:16:0A:92:4C:84:CB:D9:F1:CD:80:21:74:A9:5D:AB:2B:1E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/057e13e8-1c78-378a-a39a-bea5a182afc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.76.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ac:f4:57:9a:7f:8c:a1:a8:2c:88:ff:2b:13:c6:f8:59:33: 95:5b:57:ea:b6:98:71:7f:85:e4:87:bb:8b:3a:79:30:71:db: 84:b7:1f:4f:ab:79:b9:18:e0:6a:f0:d1:77:a9:6f:99:1f:84: d6:8a:80:59:49:c5:1b:0e:e9:d1:3b:d6:e9:53:2e:21:f8:f2: c0:01:a5:70:9d:06:a0:67:b0:2a:de:76:9f:f4:ee:fb:64:6e: dc:f3:00:e1:46:68:86:32:4f:be:a7:2d:ac:52:0b:02:e5:19: 55:52:c2:81:76:31:69:81:b9:cf:e6:f9:27:ea:aa:39:e0:33: 37:d8:2b:84:5f:f1:81:af:50:ef:69:e5:84:fb:3d:ed:b2:47: ab:89:bc:3d:41:18:e4:25:5f:72:6e:24:b9:fe:7a:31:65:14: 9c:f2:4d:9e:8a:74:74:3a:92:3e:e0:eb:7d:36:6e:57:fe:47: 1f:5d:38:87:f4:99:ca:47:5e:af:77:9e:40:ec:44:0f:ec:c5: ce:df:94:ac:8a:d4:4b:9a:ee:de:96:60:0d:37:82:f6:47:d9: 03:35:e6:be:fe:db:d5:44:12:51:76:28:01:ac:72:a7:05:76: 4a:3a:03:4e:0b:bb:fe:7b:a0:de:62:ec:4e:e6:04:c9:9f:85: b3:4b:83:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebVZEyhOVvH+7e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MDFhOGQ5YTMtNDM4MC00NDVhLWFjZTctYTZiMjczNmM5NDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhazPRBc3cbTQjQu9XUN1Q4C6RdCpkE3eds23 skmbDdyEWme5a9GSEnnjLQ3c88NX231JwWGEDN23xbadzgQC8T2wEXscvQamlyir ugzgbAO6k7BUykxalfmeEZgJQYoT2lbgIaZWQsUtJHDIIjwn50DkuEE4pOdc2yD6 bLPTyRBcBKTeo6fWSy4hZHbgnUyJw/YstRBA+hCkESHCDOAeSq3DmCU/gkY0Wxjp LrCT40ca8lLm1VDxDFifMO7VVpufZL//094VXiVwGRHzgCewdUqHv6/SxATd48et d4UU3iOwdFCPMXgFgpPDrFg+pJntGl3ARurzdt7KNOWpmAI2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuKFgqSTITL2fHNgCF0qV2rKx50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU3ZTEzZTgtMWM3OC0z NzhhLWEzOWEtYmVhNWExODJhZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYExgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKis9Feaf4yhqCyI/ysTxvhZM5VbV+q2mHF/heSHu4s6eTBx24S3H0+r ebkY4Grw0Xepb5kfhNaKgFlJxRsO6dE71ulTLiH48sABpXCdBqBnsCredp/07vtk btzzAOFGaIYyT76nLaxSCwLlGVVSwoF2MWmBuc/m+SfqqjngMzfYK4Rf8YGvUO9p 5YT7Pe2yR6uJvD1BGOQlX3JuJLn+ejFlFJzyTZ6KdHQ6kj7g6302blf+Rx9dOIf0 mcpHXq93nkDsRA/sxc7flKyK1Eua7t6WYA03gvZH2QM15r7+29VEElF2KAGscqcF dko6A04Lu/57oN5i7E7mBMmfhbNLg9g= -----END CERTIFICATE-----Generated at Mon Apr 7 06:00:39 2025 by rpki-client