$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ef7ac33-e5a2-3ab5-893a-c98be4550016.roa File: 0ef7ac33-e5a2-3ab5-893a-c98be4550016.roa (raw, json) Hash identifier: DUuywSzqefJ646yOhdAIhuGyyqqqMYYOAhYrXVkkx0I= Subject key identifier: D9:1A:23:4F:3D:EB:7B:79:B6:1F:40:D9:88:D2:1C:CC:38:FF:6C:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B9C35644933B869D95100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ef7ac33-e5a2-3ab5-893a-c98be4550016.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 96.82.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:9c:35:64:49:33:b8:69:d9:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f81737b4-137a-4ffb-ba10-5afc4e73105c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:4e:9d:24:47:51:4f:a0:14:d1:9b:b7:0d: b7:a4:35:b9:7c:b4:59:9b:35:bb:9f:31:14:3c:8d: 4c:81:67:52:af:56:1e:35:ca:32:b9:aa:d6:e6:c7: f1:da:0d:88:74:3d:ee:3f:1d:ca:8b:ff:e8:d4:22: 34:67:88:c7:e2:b2:33:d2:16:fb:bc:ca:27:33:4a: c1:cd:3d:5e:37:cf:0e:68:d5:d8:be:35:6d:7a:0b: be:7a:fb:29:f4:7a:80:ec:73:d4:28:2a:95:0a:f2: dd:7b:43:ac:f6:56:5b:96:b4:a9:53:c2:02:1e:2c: 78:ba:62:c8:65:63:ef:c2:2e:40:fc:e5:5f:45:46: 7c:aa:b9:42:84:43:5b:bd:88:f8:c6:c9:a2:0c:54: 6c:00:84:01:a0:ff:6d:73:e8:c6:fd:e2:91:99:5c: 0c:40:99:0a:03:ce:51:a7:36:eb:57:78:9b:75:79: ad:c7:70:87:70:43:f6:44:d5:51:a1:97:ce:35:97: 1a:58:30:05:b5:39:74:8d:68:ab:47:0d:24:9f:c0: 1c:fc:41:8f:44:b0:97:84:37:86:72:a6:1a:cd:96: 51:d1:cf:3d:23:e0:13:8f:ad:9d:ba:09:8d:40:a4: 06:2d:08:35:e9:4d:01:80:24:c3:c8:02:f9:63:f3: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:23:4F:3D:EB:7B:79:B6:1F:40:D9:88:D2:1C:CC:38:FF:6C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ef7ac33-e5a2-3ab5-893a-c98be4550016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.82.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:51:3e:c6:d3:82:c5:20:f2:8b:fb:e0:13:a0:a4:8b:f9:c4: dc:98:f1:c3:1e:a9:b7:5a:26:06:ce:cd:44:9a:92:54:68:a6: f3:71:85:5d:15:d3:7b:5c:02:18:92:94:ab:8f:8f:48:05:b1: eb:8b:a7:4a:24:6b:41:a3:0e:02:59:4c:74:38:53:80:53:fd: 9b:cf:94:6a:8a:44:34:f3:05:41:ac:d0:ee:84:4c:e8:55:00: 5c:0c:45:54:65:16:9a:7a:c3:e9:b1:9f:2a:0f:a9:ef:03:48: 12:06:03:64:4f:41:2c:18:92:d5:e4:f0:02:3d:b8:c9:1c:c8: a2:d4:c8:ab:3e:ed:d6:19:19:df:2a:42:85:01:d0:96:d2:f6: b5:cf:89:9a:1f:43:02:a5:10:6a:20:ad:97:80:83:33:68:b3: 6b:ec:40:d4:d3:d2:91:f7:51:12:70:3c:67:83:88:f2:21:8e: cf:00:75:2d:14:cc:9d:df:be:85:e9:1c:ff:8b:12:2b:45:6c: 8c:70:4c:29:32:56:ca:ef:93:38:1d:40:a2:ed:0d:f5:6b:f1: f0:00:9c:c4:db:ce:9a:4d:f3:1e:8d:30:ee:de:7a:34:14:af: 82:73:02:77:0b:44:ab:07:a3:7f:52:b8:a4:c9:58:d3:6c:6e: 13:ff:ff:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5w1ZEkzuGnZUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjgxNzM3YjQtMTM3YS00ZmZiLWJhMTAtNWFmYzRlNzMxMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm5OnSRHUU+gFNGbtw23pDW5fLRZmzW7nzEU PI1MgWdSr1YeNcoyuarW5sfx2g2IdD3uPx3Ki//o1CI0Z4jH4rIz0hb7vMonM0rB zT1eN88OaNXYvjVtegu+evsp9HqA7HPUKCqVCvLde0Os9lZblrSpU8ICHix4umLI ZWPvwi5A/OVfRUZ8qrlChENbvYj4xsmiDFRsAIQBoP9tc+jG/eKRmVwMQJkKA85R pzbrV3ibdXmtx3CHcEP2RNVRoZfONZcaWDAFtTl0jWirRw0kn8Ac/EGPRLCXhDeG cqYazZZR0c89I+ATj62dugmNQKQGLQg16U0BgCTDyAL5Y/MohQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkaI08963t5th9A2YjSHMw4/2wgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGVmN2FjMzMtZTVhMi0z YWI1LTg5M2EtYzk4YmU0NTUwMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYFLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJRPsbTgsUg8ov74BOgpIv5xNyY8cMeqbdaJgbOzUSaklRopvNxhV0V 03tcAhiSlKuPj0gFseuLp0oka0GjDgJZTHQ4U4BT/ZvPlGqKRDTzBUGs0O6ETOhV AFwMRVRlFpp6w+mxnyoPqe8DSBIGA2RPQSwYktXk8AI9uMkcyKLUyKs+7dYZGd8q QoUB0JbS9rXPiZofQwKlEGogrZeAgzNos2vsQNTT0pH3URJwPGeDiPIhjs8AdS0U zJ3fvoXpHP+LEitFbIxwTCkyVsrvkzgdQKLtDfVr8fAAnMTbzppN8x6NMO7eejQU r4JzAncLRKsHo39SuKTJWNNsbhP//64= -----END CERTIFICATE-----Generated at Mon Apr 7 06:10:23 2025 by rpki-client