$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cf6d87b-7cb5-3472-9514-b1146284347b.roa File: 1cf6d87b-7cb5-3472-9514-b1146284347b.roa (raw, json) Hash identifier: It0hvrf1+Qc1g/ti6dhLljy95vJMAg7wHpaZTaPf0OU= Subject key identifier: 28:00:44:36:1C:C8:67:38:CE:5E:DC:91:1C:CE:2A:A2:9F:45:ED:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BD3B8904729FBA3103F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cf6d87b-7cb5-3472-9514-b1146284347b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 20214 IP address blocks: 96.124.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:d3:b8:90:47:29:fb:a3:10:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b9348479-d7c9-4830-aad8-3bc1e308e2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:40:6f:a5:8b:ea:fe:17:db:d0:e2:2f:4d: fd:4b:f1:d0:21:b7:06:bd:a6:52:2d:c2:ee:25:42: 77:5f:73:77:2a:3d:9e:ff:a5:38:34:fa:a9:67:6e: f8:ac:a0:4d:b5:bd:06:90:6f:de:7b:45:b3:35:22: 81:f3:2f:ec:26:07:0c:44:5f:47:d7:dc:47:d7:34: 3b:ca:d2:64:a7:a3:73:57:52:14:a2:60:8c:f9:d3: 01:93:35:66:ed:56:06:e4:ab:9f:9f:77:45:b2:f8: cf:dc:de:c5:a8:5c:8d:3a:82:10:e8:d8:12:9b:f9: 6b:96:fc:51:8f:aa:77:f8:52:19:cd:16:8a:33:f9: 1b:38:52:87:78:32:9e:62:a4:0d:e2:d2:8a:52:2a: 68:ad:c3:19:6a:29:79:b8:c5:0e:c6:91:5d:a3:d8: 40:54:09:06:93:cf:a2:bc:aa:13:4c:33:df:17:61: c7:55:cc:64:4b:c3:f8:8f:d0:91:2b:33:b4:5b:03: dd:0d:7d:0b:ba:ca:fc:d3:af:78:d3:ee:8c:8b:55: 1f:95:6f:4a:ab:ed:b3:a7:b7:66:09:c4:ed:a3:e0: 14:70:b1:53:b1:3f:b2:82:81:39:6b:69:85:e9:41: ab:ac:83:5e:ac:5c:df:e3:2c:ca:47:db:73:74:92: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:00:44:36:1C:C8:67:38:CE:5E:DC:91:1C:CE:2A:A2:9F:45:ED:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1cf6d87b-7cb5-3472-9514-b1146284347b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.124.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:43:38:60:3c:58:30:82:70:29:21:50:c1:7f:0a:32:57:92: f0:22:c8:c6:a6:d0:86:71:37:8d:78:2f:a2:56:0e:5e:90:b0: a6:3a:b2:94:ed:1d:75:26:e8:a3:ca:ae:cc:d2:4d:5c:be:b2: 54:ba:1e:92:24:9d:a6:d0:af:2b:81:77:19:89:51:2f:62:a2: 4c:2c:0f:45:13:b1:1e:19:52:11:57:d3:41:2b:f6:9e:c0:df: d7:5e:cf:d9:a8:fb:98:e0:b2:6b:79:b5:f2:b5:ae:9a:df:d5: 8b:22:aa:fa:1b:6d:17:5b:52:bb:ea:8e:64:40:67:bf:a0:ab: 07:1b:b4:a4:d7:03:9b:03:0b:b4:cf:b7:c6:6f:e6:fa:5f:ff: 14:8c:dc:c3:42:8c:ba:a2:df:da:f7:f3:5f:6b:c1:3c:7f:1c: dc:d9:fb:a8:01:00:c8:c3:12:6d:c3:73:79:b1:f7:3d:32:ad: c8:44:c7:c4:a7:90:40:79:34:6f:61:28:9b:d5:d4:56:96:5f: 70:6c:98:f2:73:c5:9e:a7:74:63:3d:e5:49:ee:e1:bc:5c:a5: b0:12:6a:d5:f6:65:29:ee:92:5f:36:08:22:71:72:3a:ce:04: 4a:73:e0:2e:91:98:92:a0:4f:d5:0b:81:73:c8:45:f8:4d:c8: 4b:39:9f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea9O4kEcp+6MQP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjkzNDg0NzktZDdjOS00ODMwLWFhZDgtM2JjMWUzMDhlMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfdAb6WL6v4X29DiL039S/HQIbcGvaZSLcLu JUJ3X3N3Kj2e/6U4NPqpZ274rKBNtb0GkG/ee0WzNSKB8y/sJgcMRF9H19xH1zQ7 ytJkp6NzV1IUomCM+dMBkzVm7VYG5Kufn3dFsvjP3N7FqFyNOoIQ6NgSm/lrlvxR j6p3+FIZzRaKM/kbOFKHeDKeYqQN4tKKUiporcMZail5uMUOxpFdo9hAVAkGk8+i vKoTTDPfF2HHVcxkS8P4j9CRKzO0WwPdDX0Lusr806940+6Mi1UflW9Kq+2zp7dm CcTto+AUcLFTsT+ygoE5a2mF6UGrrINerFzf4yzKR9tzdJJnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgARDYcyGc4zl7ckRzOKqKfRe3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWNmNmQ4N2ItN2NiNS0z NDcyLTk1MTQtYjExNDYyODQzNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZDOGA8WDCCcCkhUMF/CjJXkvAiyMam0IZxN414L6JWDl6QsKY6spTt HXUm6KPKrszSTVy+slS6HpIknabQryuBdxmJUS9iokwsD0UTsR4ZUhFX00Er9p7A 39dez9mo+5jgsmt5tfK1rprf1YsiqvobbRdbUrvqjmRAZ7+gqwcbtKTXA5sDC7TP t8Zv5vpf/xSM3MNCjLqi39r3819rwTx/HNzZ+6gBAMjDEm3Dc3mx9z0yrchEx8Sn kEB5NG9hKJvV1FaWX3BsmPJzxZ6ndGM95Unu4bxcpbASatX2ZSnukl82CCJxcjrO BEpz4C6RmJKgT9ULgXPIRfhNyEs5nwo= -----END CERTIFICATE-----Generated at Mon Apr 7 09:55:20 2025 by rpki-client