$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/381c635c-b095-3dd8-9036-08102ea56413.roa File: 381c635c-b095-3dd8-9036-08102ea56413.roa (raw, json) Hash identifier: rzaQpRkfnAmfHrNSvuFBJQINyfpfCTtM+qLUGO2YsQY= Subject key identifier: 28:71:BE:1E:B4:89:33:F5:27:6C:CD:EF:5A:20:AF:5C:59:EF:42:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C7584DAB20DC897978B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/381c635c-b095-3dd8-9036-08102ea56413.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 96.64.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:75:84:da:b2:0d:c8:97:97:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=71efbb80-3e07-478d-b2c3-4b87826ac67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d0:99:e3:07:90:8c:4d:1f:de:a1:82:86:2b: 42:05:08:28:35:a4:e7:14:54:96:8c:94:7b:1f:f1: 64:ae:40:24:65:ee:e8:d7:44:66:5d:b9:09:e0:6f: 39:cc:4c:cc:15:d5:71:05:bb:b2:eb:2c:6e:ec:25: ce:c2:d3:a2:99:98:b2:d3:56:b3:1f:a2:ac:8f:21: 32:83:e3:48:02:3f:47:a4:f0:dd:23:75:3e:db:84: f6:40:e9:50:e0:a1:65:81:6d:c0:27:65:7e:46:97: 25:33:1b:99:8a:a9:1f:ab:12:c4:48:99:97:3f:0a: 1a:7b:f6:ee:16:36:de:3c:69:a3:56:f7:ff:51:e1: a6:49:72:1c:93:18:0d:b7:65:80:ee:06:7e:a7:dc: af:05:93:88:9e:53:38:b7:9e:9f:16:bb:61:cd:a8: bd:f4:60:8e:a9:48:5c:b3:9e:fb:05:9f:b6:88:9e: ed:6c:2f:dc:a0:6f:83:f4:06:77:f9:0e:5c:f4:46: 47:30:67:3f:0a:3e:45:94:56:d3:88:7b:a5:09:87: 13:a6:a8:3c:07:b2:d6:14:e9:16:62:66:ba:5e:a3: 2b:1a:9a:cb:07:53:8a:1c:7c:29:71:ae:b1:91:d8: c6:42:0f:1c:a9:b2:71:0e:96:a5:2c:ef:d2:fc:18: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:71:BE:1E:B4:89:33:F5:27:6C:CD:EF:5A:20:AF:5C:59:EF:42:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/381c635c-b095-3dd8-9036-08102ea56413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.64.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:68:24:b5:9a:80:36:cb:c7:e4:85:db:63:31:bf:b7:32:02: 87:84:c6:36:70:b7:c8:76:5d:84:35:4b:ce:80:5c:b2:11:ab: 73:11:5a:2a:3a:a1:9e:b2:09:a0:66:97:8c:9c:11:7d:43:c7: 71:07:d6:48:6c:dd:00:b7:dd:c4:c1:c5:48:cb:f9:57:71:82: ff:62:dc:ab:cb:61:6f:64:f2:18:d6:86:6d:74:7c:5b:e2:a6: 95:d0:de:27:11:bb:f1:54:a9:d6:84:fe:e7:64:32:2f:82:4e: 81:0e:ce:3c:86:47:c2:ca:4c:1e:21:90:e3:4f:e9:17:f4:0b: a4:8b:19:9d:09:23:9d:b1:c6:5c:84:58:79:d0:ea:01:18:1e: 20:63:d5:94:fe:8d:55:bf:53:9f:51:b7:f0:fd:9f:db:16:48: fc:5c:6e:b6:b1:c5:3d:6c:aa:f7:7e:6a:e2:10:64:f6:8a:6e: e3:b7:03:d9:f1:5f:aa:97:1d:e9:1b:f7:fb:2e:8f:2a:b4:2e: 38:8f:83:cf:96:3a:b2:f9:44:15:48:c3:8c:e3:c7:b4:a3:00: 3c:1d:4d:45:10:4f:73:c8:0f:59:69:55:84:21:2b:56:d1:a9: b9:5e:9e:8c:85:c4:d9:e7:47:7f:fe:8d:12:91:ee:17:5e:75: ba:9f:74:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebHWE2rINyJeXiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzFlZmJiODAtM2UwNy00NzhkLWIyYzMtNGI4NzgyNmFjNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdCZ4weQjE0f3qGChitCBQgoNaTnFFSWjJR7 H/FkrkAkZe7o10RmXbkJ4G85zEzMFdVxBbuy6yxu7CXOwtOimZiy01azH6KsjyEy g+NIAj9HpPDdI3U+24T2QOlQ4KFlgW3AJ2V+RpclMxuZiqkfqxLESJmXPwoae/bu FjbePGmjVvf/UeGmSXIckxgNt2WA7gZ+p9yvBZOInlM4t56fFrthzai99GCOqUhc s577BZ+2iJ7tbC/coG+D9AZ3+Q5c9EZHMGc/Cj5FlFbTiHulCYcTpqg8B7LWFOkW Yma6XqMrGprLB1OKHHwpca6xkdjGQg8cqbJxDpalLO/S/BhyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChxvh60iTP1J2zN71ogr1xZ70JPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzgxYzYzNWMtYjA5NS0z ZGQ4LTkwMzYtMDgxMDJlYTU2NDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYEBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABloJLWagDbLx+SF22Mxv7cyAoeExjZwt8h2XYQ1S86AXLIRq3MRWio6 oZ6yCaBml4ycEX1Dx3EH1khs3QC33cTBxUjL+Vdxgv9i3KvLYW9k8hjWhm10fFvi ppXQ3icRu/FUqdaE/udkMi+CToEOzjyGR8LKTB4hkONP6Rf0C6SLGZ0JI52xxlyE WHnQ6gEYHiBj1ZT+jVW/U59Rt/D9n9sWSPxcbraxxT1sqvd+auIQZPaKbuO3A9nx X6qXHekb9/sujyq0LjiPg8+WOrL5RBVIw4zjx7SjADwdTUUQT3PID1lpVYQhK1bR qblenoyFxNnnR3/+jRKR7hdedbqfdLY= -----END CERTIFICATE-----Generated at Sun Apr 6 18:24:04 2025 by rpki-client