$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bdae84d-6431-3021-9f28-aa49287f8cb2.roa File: 3bdae84d-6431-3021-9f28-aa49287f8cb2.roa (raw, json) Hash identifier: dRLDWBpLA1nPDBp20LUwFcvZgeDEqDEVA3jqHLvvA7E= Subject key identifier: 20:59:50:36:34:CA:FB:38:AF:5B:95:6F:30:BF:25:11:EA:1A:88:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BC85C2AE20A9F59101740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bdae84d-6431-3021-9f28-aa49287f8cb2.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7725 IP address blocks: 96.109.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:c8:5c:2a:e2:0a:9f:59:10:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=34bf9c18-dd23-402c-92d5-afae0411bcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:35:81:59:d2:0c:68:94:5d:2f:2f:f6:51: 25:03:77:7e:d8:64:cc:dc:c0:1d:96:f6:24:05:06: 4e:d9:93:02:f7:cd:2f:5c:a7:8a:4e:9c:ac:44:a1: 58:c0:15:a2:07:fb:5d:4c:d4:40:bf:3c:b9:c5:1d: 25:a2:33:d6:0a:e4:5c:f7:a4:cc:b2:a5:1b:3a:70: 58:d1:b4:7f:da:01:91:ec:af:96:ea:39:3f:09:9e: 18:96:9b:1a:91:82:e7:1c:f7:10:df:b1:58:ac:30: 95:70:fd:57:02:d9:77:02:e3:84:c7:ec:24:ee:ea: ca:0c:2e:fa:62:b8:d1:9d:da:f7:be:74:66:e1:97: 3a:8e:c7:c1:bb:c3:eb:4c:d7:50:e8:ec:ab:f4:2a: cb:6c:bd:14:da:96:35:69:38:cb:2f:74:60:aa:69: ed:9a:75:17:0b:1f:1e:fe:dd:03:f9:17:73:86:dd: 64:0c:ac:13:9a:86:40:25:59:6e:5a:12:f5:30:43: 03:2f:79:65:e4:bf:e9:ab:91:69:72:44:47:b3:6c: 10:d0:6e:af:05:35:65:72:06:48:9f:3f:84:7e:db: e7:80:c8:29:e8:95:71:c6:6d:77:47:dc:a2:ea:31: 34:e0:c0:bf:f1:9b:5e:8e:60:70:bb:fe:9f:c1:6c: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:59:50:36:34:CA:FB:38:AF:5B:95:6F:30:BF:25:11:EA:1A:88:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bdae84d-6431-3021-9f28-aa49287f8cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:7f:34:34:59:55:e6:80:e8:fc:2a:1b:d7:2d:7a:27:30:91: a7:57:fb:7f:6f:a9:27:ed:09:76:52:7a:27:50:81:13:f1:df: 0f:31:fe:b3:16:d6:f5:56:3c:b6:36:09:24:d6:91:fe:c7:36: 37:cb:90:7d:2f:3d:c5:9e:3c:ff:f0:c9:98:4d:37:11:5c:17: 00:3f:77:a3:66:70:99:d4:50:c2:82:6d:86:fb:ba:34:40:7a: c4:af:a6:18:4b:39:d5:79:cf:e3:1d:8d:30:3a:5d:7f:77:40: bf:3c:78:e3:e8:1d:82:a6:e6:56:cb:c7:ed:7c:ab:75:6b:b6: 54:19:54:d0:97:b5:e4:ae:5d:6c:d7:39:8d:60:ca:8c:d5:c2: 43:7d:4d:21:b9:17:e7:44:b9:01:3a:93:1f:30:75:ed:ec:59: 74:68:2c:7b:9a:79:99:f9:b0:20:ee:8f:78:7d:dd:43:01:27: 98:cc:44:09:8a:67:af:b6:c4:8c:c6:b2:cd:53:b1:4b:44:07: bd:e4:ba:1f:1f:b6:37:d1:ce:9b:0a:d2:ad:1d:66:79:56:74: fc:65:ca:e8:5e:68:f7:07:7c:b3:e7:15:64:f3:25:23:16:7a: b2:60:81:8e:73:1e:70:76:f4:73:51:4d:7b:a8:b5:be:ad:23: 63:e6:35:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea8hcKuIKn1kQF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MzRiZjljMTgtZGQyMy00MDJjLTkyZDUtYWZhZTA0MTFiY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMY1gVnSDGiUXS8v9lElA3d+2GTM3MAdlvYk BQZO2ZMC980vXKeKTpysRKFYwBWiB/tdTNRAvzy5xR0lojPWCuRc96TMsqUbOnBY 0bR/2gGR7K+W6jk/CZ4YlpsakYLnHPcQ37FYrDCVcP1XAtl3AuOEx+wk7urKDC76 YrjRndr3vnRm4Zc6jsfBu8PrTNdQ6Oyr9CrLbL0U2pY1aTjLL3RgqmntmnUXCx8e /t0D+Rdzht1kDKwTmoZAJVluWhL1MEMDL3ll5L/pq5FpckRHs2wQ0G6vBTVlcgZI nz+EftvngMgp6JVxxm13R9yi6jE04MC/8ZtejmBwu/6fwWy66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBZUDY0yvs4r1uVbzC/JRHqGojzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JkYWU4NGQtNjQzMS0z MDIxLTlmMjgtYWE0OTI4N2Y4Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANB/NDRZVeaA6PwqG9cteicwkadX+39vqSftCXZSeidQgRPx3w8x/rMW 1vVWPLY2CSTWkf7HNjfLkH0vPcWePP/wyZhNNxFcFwA/d6NmcJnUUMKCbYb7ujRA esSvphhLOdV5z+MdjTA6XX93QL88eOPoHYKm5lbLx+18q3VrtlQZVNCXteSuXWzX OY1gyozVwkN9TSG5F+dEuQE6kx8wde3sWXRoLHuaeZn5sCDuj3h93UMBJ5jMRAmK Z6+2xIzGss1TsUtEB73kuh8ftjfRzpsK0q0dZnlWdPxlyuheaPcHfLPnFWTzJSMW erJggY5zHnB29HNRTXuotb6tI2PmNdE= -----END CERTIFICATE-----Generated at Mon Apr 7 09:33:41 2025 by rpki-client