$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/868521ae-8925-3e4e-8c8b-560a6f9df3b8.roa File: 868521ae-8925-3e4e-8c8b-560a6f9df3b8.roa (raw, json) Hash identifier: MjoZwtPZxwe8XjRRJp08r+2BIJTXvu6Eeg4BQmB50pw= Subject key identifier: EF:02:4B:76:F0:79:3A:13:C7:F8:E6:B7:E5:A9:91:44:43:F9:B8:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C1E7A595353296BEAFF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/868521ae-8925-3e4e-8c8b-560a6f9df3b8.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33667 IP address blocks: 96.109.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:1e:7a:59:53:53:29:6b:ea:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9d3079b0-4df9-4951-a07a-34abb372d4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:20:86:28:7d:b3:4b:d5:9c:26:dd:c4:6b:5e: d1:be:f3:80:97:a0:8a:5c:50:85:c9:2f:fc:3c:a5: da:0c:45:fa:51:b7:7b:24:cf:10:02:3b:60:7d:03: 62:2f:8c:5a:bc:f3:fd:ea:98:16:cf:bd:17:9f:33: 16:bd:92:e5:56:58:52:00:f4:0e:6e:4a:aa:9f:2a: ce:20:08:25:e5:9e:49:35:a1:b6:16:f2:4f:e5:fe: 7c:82:e4:df:8d:83:ff:02:69:42:83:55:23:d9:f2: de:60:a8:43:8d:bc:3d:c2:d4:9d:1b:9d:7c:e3:f3: 8c:6f:31:94:03:6f:b8:a1:da:0c:71:17:a1:60:d7: f8:b4:b7:ab:3a:50:fa:5e:fc:13:54:d7:34:b3:05: 76:1d:93:8e:f9:2e:00:cc:ba:f5:59:e7:e3:51:c3: 5e:4b:04:1a:e9:e1:6e:23:8d:85:3b:4c:ed:71:ad: c5:64:88:ee:92:c2:db:a5:86:78:34:c1:38:9f:55: 76:ac:ee:6b:b4:10:3a:a5:16:0f:4c:9c:ef:33:77: f6:3d:2f:08:83:65:42:ca:06:60:48:82:ec:60:fc: 5a:50:fb:1f:bd:c6:83:b2:ad:bb:27:87:36:a6:1d: 80:66:6a:d0:d4:61:7d:38:64:fb:64:45:a4:61:45: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:02:4B:76:F0:79:3A:13:C7:F8:E6:B7:E5:A9:91:44:43:F9:B8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/868521ae-8925-3e4e-8c8b-560a6f9df3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:63:02:3b:56:6b:10:41:a4:f5:ac:fe:aa:78:06:54:b3:6e: 72:59:c1:98:5d:45:d8:42:e8:ad:9a:56:d0:e3:1f:68:bb:0b: 69:5e:44:1f:ca:36:7c:ab:09:2d:d6:ad:0c:8c:ea:38:c0:75: 59:19:3f:f2:a4:db:0e:c8:6d:d3:34:f2:61:4f:f6:b7:7e:f1: 64:38:2f:05:1b:3b:ee:d8:9f:c3:52:45:75:41:20:ac:95:0a: 7c:54:ac:88:9c:d4:97:cb:71:24:96:df:2e:0c:25:76:ab:60: 11:27:71:b4:bb:be:08:ae:08:95:b3:99:b7:ff:a6:a4:74:25: 4b:88:a9:ac:d6:d3:93:a6:83:48:d5:a3:7c:b8:00:d8:66:f3: a8:c4:87:a7:93:89:cc:fc:65:a0:f3:f3:e2:3a:6e:8c:0f:71: 69:b0:6c:5c:db:82:01:ed:b1:78:d5:db:f4:8d:07:2c:dd:6d: 68:58:ed:ce:ee:02:09:85:76:15:f8:05:6a:db:cd:35:91:fb: 05:a3:4f:69:11:40:aa:8b:17:10:28:9f:ae:a9:fa:d1:73:7b: 8a:2f:98:b1:ab:46:d1:b4:00:f2:5b:f3:7c:c9:f1:52:5b:a7: f4:fe:d5:24:97:a5:69:24:a9:e1:3b:b9:d7:04:16:ba:71:dc: f6:53:5f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebB56WVNTKWvq/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OWQzMDc5YjAtNGRmOS00OTUxLWEwN2EtMzRhYmIzNzJkNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiCGKH2zS9WcJt3Ea17RvvOAl6CKXFCFyS/8 PKXaDEX6Ubd7JM8QAjtgfQNiL4xavPP96pgWz70XnzMWvZLlVlhSAPQObkqqnyrO IAgl5Z5JNaG2FvJP5f58guTfjYP/AmlCg1Uj2fLeYKhDjbw9wtSdG5184/OMbzGU A2+4odoMcRehYNf4tLerOlD6XvwTVNc0swV2HZOO+S4AzLr1WefjUcNeSwQa6eFu I42FO0ztca3FZIjuksLbpYZ4NME4n1V2rO5rtBA6pRYPTJzvM3f2PS8Ig2VCygZg SILsYPxaUPsfvcaDsq27J4c2ph2AZmrQ1GF9OGT7ZEWkYUUGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8CS3bweToTx/jmt+WpkURD+bgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY4NTIxYWUtODkyNS0z ZTRlLThjOGItNTYwYTZmOWRmM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYG2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhjAjtWaxBBpPWs/qp4BlSzbnJZwZhdRdhC6K2aVtDjH2i7C2leRB/K NnyrCS3WrQyM6jjAdVkZP/Kk2w7IbdM08mFP9rd+8WQ4LwUbO+7Yn8NSRXVBIKyV CnxUrIic1JfLcSSW3y4MJXarYBEncbS7vgiuCJWzmbf/pqR0JUuIqazW05Omg0jV o3y4ANhm86jEh6eTicz8ZaDz8+I6bowPcWmwbFzbggHtsXjV2/SNByzdbWhY7c7u AgmFdhX4BWrbzTWR+wWjT2kRQKqLFxAon66p+tFze4ovmLGrRtG0APJb83zJ8VJb p/T+1SSXpWkkqeE7udcEFrpx3PZTX34= -----END CERTIFICATE-----Generated at Mon Apr 7 06:44:16 2025 by rpki-client