$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/884e9982-0ce4-35c6-b88e-31593500f11e.roa File: 884e9982-0ce4-35c6-b88e-31593500f11e.roa (raw, json) Hash identifier: ILuh+cTXaLBqLkKEGR+9v1Mvzufo+dYfnOqX1hSv7rI= Subject key identifier: 7A:35:4B:53:87:A1:B8:33:9C:B3:79:E7:E7:33:BF:00:06:FD:0F:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BD35C679CA17C50B81D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/884e9982-0ce4-35c6-b88e-31593500f11e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 20214 IP address blocks: 96.108.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:d3:5c:67:9c:a1:7c:50:b8:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7ba07f0a-323a-4648-87fe-ca64c1587dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:7a:27:52:69:34:d5:8f:b7:6f:92:23:09: 46:f6:29:e5:fc:a3:c7:d4:2a:e0:6c:c0:4a:d3:2f: d5:0a:d3:f0:f1:6a:5a:26:5d:ee:8a:bf:4c:26:ed: e4:25:30:42:ff:fd:fc:c5:3e:3b:98:d5:e3:a9:36: 38:aa:c9:47:5f:67:15:b4:37:ee:fe:e7:e3:e8:06: d2:e3:6f:46:60:d3:56:ee:87:9c:42:34:1c:fb:4c: c0:0f:7f:17:55:39:51:09:e5:3d:8c:04:e4:6e:25: 9c:c6:00:c2:0d:12:f9:81:c4:e7:98:c8:b4:7f:cf: 6d:a1:70:ba:c1:aa:2d:a8:b4:17:c7:b7:cb:28:bc: 41:c7:0a:eb:84:9d:dd:22:4c:46:b6:21:5c:12:f8: 7d:9a:5f:e0:81:96:3c:5d:86:16:ea:df:52:b8:13: e4:d5:e9:b5:a2:88:26:45:bc:60:78:ee:34:d1:29: 24:a5:82:c0:47:d0:55:81:35:fa:52:88:dc:95:6a: 7e:f6:0b:b5:3c:5b:5f:1a:7c:e3:99:7e:fa:54:08: 21:e8:3e:e6:53:1e:59:40:21:6b:12:e6:e4:c9:78: 96:93:50:f4:29:16:4f:61:6c:32:1c:e1:76:b2:2a: b0:e5:d7:67:2e:2d:b2:62:76:e5:cc:00:08:31:f6: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:35:4B:53:87:A1:B8:33:9C:B3:79:E7:E7:33:BF:00:06:FD:0F:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/884e9982-0ce4-35c6-b88e-31593500f11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7a:8c:fa:ec:fb:fa:7c:1d:da:22:08:6a:bb:31:8a:c9:8b: d6:ad:75:6f:ab:61:b9:95:cc:66:87:6b:8a:b2:99:3b:7e:6d: c0:ff:0b:70:e5:c4:e0:c5:56:d4:a9:1d:1d:77:92:c4:02:9d: 1e:c0:bf:41:2f:27:58:74:14:ea:a5:0d:0d:1d:90:5a:8d:3d: 2a:78:73:a1:ec:d9:85:fd:a2:c9:63:b4:52:5b:e9:f8:b9:4c: 95:49:cf:7d:ad:ef:69:7a:2b:3a:23:99:82:c4:9f:cb:01:ef: 9a:1a:75:9a:8d:29:3e:0a:0f:f0:a3:bd:a2:c9:4a:6e:89:df: 7a:6a:6b:b0:9f:0f:d6:4c:37:91:d2:35:f8:0b:68:f1:0f:f8: 09:44:d5:f0:38:00:e3:05:c2:11:f4:09:15:f9:75:bb:58:da: 23:63:fb:74:5d:c8:dd:a4:10:eb:8b:b5:be:95:2c:3f:0b:6c: 6c:80:fd:a9:35:e7:c6:2a:72:e2:30:d7:3f:b9:4e:16:be:3d: a7:37:d6:dd:06:51:9f:b2:8a:ce:9f:d1:9c:17:0e:72:22:4e: eb:4c:8f:49:8b:93:75:d3:5c:ea:09:15:8c:fb:f1:b2:24:4c: f8:93:1b:49:35:31:d2:4e:91:d8:b2:fd:6d:10:26:c3:ae:95: 5c:99:ee:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea9NcZ5yhfFC4HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2JhMDdmMGEtMzIzYS00NjQ4LTg3ZmUtY2E2NGMxNTg3ZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8d6J1JpNNWPt2+SIwlG9inl/KPH1CrgbMBK 0y/VCtPw8WpaJl3uir9MJu3kJTBC//38xT47mNXjqTY4qslHX2cVtDfu/ufj6AbS 429GYNNW7oecQjQc+0zAD38XVTlRCeU9jATkbiWcxgDCDRL5gcTnmMi0f89toXC6 waotqLQXx7fLKLxBxwrrhJ3dIkxGtiFcEvh9ml/ggZY8XYYW6t9SuBPk1em1oogm RbxgeO400SkkpYLAR9BVgTX6UojclWp+9gu1PFtfGnzjmX76VAgh6D7mUx5ZQCFr EubkyXiWk1D0KRZPYWwyHOF2siqw5ddnLi2yYnblzAAIMfZKtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo1S1OHobgznLN55+czvwAG/Q+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg0ZTk5ODItMGNlNC0z NWM2LWI4OGUtMzE1OTM1MDBmMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYGyHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ6jPrs+/p8HdoiCGq7MYrJi9atdW+rYbmVzGaHa4qymTt+bcD/C3Dl xODFVtSpHR13ksQCnR7Av0EvJ1h0FOqlDQ0dkFqNPSp4c6Hs2YX9osljtFJb6fi5 TJVJz32t72l6KzojmYLEn8sB75oadZqNKT4KD/CjvaLJSm6J33pqa7CfD9ZMN5HS NfgLaPEP+AlE1fA4AOMFwhH0CRX5dbtY2iNj+3RdyN2kEOuLtb6VLD8LbGyA/ak1 58YqcuIw1z+5Tha+Pac31t0GUZ+yis6f0ZwXDnIiTutMj0mLk3XTXOoJFYz78bIk TPiTG0k1MdJOkdiy/W0QJsOulVyZ7n4= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:17 2025 by rpki-client