$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cac335-d7d9-3224-a679-276152bd1ee9.roa File: a5cac335-d7d9-3224-a679-276152bd1ee9.roa (raw, json) Hash identifier: 1wh0DKjaEtGoCH5bHTLEFwVcfvUgyq0lNuYURUtQG94= Subject key identifier: 99:D8:57:0F:7E:28:83:BF:97:31:2C:40:19:7F:DB:90:92:5D:29:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BE845A4E731DB75850280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cac335-d7d9-3224-a679-276152bd1ee9.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33490 IP address blocks: 96.95.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:e8:45:a4:e7:31:db:75:85:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c3028ac2-76d7-43e9-ab4d-bde0ee3017c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:35:03:a1:89:e0:c9:4c:4a:7d:9a:14:d7: 03:cf:89:d8:9d:13:98:97:f7:3d:fd:19:f5:f7:df: 4e:f8:70:54:7e:37:67:22:5d:04:10:22:68:a5:68: 95:a5:89:3e:ab:32:b8:dd:7d:9c:df:00:b9:c6:cc: 3b:cd:5c:45:2f:89:aa:7e:f6:4e:9d:3d:23:26:22: 86:4a:95:1a:23:4b:e4:a2:b0:f9:71:aa:af:b1:8d: cc:79:0d:94:ab:1c:f0:ed:fc:8f:4b:be:a1:19:8d: 42:3e:7f:90:bc:18:3a:74:00:e6:d6:cc:8c:2e:42: 04:a3:ae:a8:91:08:b4:35:60:28:74:23:d7:2c:12: 92:ef:6e:af:d9:ad:a9:f5:30:96:ed:ef:4c:c0:34: c0:a8:04:16:38:32:85:ce:27:55:44:57:67:0f:96: 2e:71:75:64:cb:a5:70:49:47:c7:df:10:8e:07:de: 86:3a:5c:c7:f3:25:6d:66:58:25:95:0a:fe:95:fc: a2:b8:6e:df:ad:cb:8e:66:d9:ee:a5:05:a4:31:91: 3d:e1:9e:b4:79:50:16:2c:48:c4:db:30:d9:42:72: 49:89:26:bb:b0:1c:e3:dd:7b:b5:ae:47:99:a5:5f: 8c:b7:a6:a9:4e:1f:71:35:d9:5d:0c:5b:92:34:6d: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D8:57:0F:7E:28:83:BF:97:31:2C:40:19:7F:DB:90:92:5D:29:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cac335-d7d9-3224-a679-276152bd1ee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.95.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:58:f2:f8:b2:ef:4f:b1:51:85:8e:7c:0f:f9:45:20:20:dc: ef:6e:a0:f8:9b:a1:87:ef:e3:88:ad:29:db:68:89:eb:3a:e9: c4:e0:5e:fd:f7:8a:ea:03:aa:f2:9b:6c:fd:d5:8c:ff:ad:e4: 72:ca:ea:7f:85:99:d1:d0:7e:60:48:a2:24:36:37:a2:aa:13: 43:00:df:8a:2c:67:32:3f:62:03:00:e3:79:f7:cc:60:7d:e1: 97:d9:a4:79:83:96:d3:9e:cd:02:a9:4f:49:db:36:f0:ca:df: f8:78:a0:a7:62:b6:4a:c7:e5:96:b8:c0:dc:f7:0c:f3:8b:67: a8:b5:59:fe:79:56:e6:c9:e0:ac:95:86:6b:80:12:e1:53:28: da:3a:ab:65:e5:db:b8:cd:59:8b:e7:a2:08:95:a9:bc:96:f6: c3:c5:b4:65:7b:80:bc:01:1d:3d:fe:75:20:a3:dd:ee:c1:d9: 21:87:3c:00:02:00:d2:53:1f:ff:2d:9e:8c:17:4a:0f:02:32: a1:bd:fb:15:9e:c4:c2:27:13:55:f7:55:c4:8f:81:73:ae:05: 53:2b:35:82:34:3b:d7:0c:07:cd:57:e7:b9:38:2b:0b:44:31: be:1c:76:3a:0a:5c:92:35:0e:a1:64:29:b1:fe:db:c1:09:8c: e2:78:d4:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea+hFpOcx23WFAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzMwMjhhYzItNzZkNy00M2U5LWFiNGQtYmRlMGVlMzAxN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAono1A6GJ4MlMSn2aFNcDz4nYnROYl/c9/Rn1 999O+HBUfjdnIl0EECJopWiVpYk+qzK43X2c3wC5xsw7zVxFL4mqfvZOnT0jJiKG SpUaI0vkorD5caqvsY3MeQ2Uqxzw7fyPS76hGY1CPn+QvBg6dADm1syMLkIEo66o kQi0NWAodCPXLBKS726v2a2p9TCW7e9MwDTAqAQWODKFzidVRFdnD5YucXVky6Vw SUfH3xCOB96GOlzH8yVtZlgllQr+lfyiuG7frcuOZtnupQWkMZE94Z60eVAWLEjE 2zDZQnJJiSa7sBzj3Xu1rkeZpV+Mt6apTh9xNdldDFuSNG0htwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnYVw9+KIO/lzEsQBl/25CSXSkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVjYWMzMzUtZDdkOS0z MjI0LWE2NzktMjc2MTUyYmQxZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYF+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChY8viy70+xUYWOfA/5RSAg3O9uoPiboYfv44itKdtoies66cTgXv33 iuoDqvKbbP3VjP+t5HLK6n+FmdHQfmBIoiQ2N6KqE0MA34osZzI/YgMA43n3zGB9 4ZfZpHmDltOezQKpT0nbNvDK3/h4oKditkrH5Za4wNz3DPOLZ6i1Wf55VubJ4KyV hmuAEuFTKNo6q2Xl27jNWYvnogiVqbyW9sPFtGV7gLwBHT3+dSCj3e7B2SGHPAAC ANJTH/8tnowXSg8CMqG9+xWexMInE1X3VcSPgXOuBVMrNYI0O9cMB81X57k4KwtE Mb4cdjoKXJI1DqFkKbH+28EJjOJ41E0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:28:58 2025 by rpki-client