$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8d5d602-1c01-39db-b38e-ce7a503d0708.roa File: a8d5d602-1c01-39db-b38e-ce7a503d0708.roa (raw, json) Hash identifier: D3ohogTcHOdWwA7kwlxCkFBBaxUmiIz4ndUFcaMfn0g= Subject key identifier: F0:63:0E:F5:5C:70:69:4E:56:8B:5E:02:C5:32:54:A4:5B:0F:81:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D5DD5ADE077D9E910F680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8d5d602-1c01-39db-b38e-ce7a503d0708.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33650 IP address blocks: 96.108.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:5d:d5:ad:e0:77:d9:e9:10:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c06d3d62-8fd4-45f5-8f7a-c2026b2c2b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:05:3f:2a:79:0e:cf:b7:2b:87:99:8c:3f:c0: 9d:8b:cc:8c:44:73:53:30:0a:08:8d:8b:0f:ce:04: 7c:85:00:8b:e7:ba:13:bd:43:4f:92:a3:f9:1b:59: 43:32:4f:dd:63:0e:71:6e:85:f5:0e:fb:1b:97:a3: ba:54:ee:63:b9:22:a7:c1:29:e6:92:32:03:57:f7: 3d:fd:38:2d:78:a0:49:11:2a:b8:83:44:c1:fa:62: 0d:e6:66:b0:3c:21:ef:94:32:13:06:76:86:4a:35: f6:18:71:11:16:5e:2d:ac:d6:c7:18:07:dc:4c:63: a1:e0:ae:34:42:d3:94:3d:fd:ab:54:6a:ce:5c:46: dd:7f:75:3f:d7:01:af:a8:9a:72:b2:21:9b:38:bb: b5:8d:26:e9:94:ea:d0:35:34:29:57:2b:d0:e8:e2: 6c:ec:65:59:ef:a2:c7:ae:08:17:c3:ab:e4:a0:6b: bd:7a:58:07:e4:f2:0d:84:8c:3d:29:90:d2:5a:65: b6:9f:1a:d7:7c:b0:22:8c:39:e6:22:c4:6f:bd:49: fd:d7:fa:74:ef:f7:99:52:cc:5b:48:26:3f:f1:24: 86:d5:e8:87:37:ef:86:75:eb:e5:3a:df:a8:2d:2f: 97:22:37:2f:4e:8c:87:f5:ea:98:a0:ff:63:77:80: 86:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:63:0E:F5:5C:70:69:4E:56:8B:5E:02:C5:32:54:A4:5B:0F:81:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8d5d602-1c01-39db-b38e-ce7a503d0708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fb:ff:ab:c0:d8:b4:89:36:6b:76:f1:c7:64:47:e8:7d:06: 55:53:52:57:7b:5a:dc:85:cc:34:b3:1c:e3:e2:65:28:e5:2f: 5b:f8:ed:3e:16:c4:2d:ae:54:71:d6:21:ec:06:3a:ad:1f:dd: dc:48:59:f6:59:48:fe:ff:0c:c1:eb:0f:34:d7:6b:82:f9:1e: df:a4:26:76:22:fa:3c:a3:0b:33:d8:80:01:12:a0:9e:14:ab: 2a:d4:7e:3a:61:d6:0a:b8:23:3b:95:aa:de:95:6e:54:d2:93: a5:04:b7:dc:fe:3f:0c:69:f1:e6:de:53:f0:45:7e:e0:58:05: 0f:b2:e0:ba:00:c3:4a:9c:f5:58:da:dc:e4:ee:1b:ad:b8:ee: 42:41:74:93:44:a4:3b:a5:9c:f2:81:b3:b0:fa:b7:e1:09:31: a1:9d:30:a8:bf:d1:3c:61:8d:ee:e0:2b:00:c0:cb:20:f7:db: af:0c:68:9f:05:2f:a7:bc:8e:f1:bf:fa:96:64:81:9e:82:5e: 03:b5:5a:34:93:24:aa:c2:7e:84:7c:be:4b:40:2a:68:84:83: 64:84:ab:b4:b4:f8:e4:e5:24:ed:fb:a7:75:32:c4:77:f7:61: da:17:36:b0:16:ad:c2:e5:5f:ac:6c:8f:b9:6b:67:1d:1f:33: 4f:c6:bc:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebV3VreB32ekQ9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzA2ZDNkNjItOGZkNC00NWY1LThmN2EtYzIwMjZiMmMyYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAU/KnkOz7crh5mMP8Cdi8yMRHNTMAoIjYsP zgR8hQCL57oTvUNPkqP5G1lDMk/dYw5xboX1Dvsbl6O6VO5juSKnwSnmkjIDV/c9 /TgteKBJESq4g0TB+mIN5mawPCHvlDITBnaGSjX2GHERFl4trNbHGAfcTGOh4K40 QtOUPf2rVGrOXEbdf3U/1wGvqJpysiGbOLu1jSbplOrQNTQpVyvQ6OJs7GVZ76LH rggXw6vkoGu9elgH5PINhIw9KZDSWmW2nxrXfLAijDnmIsRvvUn91/p07/eZUsxb SCY/8SSG1eiHN++GdevlOt+oLS+XIjcvToyH9eqYoP9jd4CGewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBjDvVccGlOVoteAsUyVKRbD4GCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThkNWQ2MDItMWMwMS0z OWRiLWIzOGUtY2U3YTUwM2QwNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYGzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL7/6vA2LSJNmt28cdkR+h9BlVTUld7WtyFzDSzHOPiZSjlL1v47T4W xC2uVHHWIewGOq0f3dxIWfZZSP7/DMHrDzTXa4L5Ht+kJnYi+jyjCzPYgAESoJ4U qyrUfjph1gq4IzuVqt6VblTSk6UEt9z+Pwxp8ebeU/BFfuBYBQ+y4LoAw0qc9Vja 3OTuG6247kJBdJNEpDulnPKBs7D6t+EJMaGdMKi/0Txhje7gKwDAyyD3268MaJ8F L6e8jvG/+pZkgZ6CXgO1WjSTJKrCfoR8vktAKmiEg2SEq7S0+OTlJO37p3UyxHf3 YdoXNrAWrcLlX6xsj7lrZx0fM0/GvNA= -----END CERTIFICATE-----Generated at Sun Apr 6 20:17:00 2025 by rpki-client