$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2fe763-dcab-383c-9447-19ba77f0835d.roa File: cb2fe763-dcab-383c-9447-19ba77f0835d.roa (raw, json) Hash identifier: gwCjh1tSdN+6DIm8urV++TLw0Fm5CJ1J8NaARjyzBFs= Subject key identifier: 52:99:77:1E:16:E6:F5:D7:5C:D9:EC:31:EA:C4:4E:CB:4D:22:EF:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DA2CA21B679EAC164E100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2fe763-dcab-383c-9447-19ba77f0835d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 96.96.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:a2:ca:21:b6:79:ea:c1:64:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=66ea8bf0-8228-4f4d-afe7-851ab1bc78c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f6:36:9e:b9:88:94:f9:ff:a5:2c:83:a0:e0: 57:f2:de:91:cd:b0:23:25:17:d2:fa:12:a8:d5:84: 33:5f:d4:d9:57:10:d1:ad:5b:50:bf:0d:fc:ea:a1: 7a:79:8a:d0:59:a6:e6:ff:d4:b1:a4:62:26:b5:a8: 53:a1:89:a4:d3:ac:04:e7:54:ae:5a:c6:4d:58:5c: c5:83:44:21:10:f3:c2:89:83:29:e3:b0:f0:30:dd: 10:fc:34:36:22:14:c7:b7:d5:86:35:12:59:03:24: e0:9e:73:2b:65:33:43:af:a8:be:60:db:15:99:c0: 76:e2:b0:85:88:2b:f5:5e:b8:7a:2b:49:6c:8a:8b: 8d:a5:fc:6b:d4:0a:6c:52:3c:d2:85:1f:8a:cb:da: 70:6d:1d:5b:a2:e2:ea:cf:ba:db:63:08:9b:29:d2: 99:43:cc:a2:63:ce:80:a3:3f:9d:13:32:85:87:68: 36:c8:19:66:01:b1:b3:82:81:35:db:1e:75:cc:22: d8:c8:d4:68:2c:13:4b:c7:38:69:60:56:96:63:fd: cf:bb:41:f9:d1:75:7a:9a:ce:0e:ef:a4:78:f2:f7: 58:e0:44:eb:9a:c7:dd:b5:71:02:bc:cf:1e:0b:0c: 18:2b:13:68:59:8a:fd:c6:be:24:30:33:3d:11:35: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:99:77:1E:16:E6:F5:D7:5C:D9:EC:31:EA:C4:4E:CB:4D:22:EF:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2fe763-dcab-383c-9447-19ba77f0835d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.96.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:05:8f:76:5e:dc:fb:3b:1a:ab:e5:6e:59:e8:5b:34:1a:11: 85:ac:0b:2f:10:d6:02:a4:0d:d2:90:f6:c4:55:78:a8:30:44: d6:ac:f5:07:0a:19:1d:a9:bb:cb:de:b3:1a:f2:35:a0:8c:4f: 0c:dc:a0:a9:f8:e8:00:f7:bc:3a:40:79:53:e0:a3:1a:2a:68: dc:fd:c6:41:2b:aa:7d:25:7d:41:64:20:7e:4f:a0:9b:06:55: 8c:d2:3f:a2:aa:f4:30:d8:36:2c:62:dd:fc:7e:fb:04:2f:c8: dc:39:b6:c5:93:4b:3b:41:14:76:b3:ea:cb:5d:a9:27:fa:37: fd:3b:2b:d3:84:f1:3b:59:d5:4e:3c:65:5c:b8:31:00:e3:4b: 23:04:2f:76:bb:da:dd:e7:7f:a3:16:a8:f8:00:16:91:43:6c: af:7f:00:ef:16:bf:00:b3:03:87:36:d7:91:ec:77:9f:3f:35: 6c:24:c9:66:f6:ec:49:7f:d4:73:89:42:4b:4c:65:c1:6f:27: 99:e5:58:23:3c:2b:60:e0:fc:be:92:4d:ce:d9:dd:c4:a5:63: 46:a7:83:73:57:1f:ad:25:f8:f6:44:36:0c:3d:b6:da:da:32: bc:22:f9:e4:bd:ca:82:cf:38:ec:9c:5d:91:ab:10:5e:e4:60: 9f:1b:53:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebaLKIbZ56sFk4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjZlYThiZjAtODIyOC00ZjRkLWFmZTctODUxYWIxYmM3OGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fY2nrmIlPn/pSyDoOBX8t6RzbAjJRfS+hKo 1YQzX9TZVxDRrVtQvw386qF6eYrQWabm/9SxpGImtahToYmk06wE51SuWsZNWFzF g0QhEPPCiYMp47DwMN0Q/DQ2IhTHt9WGNRJZAyTgnnMrZTNDr6i+YNsVmcB24rCF iCv1Xrh6K0lsiouNpfxr1ApsUjzShR+Ky9pwbR1bouLqz7rbYwibKdKZQ8yiY86A oz+dEzKFh2g2yBlmAbGzgoE12x51zCLYyNRoLBNLxzhpYFaWY/3Pu0H50XV6ms4O 76R48vdY4ETrmsfdtXECvM8eCwwYKxNoWYr9xr4kMDM9ETUmHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKZdx4W5vXXXNnsMerETstNIu/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2IyZmU3NjMtZGNhYi0z ODNjLTk0NDctMTliYTc3ZjA4MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYGBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8Fj3Ze3Ps7GqvlblnoWzQaEYWsCy8Q1gKkDdKQ9sRVeKgwRNas9QcK GR2pu8vesxryNaCMTwzcoKn46AD3vDpAeVPgoxoqaNz9xkErqn0lfUFkIH5PoJsG VYzSP6Kq9DDYNixi3fx++wQvyNw5tsWTSztBFHaz6stdqSf6N/07K9OE8TtZ1U48 ZVy4MQDjSyMEL3a72t3nf6MWqPgAFpFDbK9/AO8WvwCzA4c215Hsd58/NWwkyWb2 7El/1HOJQktMZcFvJ5nlWCM8K2Dg/L6STc7Z3cSlY0ang3NXH60l+PZENgw9ttra Mrwi+eS9yoLPOOycXZGrEF7kYJ8bUwE= -----END CERTIFICATE-----Generated at Sun Apr 6 12:08:08 2025 by rpki-client