$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7f04c9-d5fd-34eb-8d36-b6ff491b31b4.roa File: cb7f04c9-d5fd-34eb-8d36-b6ff491b31b4.roa (raw, json) Hash identifier: kVzVpxbat56dYQULSs+dNbx9oVp8QnlsC1SHcKOnEPo= Subject key identifier: 64:D3:2B:23:D7:D3:23:4A:BD:AD:4A:ED:07:1E:C9:C0:AD:C7:FF:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1CF283C6B75696F59D780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7f04c9-d5fd-34eb-8d36-b6ff491b31b4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 96.208.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:cf:28:3c:6b:75:69:6f:59:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=939f015b-1ceb-44ca-a69c-849235975bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:0c:15:39:ae:58:44:66:b2:99:8e:ad:43: 4c:a6:cd:f8:06:bc:0d:90:23:e3:f7:76:78:4f:20: ab:5c:1e:61:d8:5e:e2:3a:bd:07:91:26:cc:10:ef: 2b:ec:34:fc:fc:bf:e2:c0:8c:fc:15:f3:80:0d:2a: de:79:1c:90:dd:86:db:b1:26:51:c0:52:36:9b:05: dc:c9:73:44:6c:14:b6:f0:df:b9:4f:4a:e9:f9:01: bb:74:1f:05:75:36:9b:e2:48:ea:5a:2f:9e:1a:90: 0a:a9:49:f1:fd:c3:51:57:7b:b2:95:ba:b6:45:2e: 6f:36:6d:50:7d:38:ed:bb:bd:f7:8d:c2:72:b8:08: 35:ad:d3:b8:85:94:9b:a6:73:e2:69:03:6f:78:3f: 24:e8:67:eb:9c:a6:4e:ad:ab:09:1d:34:87:62:07: 8b:ce:ec:a7:00:e8:50:44:3d:17:96:bf:33:e7:c2: 56:e4:5d:2c:07:07:28:41:1e:2b:6c:dd:4b:b5:7c: 32:b0:24:42:d0:7d:b5:0f:ec:cf:34:70:e8:c0:77: ac:bc:da:64:99:e9:ae:9b:b9:4b:ff:30:39:bf:ac: 2c:24:c8:dc:0f:d4:b5:fa:3a:65:1a:86:87:f6:b3: 5e:b5:fa:58:c7:bb:7b:5b:33:86:34:a0:b4:cd:ce: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D3:2B:23:D7:D3:23:4A:BD:AD:4A:ED:07:1E:C9:C0:AD:C7:FF:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7f04c9-d5fd-34eb-8d36-b6ff491b31b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.208.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:46:ac:2b:8d:8a:64:6d:bf:de:58:26:7e:bf:40:46:15:08: 56:6c:3c:34:bd:87:ca:fd:f7:2a:a9:5f:8d:08:39:06:e5:54: 26:12:8b:d2:6f:c3:6e:32:59:f1:2c:39:22:b6:58:58:b8:8a: 43:4a:ea:3b:7b:be:37:d7:c5:b3:a8:03:d5:d3:38:a4:84:b0: 25:0e:89:e9:27:20:45:37:0d:b8:2c:04:2c:c3:f1:cb:13:32: da:89:01:db:ad:80:3f:2f:f1:ab:c5:42:67:0c:0b:24:60:aa: 5a:42:b1:d4:9e:74:e7:42:c7:27:0c:3e:f4:07:d1:3c:eb:26: 3a:74:e6:d1:80:2e:4b:93:05:63:47:7e:d4:0b:18:6b:72:96: cb:49:cf:54:ee:dc:54:65:c0:27:bc:d1:84:5c:9e:e1:56:3b: 4f:6e:f2:17:2c:a2:16:c1:cb:53:d9:bc:6a:ce:7e:2e:63:9c: b2:05:f7:39:23:1e:47:05:0c:86:3e:78:12:32:81:c0:71:9d: 9b:f2:8c:96:38:c0:23:b0:13:ef:6c:da:cb:a0:46:95:11:9e: 8f:eb:b5:16:16:ec:f1:b4:70:15:0d:12:5f:c6:39:34:41:ce: f2:cd:d9:7a:f9:1c:76:13:28:2f:ca:4a:b2:40:db:fc:b1:4a: d3:99:a0:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssc8oPGt1aW9Z14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTM5ZjAxNWItMWNlYi00NGNhLWE2OWMtODQ5MjM1OTc1YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/QMFTmuWERmspmOrUNMps34BrwNkCPj93Z4 TyCrXB5h2F7iOr0HkSbMEO8r7DT8/L/iwIz8FfOADSreeRyQ3YbbsSZRwFI2mwXc yXNEbBS28N+5T0rp+QG7dB8FdTab4kjqWi+eGpAKqUnx/cNRV3uylbq2RS5vNm1Q fTjtu733jcJyuAg1rdO4hZSbpnPiaQNveD8k6GfrnKZOrasJHTSHYgeLzuynAOhQ RD0Xlr8z58JW5F0sBwcoQR4rbN1LtXwysCRC0H21D+zPNHDowHesvNpkmemum7lL /zA5v6wsJMjcD9S1+jplGoaH9rNetfpYx7t7WzOGNKC0zc7l7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTTKyPX0yNKva1K7QceycCtx/9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I3ZjA0YzktZDVmZC0z NGViLThkMzYtYjZmZjQ5MWIzMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYNAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChGrCuNimRtv95YJn6/QEYVCFZsPDS9h8r99yqpX40IOQblVCYSi9Jv w24yWfEsOSK2WFi4ikNK6jt7vjfXxbOoA9XTOKSEsCUOieknIEU3DbgsBCzD8csT MtqJAdutgD8v8avFQmcMCyRgqlpCsdSedOdCxycMPvQH0TzrJjp05tGALkuTBWNH ftQLGGtylstJz1Tu3FRlwCe80YRcnuFWO09u8hcsohbBy1PZvGrOfi5jnLIF9zkj HkcFDIY+eBIygcBxnZvyjJY4wCOwE+9s2sugRpURno/rtRYW7PG0cBUNEl/GOTRB zvLN2Xr5HHYTKC/KSrJA2/yxStOZoLE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:04:03 2025 by rpki-client