$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea2fd1d5-0b01-336b-b5a2-1f180e5f6120.roa File: ea2fd1d5-0b01-336b-b5a2-1f180e5f6120.roa (raw, json) Hash identifier: dVQm4ulYFEV36PI7yLl6gzFJWQ9VtAYUA56+zC+XLuA= Subject key identifier: FD:89:EA:7D:6B:88:F4:8A:B7:4D:13:FC:2F:D0:B0:1D:81:9E:F7:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848B1F63DF535BE1410DA81AD30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea2fd1d5-0b01-336b-b5a2-1f180e5f6120.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 7922 IP address blocks: 96.112.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:3d:f5:35:be:14:10:da:81:ad:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=b88ee686-4eee-4111-b32f-51bec190b893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b5:8f:c6:9c:68:77:11:ec:9d:91:17:c7:6b: 75:98:7c:67:92:69:c2:6e:ce:92:51:a8:77:23:77: 44:af:4c:cc:73:d5:90:dd:8f:b0:97:c5:2b:2f:db: 2f:9a:e7:a8:41:64:90:e9:b2:4f:60:66:2c:e2:ef: c3:c8:9b:1e:ae:b2:ed:a0:46:e0:7c:28:86:a5:00: 30:ce:30:a6:a6:c9:15:14:42:82:1e:f4:93:ff:39: 2e:43:60:fa:df:a1:62:2d:c9:d1:45:fd:67:b1:97: bd:46:36:17:b6:d5:99:07:45:16:dd:9d:46:4a:e0: 00:0d:ad:4c:0d:60:e0:9e:19:9b:10:41:ce:4d:b5: 6f:3e:56:2d:e7:81:70:3c:e6:f3:ca:d7:74:54:92: 96:0e:ce:6d:54:38:bd:44:bd:c9:2f:44:2c:f3:2b: ec:ae:60:75:21:50:d3:43:56:7b:d0:b3:43:a3:48: 50:66:94:0c:1e:d1:b4:26:a7:0f:11:b4:63:7c:bb: bf:17:be:19:57:df:1f:66:b4:0c:2c:f7:b6:5e:90: 3b:7c:01:8f:2b:90:c3:90:a4:9f:cc:0c:55:2f:a6: 68:20:13:10:53:83:71:be:22:09:25:fd:df:32:64: 96:be:fc:6f:60:89:8e:f1:0e:bb:66:be:8a:b7:41: 67:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:89:EA:7D:6B:88:F4:8A:B7:4D:13:FC:2F:D0:B0:1D:81:9E:F7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea2fd1d5-0b01-336b-b5a2-1f180e5f6120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.112.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b7:7c:d6:c1:41:50:e6:1e:92:33:be:ae:fd:ab:47:42:6e: c6:38:37:b2:92:80:8d:7d:65:1c:1f:78:d8:07:a6:cf:cc:18: b0:0d:28:e3:fb:ac:5b:0b:bd:bb:7e:13:09:42:b2:5c:c4:7d: cb:2c:60:ed:b4:f3:be:5f:e4:7a:56:47:8d:ac:ec:b4:eb:34: c2:48:5a:cc:06:c7:d5:a4:54:87:b2:11:39:cb:6a:5c:92:3e: 27:3e:2c:ed:7a:63:24:9d:97:db:5f:64:6f:f6:d7:c6:d9:69: ce:c4:72:48:af:25:fb:25:ae:64:25:d4:48:71:bb:bf:3c:57: 2c:bf:2b:7b:27:d5:fc:16:bd:35:36:1a:9f:53:a4:4f:08:23: ab:e5:1b:49:ad:dd:a5:01:74:26:09:f9:25:c0:89:2f:4d:be: 96:21:34:0a:b3:2b:cf:62:7a:67:29:97:ec:21:e5:a0:72:6c: ea:f9:80:fd:5f:3c:6f:44:45:b5:1b:b1:8f:80:e8:4b:0c:a7: 0d:16:10:a7:7c:f5:4a:c0:11:fb:9d:6a:93:26:34:54:77:5c: 11:b8:ee:7f:1e:18:73:6c:bd:50:1b:61:33:37:c4:62:9c:6a: a3:7b:1f:2d:bc:ad:5a:27:25:06:15:37:e9:bf:bf:13:31:e3: 8a:98:4f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9j31Nb4UENqBrTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk Yjg4ZWU2ODYtNGVlZS00MTExLWIzMmYtNTFiZWMxOTBiODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrWPxpxodxHsnZEXx2t1mHxnkmnCbs6SUah3 I3dEr0zMc9WQ3Y+wl8UrL9svmueoQWSQ6bJPYGYs4u/DyJserrLtoEbgfCiGpQAw zjCmpskVFEKCHvST/zkuQ2D636FiLcnRRf1nsZe9RjYXttWZB0UW3Z1GSuAADa1M DWDgnhmbEEHOTbVvPlYt54FwPObzytd0VJKWDs5tVDi9RL3JL0Qs8yvsrmB1IVDT Q1Z70LNDo0hQZpQMHtG0JqcPEbRjfLu/F74ZV98fZrQMLPe2XpA7fAGPK5DDkKSf zAxVL6ZoIBMQU4NxviIJJf3fMmSWvvxvYImO8Q67Zr6Kt0Fn3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2J6n1riPSKt00T/C/QsB2BnvdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWEyZmQxZDUtMGIwMS0z MzZiLWI1YTItMWYxODBlNWY2MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa3fNbBQVDmHpIzvq79q0dCbsY4N7KSgI19ZRwfeNgHps/MGLANKOP7 rFsLvbt+EwlCslzEfcssYO20875f5HpWR42s7LTrNMJIWswGx9WkVIeyETnLalyS Pic+LO16YySdl9tfZG/218bZac7EckivJfslrmQl1Ehxu788Vyy/K3sn1fwWvTU2 Gp9TpE8II6vlG0mt3aUBdCYJ+SXAiS9NvpYhNAqzK89iemcpl+wh5aBybOr5gP1f PG9ERbUbsY+A6EsMpw0WEKd89UrAEfudapMmNFR3XBG47n8eGHNsvVAbYTM3xGKc aqN7Hy28rVonJQYVN+m/vxMx44qYT/o= -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:35 2025 by rpki-client