$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa File: fadabf4c-484e-39bf-b855-d4b07f61005e.roa (raw, json) Hash identifier: eO2zbw55q/Qnft4BOagEeKQAabXj89BF4fXiw/vnD1o= Subject key identifier: 9F:AA:D7:1E:ED:4E:2B:85:55:62:5C:76:66:B3:A5:3C:85:DC:C6:B6 Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F43285849287E659EC8A0BC149DD60C80 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 14543 IP address blocks: 96.43.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:65:9e:c8:a0:bc:14:9d:d6:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=61effe0d-dd4a-480e-ae5c-5824fb4e98bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:db:e6:3e:0a:5c:5f:a7:36:ff:ea:3f:c2: 96:95:c3:92:db:a3:5a:49:be:11:a8:00:dc:9e:42: e4:ba:94:fc:57:50:15:0a:5a:00:d9:59:0e:6a:18: 03:20:e8:54:4e:b9:ec:ed:88:4d:dd:bc:8e:19:5c: b2:76:20:d0:3c:2a:40:af:04:b7:8d:30:b3:ff:49: c7:89:a9:59:1b:51:6d:cc:da:21:61:23:fa:a3:62: 4b:c2:36:93:15:2a:0d:d6:2f:9f:67:e7:25:34:77: 5e:5e:98:2e:11:58:66:90:a1:b4:11:86:52:ab:7d: de:3e:4f:b5:7a:b7:5d:6b:2b:8c:d9:b5:21:c3:d0: ad:fc:73:85:00:77:dc:eb:93:8c:05:f2:44:26:db: 4a:01:a4:37:a3:e5:65:7a:e7:4d:69:af:65:53:da: 1b:84:c8:36:9e:df:1e:66:8e:bf:15:6c:78:6e:bc: 22:b8:db:8f:a6:39:40:36:cc:32:59:78:0f:a9:c7: 40:07:66:7a:e6:52:90:56:95:ca:17:ae:c4:e1:c7: 26:38:20:f5:7e:9a:7a:0f:9c:53:81:3c:6f:4e:56: 5b:b9:20:ca:5e:19:9d:7b:74:1a:96:05:20:b5:45: 73:5b:06:36:6a:cf:52:46:54:c5:bc:81:31:51:be: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AA:D7:1E:ED:4E:2B:85:55:62:5C:76:66:B3:A5:3C:85:DC:C6:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/fadabf4c-484e-39bf-b855-d4b07f61005e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 96.43.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:9a:45:78:04:c5:6b:6d:36:10:7e:bd:52:75:cf:96:ea:90: d1:57:4d:b8:fb:e3:d7:f9:97:ce:15:df:06:7f:f9:c3:aa:e8: 00:00:55:74:55:2e:eb:81:7d:ba:7e:da:70:6e:5f:5a:5f:6e: 70:dc:b7:42:98:4e:aa:b7:69:fa:ad:bb:cb:f7:ff:e6:71:14: 3e:c8:49:17:ff:68:a9:5a:5c:42:cc:49:40:51:e5:dd:96:ac: 3e:27:4e:e6:83:04:7d:b3:95:4a:c0:6f:f4:9b:93:47:ab:be: 7a:fe:2f:43:13:02:f1:24:39:6c:42:7d:d6:aa:a3:07:bb:70: f9:c5:c5:70:8d:17:4c:ff:2f:23:a1:8a:cc:7c:cf:88:bb:0a: da:a9:8d:73:98:ed:34:f6:b5:78:ec:01:95:1a:b5:14:fe:94: ae:21:e4:fc:06:96:fb:da:e2:7b:25:5a:5c:2a:ee:80:f2:0a: 61:98:d8:5a:1b:c4:02:98:89:7b:8c:39:82:d9:da:ac:3a:3f: 28:a1:15:1e:48:e4:9d:d8:b9:7f:ee:f7:4b:5d:49:18:90:3e: b0:62:d2:e4:f3:65:f7:de:04:7e:ec:b0:2a:ff:56:30:8b:7b: 5c:db:9c:93:c8:f6:1f:3d:43:fd:58:62:b6:06:68:2c:63:e2: 0a:43:d4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmWeyKC8FJ3WDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjFlZmZlMGQtZGQ0YS00ODBlLWFlNWMtNTgyNGZiNGU5OGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Tb5j4KXF+nNv/qP8KWlcOS26NaSb4RqADc nkLkupT8V1AVCloA2VkOahgDIOhUTrns7YhN3byOGVyydiDQPCpArwS3jTCz/0nH ialZG1FtzNohYSP6o2JLwjaTFSoN1i+fZ+clNHdeXpguEVhmkKG0EYZSq33ePk+1 erddayuM2bUhw9Ct/HOFAHfc65OMBfJEJttKAaQ3o+VleudNaa9lU9obhMg2nt8e Zo6/FWx4brwiuNuPpjlANswyWXgPqcdAB2Z65lKQVpXKF67E4ccmOCD1fpp6D5xT gTxvTlZbuSDKXhmde3QalgUgtUVzWwY2as9SRlTFvIExUb5GCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+q1x7tTiuFVWJcdmazpTyF3Ma2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvZmFkYWJmNGMtNDg0ZS0z OWJmLWI4NTUtZDRiMDdmNjEwMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6aRXgExWttNhB+vVJ1z5bqkNFXTbj749f5l84V3wZ/+cOq6AAAVXRV LuuBfbp+2nBuX1pfbnDct0KYTqq3afqtu8v3/+ZxFD7ISRf/aKlaXELMSUBR5d2W rD4nTuaDBH2zlUrAb/Sbk0ervnr+L0MTAvEkOWxCfdaqowe7cPnFxXCNF0z/LyOh isx8z4i7CtqpjXOY7TT2tXjsAZUatRT+lK4h5PwGlvva4nslWlwq7oDyCmGY2Fob xAKYiXuMOYLZ2qw6PyihFR5I5J3YuX/u90tdSRiQPrBi0uTzZffeBH7ssCr/VjCL e1zbnJPI9h89Q/1YYrYGaCxj4gpD1OU= -----END CERTIFICATE-----Generated at Sat Apr 12 13:11:56 2025 by rpki-client