$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/697391c7-f7da-3ef0-afd9-43b1cc0735b9.roa File: 697391c7-f7da-3ef0-afd9-43b1cc0735b9.roa (raw, json) Hash identifier: Jns4/WqB49sU5MLJugb42/BbsJdmxYgNtuiMCuiEX9E= Subject key identifier: 88:76:C1:7D:DF:4B:D0:B3:A8:5D:83:B5:BB:17:CD:F4:FD:6B:27:3F Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F432858487A2B28A621A225B49DE89F80 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/697391c7-f7da-3ef0-afd9-43b1cc0735b9.roa Signing time: Wed 08 Jan 2025 14:22:28 +0000 ROA not before: Wed 08 Jan 2025 14:22:28 +0000 ROA not after: Tue 08 Apr 2025 13:22:28 +0000 asID: 40788 IP address blocks: 96.46.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:2b:28:a6:21:a2:25:b4:9d:e8:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Jan 8 14:22:28 2025 GMT Not After : Apr 8 13:22:28 2025 GMT Subject: CN=c53755ad-55d6-4b13-bd6c-2a467f8187e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:05:9c:69:de:e6:71:43:62:15:eb:fc:3b: ca:9d:97:74:7b:46:2c:ae:28:28:e8:ca:35:f5:f0: 30:77:71:a0:a0:7e:06:0f:9d:4a:75:9f:4c:38:13: b9:69:0f:ed:6a:1f:67:b0:80:94:1b:d0:12:9a:70: 0f:42:d2:e2:c1:84:5a:d4:6d:8d:b7:a8:84:5e:5e: 5e:f3:02:0f:69:b4:51:6c:df:3d:9f:a6:bd:27:21: 6f:fd:5d:cc:70:cb:65:3e:94:c3:16:81:51:2d:00: 35:d1:0b:fb:4a:82:76:23:41:bb:54:a2:0c:c8:30: a4:10:e2:f1:1e:ca:f8:4c:a5:db:80:3b:95:00:c6: b2:76:b9:59:6d:da:68:12:90:ec:59:4f:61:e7:8b: 8b:91:f1:55:55:53:09:38:3e:26:72:53:df:fe:4f: dc:85:b8:25:4a:fd:e4:8e:b9:f0:96:08:23:58:88: f8:ca:f1:a4:9a:fd:b0:37:fd:10:31:26:df:b3:04: 31:c3:bb:37:3f:df:6c:da:5f:dc:85:c0:5e:86:0a: 55:2c:5b:40:9f:2d:2d:72:83:28:6f:79:17:c1:e6: 70:7c:fc:a9:a9:0c:56:20:c9:ac:4d:36:e6:60:a3: ed:53:6f:54:3f:09:f7:19:45:64:28:3f:84:51:c7: e2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:76:C1:7D:DF:4B:D0:B3:A8:5D:83:B5:BB:17:CD:F4:FD:6B:27:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/697391c7-f7da-3ef0-afd9-43b1cc0735b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 96.46.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:96:0a:67:6b:cd:98:5b:f7:44:28:19:37:c6:ad:92:63:a6: 98:d3:6f:1b:23:f7:c3:a1:48:09:dd:79:18:7b:55:ff:3e:78: 79:74:25:be:e4:77:f7:fa:1d:69:63:fe:b9:05:1a:41:04:27: c5:cc:b5:ba:2f:33:fd:ae:55:e5:cc:72:87:f9:8e:03:0e:54: c5:04:80:2b:66:b0:96:21:ec:ec:37:87:a0:4b:70:b2:ab:4b: f6:d8:16:dd:1f:85:44:b8:54:fb:c4:fd:49:e0:df:b7:3d:10: 4b:dc:b2:66:35:3f:f2:f0:49:c2:6e:6f:1f:79:a9:05:69:52: e7:ed:85:47:8d:76:92:f5:f2:5d:6d:72:1b:f7:85:8a:06:58: ab:af:46:46:4a:98:93:76:a1:ae:76:38:88:38:86:11:96:cc: 63:b6:41:e0:cf:cd:e0:34:32:8f:be:85:5b:d4:e6:01:60:0f: 05:68:e2:7f:19:28:a1:6c:2a:21:58:34:c2:6f:5b:1e:08:dc: 0b:11:5a:e5:1c:5a:ad:1f:06:67:5e:73:f5:8f:75:3d:84:45: eb:72:dc:af:e6:12:6e:57:e3:c1:3e:28:bf:4d:a3:05:55:37: 76:57:f0:3a:99:39:64:fa:b4:10:ff:4c:ea:5d:90:f5:ef:64: 95:bd:53:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6KyimIaIltJ3on4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI1MDEwODE0MjIyOFoXDTI1MDQwODEzMjIyOFowLzEtMCsGA1UEAxMk YzUzNzU1YWQtNTVkNi00YjEzLWJkNmMtMmE0NjdmODE4N2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWMFnGne5nFDYhXr/DvKnZd0e0Ysrigo6Mo1 9fAwd3GgoH4GD51KdZ9MOBO5aQ/tah9nsICUG9ASmnAPQtLiwYRa1G2Nt6iEXl5e 8wIPabRRbN89n6a9JyFv/V3McMtlPpTDFoFRLQA10Qv7SoJ2I0G7VKIMyDCkEOLx Hsr4TKXbgDuVAMaydrlZbdpoEpDsWU9h54uLkfFVVVMJOD4mclPf/k/chbglSv3k jrnwlggjWIj4yvGkmv2wN/0QMSbfswQxw7s3P99s2l/chcBehgpVLFtAny0tcoMo b3kXweZwfPypqQxWIMmsTTbmYKPtU29UPwn3GUVkKD+EUcfiCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh2wX3fS9CzqF2DtbsXzfT9ayc/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvNjk3MzkxYzctZjdkYS0z ZWYwLWFmZDktNDNiMWNjMDczNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmWCmdrzZhb90QoGTfGrZJjppjTbxsj98OhSAndeRh7Vf8+eHl0Jb7k d/f6HWlj/rkFGkEEJ8XMtbovM/2uVeXMcof5jgMOVMUEgCtmsJYh7Ow3h6BLcLKr S/bYFt0fhUS4VPvE/Ung37c9EEvcsmY1P/LwScJubx95qQVpUufthUeNdpL18l1t chv3hYoGWKuvRkZKmJN2oa52OIg4hhGWzGO2QeDPzeA0Mo++hVvU5gFgDwVo4n8Z KKFsKiFYNMJvWx4I3AsRWuUcWq0fBmdec/WPdT2ERety3K/mEm5X48E+KL9NowVV N3ZX8DqZOWT6tBD/TOpdkPXvZJW9U2Y= -----END CERTIFICATE-----Generated at Wed Feb 5 19:03:33 2025 by rpki-client