$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/a5cff41e-b752-33f0-9b87-2428337dd67a.roa File: a5cff41e-b752-33f0-9b87-2428337dd67a.roa (raw, json) Hash identifier: TJquguppQAj4csWTOXNI3fkUYcRgFPwnBZ24on6vNew= Subject key identifier: 3E:8F:73:A5:3E:FA:DF:5F:3F:77:AD:F6:DE:FA:3F:58:BA:0C:8E:90 Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F432858487A2AA0AA9C439558C3370B80 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/a5cff41e-b752-33f0-9b87-2428337dd67a.roa Signing time: Wed 08 Jan 2025 14:21:24 +0000 ROA not before: Wed 08 Jan 2025 14:21:24 +0000 ROA not after: Tue 08 Apr 2025 13:21:24 +0000 asID: 40788 IP address blocks: 96.47.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:2a:a0:aa:9c:43:95:58:c3:37:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Jan 8 14:21:24 2025 GMT Not After : Apr 8 13:21:24 2025 GMT Subject: CN=fc73f0bd-f829-4a87-8360-bdd36f02b877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:b5:e9:18:c0:37:fd:c1:d8:1e:b0:04:12: 3f:5c:8b:46:a3:48:a5:39:f5:e7:28:5a:fc:6d:b9: 3e:3d:0c:31:7d:34:fe:12:2e:e9:cf:b2:50:eb:22: b6:11:26:4a:fd:2a:db:e8:0e:0c:dc:d0:dc:b9:0c: 81:2a:d3:14:a4:71:83:e7:3e:a7:a1:43:13:d0:b9: d0:5d:92:59:c7:4d:71:be:8a:4a:af:76:f0:e0:b8: 93:9b:e8:05:ae:25:32:9f:50:95:44:83:56:ba:80: 79:0d:ef:db:c2:30:7b:75:ef:a6:9f:e5:f5:2d:5b: 8a:80:04:fd:a5:08:53:ae:fc:12:6a:f2:1c:a4:7c: b0:17:f3:49:0f:c5:38:5c:98:a0:45:eb:4f:64:00: fa:8a:26:ba:14:09:02:32:36:4e:61:cf:a0:42:af: 99:a6:73:5c:ac:6a:0f:38:b3:12:ce:a1:d3:d8:34: cc:8b:fc:b2:41:94:24:e4:47:dc:45:a4:f9:7b:9e: a6:84:e9:34:51:24:f0:cf:8f:f8:2f:20:61:fd:0f: 4a:29:1f:e1:fb:c8:16:3a:37:b1:eb:ec:16:4d:41: 73:72:f8:c9:d0:21:b4:ad:49:6c:e6:47:9c:28:b6: 4e:46:75:ae:d4:48:f8:13:cd:fa:e7:33:15:6a:ae: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8F:73:A5:3E:FA:DF:5F:3F:77:AD:F6:DE:FA:3F:58:BA:0C:8E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/a5cff41e-b752-33f0-9b87-2428337dd67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 96.47.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:f2:ff:3a:5d:9e:bf:6f:84:7a:3b:51:5d:95:29:76:f8:96: ab:c4:69:ba:2f:ac:fa:e8:78:a7:e9:af:e0:6c:12:13:47:a7: 62:8c:30:d3:48:dc:c4:79:f2:a3:4d:88:a0:9a:21:a4:f0:10: fd:bd:7a:68:df:ce:1d:fb:c7:75:51:0b:ec:18:4c:e5:cb:9b: 6a:89:1d:0a:8a:f5:2a:76:8d:e0:8a:fc:e3:af:56:5a:6b:db: 3f:1f:61:c0:c5:40:db:01:2a:dd:e6:71:d9:64:20:2e:e1:38: e5:e0:c8:ce:ba:48:b9:91:98:ec:50:3a:99:9a:37:41:90:cc: 1f:12:cf:c0:40:33:a8:7a:62:20:35:f3:97:46:a4:3a:55:4a: 51:85:dc:5d:ed:81:13:ac:6d:22:9f:49:03:10:c6:98:00:69: 78:a4:16:f7:00:3a:b4:d7:5a:a2:e8:cd:79:2d:68:3d:54:91: 63:97:58:93:10:61:c3:0e:8c:15:96:0d:2d:ee:4c:6b:ea:12: 5f:c9:9e:0c:e7:63:dc:29:23:21:24:40:0d:ff:9b:ad:1d:2e: 78:15:82:c5:7d:68:3e:a9:a5:78:ee:89:3d:13:e4:cd:09:f0: 1c:88:c2:39:98:6e:0d:d8:ed:85:e4:42:42:69:69:2a:9a:d1: 3a:29:80:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6KqCqnEOVWMM3C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI1MDEwODE0MjEyNFoXDTI1MDQwODEzMjEyNFowLzEtMCsGA1UEAxMk ZmM3M2YwYmQtZjgyOS00YTg3LTgzNjAtYmRkMzZmMDJiODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2G16RjAN/3B2B6wBBI/XItGo0ilOfXnKFr8 bbk+PQwxfTT+Ei7pz7JQ6yK2ESZK/Srb6A4M3NDcuQyBKtMUpHGD5z6noUMT0LnQ XZJZx01xvopKr3bw4LiTm+gFriUyn1CVRINWuoB5De/bwjB7de+mn+X1LVuKgAT9 pQhTrvwSavIcpHywF/NJD8U4XJigRetPZAD6iia6FAkCMjZOYc+gQq+ZpnNcrGoP OLMSzqHT2DTMi/yyQZQk5EfcRaT5e56mhOk0USTwz4/4LyBh/Q9KKR/h+8gWOjex 6+wWTUFzcvjJ0CG0rUls5kecKLZORnWu1Ej4E8365zMVaq77uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6Pc6U++t9fP3et9t76P1i6DI6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvYTVjZmY0MWUtYjc1Mi0z M2YwLTliODctMjQyODMzN2RkNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXy/zpdnr9vhHo7UV2VKXb4lqvEabovrProeKfpr+BsEhNHp2KMMNNI 3MR58qNNiKCaIaTwEP29emjfzh37x3VRC+wYTOXLm2qJHQqK9Sp2jeCK/OOvVlpr 2z8fYcDFQNsBKt3mcdlkIC7hOOXgyM66SLmRmOxQOpmaN0GQzB8Sz8BAM6h6YiA1 85dGpDpVSlGF3F3tgROsbSKfSQMQxpgAaXikFvcAOrTXWqLozXktaD1UkWOXWJMQ YcMOjBWWDS3uTGvqEl/JngznY9wpIyEkQA3/m60dLngVgsV9aD6ppXjuiT0T5M0J 8ByIwjmYbg3Y7YXkQkJpaSqa0TopgFk= -----END CERTIFICATE-----Generated at Wed Feb 5 19:06:46 2025 by rpki-client