$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c853ecb-67fd-3b83-91e5-2e250feb2565.roa File: 1c853ecb-67fd-3b83-91e5-2e250feb2565.roa (raw, json) Hash identifier: 5jSRgXWXB1rxN0q0gmvDohXrMmgr68teaqZtPXzKmIY= Subject key identifier: 85:2E:41:AB:28:06:56:7C:C3:8C:F2:D2:25:B6:63:63:FF:6C:32:D6 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285848B4B5873E36CF548E78BA5E80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c853ecb-67fd-3b83-91e5-2e250feb2565.roa Signing time: Wed 29 Jan 2025 13:38:09 +0000 ROA not before: Wed 29 Jan 2025 13:38:09 +0000 ROA not after: Tue 29 Apr 2025 12:38:09 +0000 asID: 29802 IP address blocks: 96.43.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:b5:87:3e:36:cf:54:8e:78:ba:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jan 29 13:38:09 2025 GMT Not After : Apr 29 12:38:09 2025 GMT Subject: CN=db1d1903-cc04-45c8-aa12-70234240469c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:63:d3:fb:bd:9a:57:63:67:42:78:22:d7:fa: 3f:e7:d9:63:f3:fa:e0:ec:35:da:d3:ca:80:ef:9f: 74:c5:92:b7:78:80:46:c2:b4:32:26:08:3c:49:0b: 3e:8c:42:08:3f:8d:b7:f2:e6:e3:c0:31:83:79:56: cc:dd:0d:d3:09:15:2e:dc:50:87:41:66:9b:fb:fe: 9a:69:9c:25:85:f7:86:00:5b:18:c4:ca:cd:26:5d: 36:60:15:88:ee:30:66:a0:47:c8:9b:d0:fe:8f:ab: b0:33:4e:70:da:fe:f9:00:f6:d8:ee:f2:71:30:af: b7:9b:dd:94:7e:18:38:73:69:39:3e:e4:00:17:a0: 38:1e:7b:1e:29:ed:2e:21:60:dd:ce:1a:60:4d:9e: 4d:ad:eb:a0:d7:4c:c6:94:f8:e1:7c:42:1f:52:b1: 57:b6:a9:48:4e:33:7c:87:e5:6a:81:33:20:6a:3a: 26:d4:24:2d:51:ee:cd:07:24:94:9b:27:b2:5b:ed: 86:e7:c5:44:19:3f:66:db:08:26:22:31:1a:98:eb: 58:0b:89:dc:64:3c:9a:ca:32:0f:3e:c7:2d:e0:be: 51:67:aa:6d:61:67:56:2b:74:8d:3a:8e:8b:99:ec: 72:6d:9f:d8:1a:4f:77:b9:0c:4c:25:30:d6:59:08: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2E:41:AB:28:06:56:7C:C3:8C:F2:D2:25:B6:63:63:FF:6C:32:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c853ecb-67fd-3b83-91e5-2e250feb2565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:2b:a8:8c:40:1c:68:30:99:da:23:ec:e0:f6:54:4b:76:1c: f5:98:ae:4a:6d:a3:bb:78:c9:26:e8:16:f3:bd:ce:43:b0:9c: 14:4e:be:64:6a:30:ab:ab:77:86:d2:cc:a1:c5:53:f7:16:c0: 38:11:c4:fe:e6:e2:b9:32:b6:92:41:74:8e:3e:cc:99:23:48: 34:99:06:ab:17:17:31:63:5e:84:68:91:43:c7:e4:40:30:36: 3c:68:89:a7:98:b8:71:b0:6d:a7:87:82:9b:9d:9a:cc:1a:59: 05:2a:5d:af:3a:f9:38:30:86:91:15:5b:bf:9a:d8:77:78:46: 56:63:eb:2c:a3:97:a3:e5:f9:e0:79:49:4b:4e:c5:a8:c9:34: 10:a6:f4:c2:46:1f:fc:33:38:7c:db:cc:b7:f8:22:62:a2:ac: 1e:35:48:1e:61:4d:fa:7f:70:72:a7:6a:36:f2:55:2f:9a:a2: 4a:19:7a:6a:8f:aa:37:a4:8c:0b:dc:94:0a:37:00:01:cb:c3: a4:d4:09:bf:39:15:df:44:9e:18:d9:c6:e0:e6:76:cc:ec:12: bd:19:5a:0d:cb:64:da:e5:04:aa:84:68:f6:b1:f0:b6:1d:09: 88:88:fa:5f:60:58:d8:f5:33:6c:45:3e:88:c6:fe:9a:f2:79: 71:99:8e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0tYc+Ns9Ujni6XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDEyOTEzMzgwOVoXDTI1MDQyOTEyMzgwOVowLzEtMCsGA1UEAxMk ZGIxZDE5MDMtY2MwNC00NWM4LWFhMTItNzAyMzQyNDA0NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGPT+72aV2NnQngi1/o/59lj8/rg7DXa08qA 7590xZK3eIBGwrQyJgg8SQs+jEIIP4238ubjwDGDeVbM3Q3TCRUu3FCHQWab+/6a aZwlhfeGAFsYxMrNJl02YBWI7jBmoEfIm9D+j6uwM05w2v75APbY7vJxMK+3m92U fhg4c2k5PuQAF6A4HnseKe0uIWDdzhpgTZ5Nreug10zGlPjhfEIfUrFXtqlITjN8 h+VqgTMgajom1CQtUe7NBySUmyeyW+2G58VEGT9m2wgmIjEamOtYC4ncZDyayjIP Psct4L5RZ6ptYWdWK3SNOo6LmexybZ/YGk93uQxMJTDWWQikoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUuQasoBlZ8w4zy0iW2Y2P/bDLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMWM4NTNlY2ItNjdmZC0z YjgzLTkxZTUtMmUyNTBmZWIyNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsrqIxAHGgwmdoj7OD2VEt2HPWYrkpto7t4ySboFvO9zkOwnBROvmRq MKurd4bSzKHFU/cWwDgRxP7m4rkytpJBdI4+zJkjSDSZBqsXFzFjXoRokUPH5EAw NjxoiaeYuHGwbaeHgpudmswaWQUqXa86+TgwhpEVW7+a2Hd4RlZj6yyjl6Pl+eB5 SUtOxajJNBCm9MJGH/wzOHzbzLf4ImKirB41SB5hTfp/cHKnajbyVS+aokoZemqP qjekjAvclAo3AAHLw6TUCb85Fd9EnhjZxuDmdszsEr0ZWg3LZNrlBKqEaPax8LYd CYiI+l9gWNj1M2xFPojG/pryeXGZjk0= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:11 2025 by rpki-client