$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2effffd4-7ce1-3b1c-a5ce-0bdaf089863b.roa File: 2effffd4-7ce1-3b1c-a5ce-0bdaf089863b.roa (raw, json) Hash identifier: j/x7nsBTCydWe2isBZHa/VMy9kkfRlVIJmMtFLku2f0= Subject key identifier: 51:E9:7A:AB:8B:BE:DF:2D:82:33:20:25:88:08:44:35:5F:07:6B:5B Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858495ABEB2201DC80089D3878676 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2effffd4-7ce1-3b1c-a5ce-0bdaf089863b.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 7029 IP address blocks: 96.43.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:b2:20:1d:c8:00:89:d3:87:86:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=5ecafd81-6c13-4cd6-9bbd-32882585fa3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:48:8c:4c:81:6b:47:00:50:d5:f0:67:de: 86:5a:84:06:db:35:7e:1d:f6:aa:f4:dd:d8:79:76: 22:b2:62:0f:f9:73:fa:fa:4f:f0:ca:a0:97:54:48: 1a:f0:09:76:9d:45:37:34:c3:fd:27:53:b2:15:4c: a8:82:de:2c:b1:d5:2c:be:f4:68:c0:bf:46:a2:54: 26:0f:51:6b:af:24:4a:ad:89:65:32:79:f9:d4:63: e0:28:bf:39:e7:b2:31:90:7d:ab:b3:95:9e:b9:21: 0e:4b:ee:fa:dd:84:fb:29:62:9c:39:b9:50:1d:3d: 97:05:92:8b:7f:49:d2:55:b6:d9:87:46:37:76:43: ee:f0:02:db:a9:f1:ce:14:45:b5:4c:80:e6:46:42: f5:c2:af:f4:48:6d:6a:4b:23:87:f5:3e:98:08:67: d2:b5:cb:66:a5:58:50:ac:6b:ea:99:bc:03:c9:97: a4:cd:a4:95:60:4f:a8:62:e9:ab:4b:f2:f8:12:81: 7e:70:c7:eb:04:94:25:61:ff:b3:f3:c6:85:94:f4: ef:86:de:25:45:8e:d2:69:65:cb:24:48:de:96:90: 67:2e:49:ca:d5:b5:e8:ba:5f:2f:92:4a:18:c3:c3: 82:87:b0:e8:1c:5d:33:d2:fc:eb:a5:eb:ba:dd:29: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E9:7A:AB:8B:BE:DF:2D:82:33:20:25:88:08:44:35:5F:07:6B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2effffd4-7ce1-3b1c-a5ce-0bdaf089863b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c3:eb:12:78:61:38:65:72:1f:7d:32:c3:bc:f8:1b:54:0e: 16:a9:98:e6:9a:d0:ea:bb:64:49:63:90:f9:32:d7:54:f8:32: 4c:e9:15:b4:cc:f4:66:d5:67:bc:2b:2f:f6:29:33:45:41:08: a4:29:67:ef:a8:1b:41:73:e8:5f:90:12:41:4a:de:6f:6c:b9: 28:a8:8a:aa:2e:2a:74:60:47:df:ee:52:d1:69:51:7a:4e:f2: e9:8c:53:2b:0b:d5:d1:16:41:f9:5c:21:fe:15:3c:5a:12:7c: 72:a0:74:8e:11:55:08:04:d9:50:b9:47:d3:9c:63:f8:83:61: a9:1a:81:18:da:6a:d5:9a:69:88:24:24:68:70:69:4e:0e:ed: 04:e3:f2:a7:5b:a1:b6:ac:db:92:4f:d0:27:d7:2d:6b:88:83: 86:47:2e:f9:10:4d:10:ee:3a:ce:07:22:a1:cf:5e:26:41:d8: 51:69:f8:67:8d:72:06:97:8f:98:00:22:72:77:87:27:bb:d1: ad:4d:7c:77:29:50:73:82:5c:f3:76:19:a3:64:27:d1:db:ae: c8:bc:d5:f0:5c:b0:0f:28:92:f1:43:fe:1e:e1:83:53:60:7e: 5e:f7:9e:d4:f8:a8:ed:5a:dc:56:35:49:63:30:6e:8f:19:e8: e5:e4:26:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavrIgHcgAidOHhnYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NWVjYWZkODEtNmMxMy00Y2Q2LTliYmQtMzI4ODI1ODVmYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCFIjEyBa0cAUNXwZ96GWoQG2zV+Hfaq9N3Y eXYismIP+XP6+k/wyqCXVEga8Al2nUU3NMP9J1OyFUyogt4ssdUsvvRowL9GolQm D1FrryRKrYllMnn51GPgKL8557IxkH2rs5WeuSEOS+763YT7KWKcOblQHT2XBZKL f0nSVbbZh0Y3dkPu8ALbqfHOFEW1TIDmRkL1wq/0SG1qSyOH9T6YCGfStctmpVhQ rGvqmbwDyZekzaSVYE+oYumrS/L4EoF+cMfrBJQlYf+z88aFlPTvht4lRY7SaWXL JEjelpBnLknK1bXoul8vkkoYw8OCh7DoHF0z0vzrpeu63SmDJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHpequLvt8tgjMgJYgIRDVfB2tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmVmZmZmZDQtN2NlMS0z YjFjLWE1Y2UtMGJkYWYwODk4NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/D6xJ4YThlch99MsO8+BtUDhapmOaa0Oq7ZEljkPky11T4MkzpFbTM 9GbVZ7wrL/YpM0VBCKQpZ++oG0Fz6F+QEkFK3m9suSioiqouKnRgR9/uUtFpUXpO 8umMUysL1dEWQflcIf4VPFoSfHKgdI4RVQgE2VC5R9OcY/iDYakagRjaatWaaYgk JGhwaU4O7QTj8qdbobas25JP0CfXLWuIg4ZHLvkQTRDuOs4HIqHPXiZB2FFp+GeN cgaXj5gAInJ3hye70a1NfHcpUHOCXPN2GaNkJ9Hbrsi81fBcsA8okvFD/h7hg1Ng fl73ntT4qO1a3FY1SWMwbo8Z6OXkJnc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:45:01 2025 by rpki-client