$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/630b8221-0591-3eef-973c-4173dbd4e4f0.roa File: 630b8221-0591-3eef-973c-4173dbd4e4f0.roa (raw, json) Hash identifier: FK9SVs/b2ByoTdg7SZYj6bvHL2cdA8jAzBomR9HLq6w= Subject key identifier: 20:5E:DC:BD:97:0B:32:05:BD:F0:FC:1C:CB:9D:BA:B2:42:5A:83:CA Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858497E01206DC7BDC0A019A12A80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/630b8221-0591-3eef-973c-4173dbd4e4f0.roa Signing time: Fri 11 Apr 2025 16:07:57 +0000 ROA not before: Fri 11 Apr 2025 16:07:57 +0000 ROA not after: Thu 10 Jul 2025 16:07:57 +0000 asID: 395374 IP address blocks: 96.43.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:01:20:6d:c7:bd:c0:a0:19:a1:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 11 16:07:57 2025 GMT Not After : Jul 10 16:07:57 2025 GMT Subject: CN=44843b8d-ae83-481c-8aba-06be7dfc35f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3e:32:09:38:45:76:50:87:ae:54:f8:86:2c: 83:27:f5:24:1f:c7:2e:75:b6:81:2e:ea:af:eb:da: ad:29:51:39:33:d1:84:b8:8e:a8:f6:b2:be:e6:99: ab:62:ab:64:23:6f:90:ce:91:9a:18:9a:fe:32:a2: 93:02:bc:5e:c0:b9:0d:d6:be:27:bb:f3:b6:b2:92: 83:df:ff:b8:31:22:c6:a9:be:b6:1f:03:b9:ac:33: 65:78:1e:23:e5:cc:cb:e5:19:e4:84:b6:cf:e6:c3: 20:05:a8:8a:a5:37:fe:40:14:ed:28:ef:6a:2d:8a: c3:f3:95:98:d7:0d:20:8f:94:af:dd:ce:ad:39:2a: 78:7b:b8:bf:17:90:46:27:85:66:e7:a5:7d:63:1f: 87:0b:23:4d:00:41:ac:de:f4:27:0e:7e:b1:ac:9a: ea:06:fb:ff:19:39:2d:d3:bf:c3:71:6a:86:7c:f1: 1f:cd:10:cd:0a:b1:0e:0b:5b:c6:8a:02:67:15:9a: 2f:e4:9f:61:d7:8a:a8:cd:56:69:13:b2:8b:77:73: 7d:56:ff:ca:41:58:01:7a:f5:d3:85:47:ad:bb:32: e3:0a:98:3b:05:fc:2f:52:42:b8:0e:21:29:ae:5f: d7:c7:3f:7e:5e:2a:b0:67:25:9c:52:49:2d:33:7c: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5E:DC:BD:97:0B:32:05:BD:F0:FC:1C:CB:9D:BA:B2:42:5A:83:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/630b8221-0591-3eef-973c-4173dbd4e4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:cd:1b:8d:33:c8:83:17:52:d9:9e:94:6b:73:3f:48:96:6d: b0:be:cc:cc:31:a6:e6:cf:e3:6a:5f:78:36:17:d7:7b:62:09: 9f:4c:a0:56:3a:2f:1e:a6:6d:68:73:42:41:61:18:9c:ef:ca: 2d:6d:18:bf:79:28:6d:32:ae:af:d3:ff:ef:c2:4f:96:fc:7a: a6:46:fb:15:fe:5c:d7:79:c7:7a:b6:7a:5d:4c:78:e0:28:aa: e3:ad:29:93:f4:82:d3:66:6b:e4:17:85:7b:c0:58:58:22:a3: be:fa:f2:fa:fa:62:16:d6:99:07:2a:b2:b9:2e:3a:d7:39:22: be:87:ef:c1:22:cf:dc:e2:55:ca:03:21:4b:a4:a8:dc:90:6d: 63:9d:c4:f2:55:2e:5e:ea:b6:05:03:48:fd:f3:f9:48:a6:9c: 9b:5c:f5:e1:06:13:7a:24:85:48:04:76:2a:e5:8d:2b:3a:2a: 2e:e4:1a:e1:81:d7:db:6a:db:9c:4c:01:78:82:d8:c1:9d:58: ca:2a:4d:a9:b0:ae:72:f3:e6:0b:3e:da:7e:5c:20:0a:0d:ae: 13:23:cb:ef:58:0d:2e:af:b4:ac:13:62:79:da:b9:56:af:81: 23:4f:6b:25:ad:18:44:4b:ed:b7:f3:fa:67:bf:5b:e9:45:b9: 76:0f:5a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl+ASBtx73AoBmhKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQxMTE2MDc1N1oXDTI1MDcxMDE2MDc1N1owLzEtMCsGA1UEAxMk NDQ4NDNiOGQtYWU4My00ODFjLThhYmEtMDZiZTdkZmMzNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj4yCThFdlCHrlT4hiyDJ/UkH8cudbaBLuqv 69qtKVE5M9GEuI6o9rK+5pmrYqtkI2+QzpGaGJr+MqKTArxewLkN1r4nu/O2spKD 3/+4MSLGqb62HwO5rDNleB4j5czL5RnkhLbP5sMgBaiKpTf+QBTtKO9qLYrD85WY 1w0gj5Sv3c6tOSp4e7i/F5BGJ4Vm56V9Yx+HCyNNAEGs3vQnDn6xrJrqBvv/GTkt 07/DcWqGfPEfzRDNCrEOC1vGigJnFZov5J9h14qozVZpE7KLd3N9Vv/KQVgBevXT hUetuzLjCpg7BfwvUkK4DiEprl/Xxz9+XiqwZyWcUkktM3y1JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBe3L2XCzIFvfD8HMudurJCWoPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNjMwYjgyMjEtMDU5MS0z ZWVmLTk3M2MtNDE3M2RiZDRlNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLNG40zyIMXUtmelGtzP0iWbbC+zMwxpubP42pfeDYX13tiCZ9MoFY6 Lx6mbWhzQkFhGJzvyi1tGL95KG0yrq/T/+/CT5b8eqZG+xX+XNd5x3q2el1MeOAo quOtKZP0gtNma+QXhXvAWFgio7768vr6YhbWmQcqsrkuOtc5Ir6H78Eiz9ziVcoD IUukqNyQbWOdxPJVLl7qtgUDSP3z+UimnJtc9eEGE3okhUgEdirljSs6Ki7kGuGB 19tq25xMAXiC2MGdWMoqTamwrnLz5gs+2n5cIAoNrhMjy+9YDS6vtKwTYnnauVav gSNPayWtGERL7bfz+me/W+lFuXYPWio= -----END CERTIFICATE-----Generated at Mon Apr 14 00:09:06 2025 by rpki-client