$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa File: 60d67551-cf73-33da-9edf-a4d13c922e9c.roa (raw, json) Hash identifier: LRsE3+ExTRT109pTkr0bjnduJPPvHr8b6HMsPl4F7s8= Subject key identifier: B6:ED:F0:FE:08:CB:60:A9:32:61:93:3B:8E:52:25:59:D0:2E:9E:17 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848CF463A011978897C2A7CAE80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa Signing time: Sat 08 Feb 2025 02:00:38 +0000 ROA not before: Sat 08 Feb 2025 02:00:38 +0000 ROA not after: Fri 09 May 2025 01:00:38 +0000 asID: 397630 IP address blocks: 172.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cf:46:3a:01:19:78:89:7c:2a:7c:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 8 02:00:38 2025 GMT Not After : May 9 01:00:38 2025 GMT Subject: CN=c947f893-0ea1-445b-948e-5429d3abedf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:24:ea:8d:9b:41:7b:a0:ab:1e:a4:7c:8f:c3: 4e:f8:19:e6:51:94:ea:67:b0:32:49:a2:88:c3:d4: dd:60:f1:67:fb:44:93:b9:1b:66:ca:2d:0e:7a:8e: d9:91:b9:31:cc:81:04:2e:da:b2:ae:4d:dc:98:e8: 25:46:41:87:eb:d9:7b:4c:32:3e:13:54:70:4f:52: 28:48:4c:17:e5:aa:56:88:b4:cd:2d:8d:a0:0a:d7: 8e:6a:53:49:5b:7b:4b:c1:0d:f5:94:e1:68:8c:10: fe:ce:f8:7c:bf:d3:b2:9b:97:14:5f:4e:79:59:1c: d6:6c:fb:3f:d0:05:e0:2d:91:24:ac:be:ae:ca:10: 90:b1:46:17:bf:29:6a:ca:66:28:66:db:78:9d:a7: 74:c1:e1:37:64:d9:a9:bb:f7:ad:37:ed:8a:94:93: 8c:34:0f:d5:c5:81:f1:b2:db:e1:87:ca:09:70:09: 3d:2a:72:ac:b0:b4:48:b5:f9:95:f7:0f:76:ba:ff: 0d:7a:7b:7d:95:3d:06:ad:e3:8d:ce:19:31:54:56: dc:60:dd:2f:0c:c5:48:66:a9:22:ef:9d:22:bd:f4: 47:46:d8:16:fb:8b:ac:4a:76:1c:f3:f1:de:df:e8: 64:03:46:b6:8e:65:9d:33:0e:be:f1:f9:fc:08:7c: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:ED:F0:FE:08:CB:60:A9:32:61:93:3B:8E:52:25:59:D0:2E:9E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:45:8b:89:73:64:d0:c9:50:83:c7:44:ed:49:71:54:ea:87: 46:f5:38:26:a6:d5:aa:a0:50:8f:52:0b:6a:e9:35:86:ab:48: 80:a1:5e:0e:2a:3b:ae:bf:9b:ac:50:3a:b9:8a:fb:e8:9d:b4: f5:72:c5:f2:1d:c5:18:0e:4b:68:4f:67:cf:7d:90:20:3c:b2: c5:d0:b0:c3:b9:b4:83:bf:3b:b0:e2:7d:e2:9b:eb:7d:4d:29: 95:40:23:c9:27:3a:e5:23:ac:b0:6b:e2:dd:77:18:3b:d1:fc: 78:85:19:02:6c:c3:7f:19:34:d6:0c:a7:8e:d8:6a:51:04:8b: 81:50:b4:09:60:41:e5:1c:ff:7a:6d:5e:35:69:af:66:7e:9e: 0f:a2:fb:b4:7c:62:69:82:c1:28:e8:9e:c9:28:0f:30:0c:4b: 83:8a:1f:fc:f6:b8:94:8d:25:fc:12:08:bc:05:dd:95:2e:c9: 72:a5:fe:89:08:6a:c1:9a:29:9b:1d:1f:ba:6f:bd:f6:e2:8c: 92:f7:aa:4c:65:77:c8:f3:ae:4a:19:b8:fa:97:c8:c9:38:33: 83:4c:27:40:d7:0c:23:64:a8:64:4a:c2:72:c7:c9:be:42:a6: 3e:09:4e:14:72:8b:04:05:a7:87:5e:5c:4b:33:f6:87:42:ca: 46:d8:de:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjPRjoBGXiJfCp8roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIwODAyMDAzOFoXDTI1MDUwOTAxMDAzOFowLzEtMCsGA1UEAxMk Yzk0N2Y4OTMtMGVhMS00NDViLTk0OGUtNTQyOWQzYWJlZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSTqjZtBe6CrHqR8j8NO+BnmUZTqZ7AySaKI w9TdYPFn+0STuRtmyi0Oeo7ZkbkxzIEELtqyrk3cmOglRkGH69l7TDI+E1RwT1Io SEwX5apWiLTNLY2gCteOalNJW3tLwQ31lOFojBD+zvh8v9Oym5cUX055WRzWbPs/ 0AXgLZEkrL6uyhCQsUYXvylqymYoZtt4nad0weE3ZNmpu/etN+2KlJOMNA/VxYHx stvhh8oJcAk9KnKssLRItfmV9w92uv8Nent9lT0GreONzhkxVFbcYN0vDMVIZqki 750ivfRHRtgW+4usSnYc8/He3+hkA0a2jmWdMw6+8fn8CHwIRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbt8P4Iy2CpMmGTO45SJVnQLp4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjBkNjc1NTEtY2Y3My0z M2RhLTllZGYtYTRkMTNjOTIyZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9Fi4lzZNDJUIPHRO1JcVTqh0b1OCam1aqgUI9SC2rpNYarSIChXg4q O66/m6xQOrmK++idtPVyxfIdxRgOS2hPZ899kCA8ssXQsMO5tIO/O7DifeKb631N KZVAI8knOuUjrLBr4t13GDvR/HiFGQJsw38ZNNYMp47YalEEi4FQtAlgQeUc/3pt XjVpr2Z+ng+i+7R8YmmCwSjonskoDzAMS4OKH/z2uJSNJfwSCLwF3ZUuyXKl/okI asGaKZsdH7pvvfbijJL3qkxld8jzrkoZuPqXyMk4M4NMJ0DXDCNkqGRKwnLHyb5C pj4JThRyiwQFp4deXEsz9odCykbY3sE= -----END CERTIFICATE-----Generated at Sat Apr 5 08:04:37 2025 by rpki-client