$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0f8f71c3-619c-31d0-bbc6-2339cd699138.roa File: 0f8f71c3-619c-31d0-bbc6-2339cd699138.roa (raw, json) Hash identifier: fDxNJ6HeTwrvFDS2PNhb5SrGVHqVgQ17sGBayHnw+8A= Subject key identifier: 8B:C0:BF:87:FB:10:AB:D8:F3:4A:7D:C3:67:58:BF:65:FE:5A:CA:A6 Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F43285848DBD66CA407F54E961DDF86F0 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0f8f71c3-619c-31d0-bbc6-2339cd699138.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 41095 IP address blocks: 172.96.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:6c:a4:07:f5:4e:96:1d:df:86:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=edcd8a06-4630-43c9-afea-97c65aae8e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:ec:65:90:e9:8c:1a:8e:07:62:a5:6e:d6: 69:26:84:ce:92:82:18:fe:4f:1b:df:76:14:6d:eb: b6:4c:53:3c:ee:93:23:0f:45:f6:1b:30:ac:8b:64: 12:b9:93:9a:da:b8:00:1b:80:c3:97:ef:59:e7:53: ee:72:eb:7d:15:86:f9:59:df:d5:33:3d:75:c9:7d: 20:3c:1f:91:03:78:42:e4:a2:08:5a:34:10:c3:a0: e7:25:ec:3c:d0:fd:b0:57:ac:73:df:9f:f7:fe:ca: 8f:1e:a2:30:97:98:de:66:c5:c7:f9:fc:ca:01:d7: df:83:a7:f1:ee:69:80:d4:9c:e9:3f:a4:62:43:9b: 57:81:07:4d:c0:af:f7:5f:6f:cb:ed:52:72:c2:ef: 1a:ee:09:f3:da:26:1f:a0:06:5b:97:4c:59:40:34: 02:64:e9:01:3e:62:f2:60:1d:0f:64:f4:a1:a2:4b: 89:2d:fb:af:a4:e6:03:2e:29:35:f4:7c:c2:99:d9: 19:e6:2d:7e:3a:f8:30:00:f3:fb:4c:bd:8b:da:8f: b8:5c:1f:bb:40:09:f4:30:54:61:c4:8f:a4:f5:9a: f9:2c:d3:ba:f9:e7:89:69:5f:59:ce:a9:02:66:05: 21:00:fe:f6:b8:66:bf:eb:46:ad:dc:de:09:ed:98: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C0:BF:87:FB:10:AB:D8:F3:4A:7D:C3:67:58:BF:65:FE:5A:CA:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0f8f71c3-619c-31d0-bbc6-2339cd699138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 172.96.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f9:3f:b2:7f:b8:e4:a3:17:25:29:59:8c:32:73:a3:3b:51: f3:f5:37:36:66:bd:01:e4:61:9c:54:f1:26:52:25:ee:2a:7d: 79:b9:7b:af:64:4c:b2:91:6a:6c:be:21:6d:a3:1d:24:93:de: a2:d9:a3:d1:4e:18:f9:4d:9d:a0:83:da:e3:8a:9f:57:12:ac: 83:7b:11:38:4c:6e:bf:f6:8b:e9:29:19:12:32:d8:39:24:a9: 1e:49:a4:db:88:28:cf:a7:6b:12:c4:8e:f2:1f:ef:9b:6d:4d: 84:9e:1e:5f:d7:e9:da:dc:41:32:4d:47:a7:0b:94:6d:0f:5a: 7b:ce:f4:0d:a1:1e:b5:8d:23:87:9e:23:87:44:94:95:05:45: a8:a5:f3:b1:b3:d7:bd:78:28:c8:c2:e4:b0:15:c0:08:7f:a9: 1a:7f:cb:ab:19:f3:ad:7b:c1:ed:f1:8d:68:e1:95:18:83:e4: 24:6d:68:b7:80:2a:86:3e:a3:78:07:9e:eb:1f:49:0e:d0:1e: 41:03:7f:51:22:ab:9b:34:14:e5:b4:67:43:04:28:a9:a2:fc: 04:60:4b:77:de:b4:c9:30:a6:80:de:2b:6a:a9:2e:f5:48:ee: 22:ab:bc:ee:3d:06:10:a6:1f:3b:39:a7:3c:c7:e4:02:4b:04: 9c:de:8b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjb1mykB/VOlh3fhvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk ZWRjZDhhMDYtNDYzMC00M2M5LWFmZWEtOTdjNjVhYWU4ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhezsZZDpjBqOB2KlbtZpJoTOkoIY/k8b33YU beu2TFM87pMjD0X2GzCsi2QSuZOa2rgAG4DDl+9Z51Pucut9FYb5Wd/VMz11yX0g PB+RA3hC5KIIWjQQw6DnJew80P2wV6xz35/3/sqPHqIwl5jeZsXH+fzKAdffg6fx 7mmA1JzpP6RiQ5tXgQdNwK/3X2/L7VJywu8a7gnz2iYfoAZbl0xZQDQCZOkBPmLy YB0PZPShokuJLfuvpOYDLik19HzCmdkZ5i1+OvgwAPP7TL2L2o+4XB+7QAn0MFRh xI+k9Zr5LNO6+eeJaV9ZzqkCZgUhAP72uGa/60at3N4J7ZgdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvAv4f7EKvY80p9w2dYv2X+WsqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvMGY4ZjcxYzMtNjE5Yy0z MWQwLWJiYzYtMjMzOWNkNjk5MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL5P7J/uOSjFyUpWYwyc6M7UfP1NzZmvQHkYZxU8SZSJe4qfXm5e69k TLKRamy+IW2jHSST3qLZo9FOGPlNnaCD2uOKn1cSrIN7EThMbr/2i+kpGRIy2Dkk qR5JpNuIKM+naxLEjvIf75ttTYSeHl/X6drcQTJNR6cLlG0PWnvO9A2hHrWNI4ee I4dElJUFRail87Gz1714KMjC5LAVwAh/qRp/y6sZ8617we3xjWjhlRiD5CRtaLeA KoY+o3gHnusfSQ7QHkEDf1Eiq5s0FOW0Z0MEKKmi/ARgS3fetMkwpoDeK2qpLvVI 7iKrvO49BhCmHzs5pzzH5AJLBJzei0A= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:11 2025 by rpki-client