$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa File: 3e8828ed-0322-3dec-8145-aa943c8f2112.roa (raw, json) Hash identifier: dlrdLSYQ3RacV8um9IHSyq22YJyEWsLF+U2bZxljQio= Subject key identifier: E9:0B:1A:C5:CA:7F:E1:66:A3:05:28:66:F4:34:4E:F2:0A:64:6C:AF Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F432858495EEEE96485923B7699222500 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 53828 IP address blocks: 96.8.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e9:64:85:92:3b:76:99:22:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=79fc1790-783c-4e2b-ae79-299a079a2b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:6a:71:ce:c1:70:47:cc:5e:7b:81:eb:3d: 87:1a:0c:6b:73:69:5d:ca:65:de:f5:25:3f:04:59: 2c:5f:18:d8:f4:04:1c:3a:85:4b:35:8f:ba:a5:98: 0d:42:b1:f4:9a:e3:35:8b:e1:f2:3c:86:40:8e:a3: 68:15:74:31:4b:59:6d:7e:fb:34:57:d1:92:90:cd: a7:e4:8c:c2:f3:6c:61:5a:d6:27:ac:40:b1:09:08: 0f:d6:be:e4:19:b4:0c:62:e2:ea:d6:bb:2c:d5:f6: 8b:b9:1c:f5:5a:6d:41:50:dc:6a:d8:a0:9e:3a:2b: 26:d2:3e:19:d8:23:d9:87:f4:dd:4b:18:fd:8b:d6: c2:0d:36:98:82:2c:a6:42:78:2d:86:ed:5c:02:29: 48:f7:43:11:13:e7:69:f2:c0:9a:e7:72:cf:bf:78: 4c:22:31:f0:73:3f:94:81:f0:39:c9:2f:57:5c:9b: d1:4d:68:3a:cd:09:0e:47:f0:93:e3:46:79:30:d8: a4:d6:cf:03:a3:f5:db:28:1e:54:25:7e:6e:50:7b: fd:41:6d:91:29:ec:72:69:63:21:47:2f:9a:82:6f: c0:b5:e0:96:72:6e:5b:0c:ae:f2:87:e5:cf:bd:6a: c9:c8:29:08:8d:3c:e8:e9:6a:5a:48:ed:e2:c9:c8: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0B:1A:C5:CA:7F:E1:66:A3:05:28:66:F4:34:4E:F2:0A:64:6C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/3e8828ed-0322-3dec-8145-aa943c8f2112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 96.8.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ac:ea:96:f2:a5:84:17:71:d4:66:45:b7:3b:ce:30:d1:cf: b5:c7:0b:9a:32:42:b6:ad:55:41:23:b8:99:49:cb:c5:04:08: 93:94:f2:47:32:26:99:84:3f:d2:1d:f1:e4:c5:ca:e7:b5:ff: 35:a4:78:b7:fb:9d:ca:d3:bf:15:e4:1c:ed:db:d8:25:c3:4b: 7c:50:f0:f4:5a:8e:05:0a:09:5f:86:3a:fb:7d:6f:9a:dc:63: a6:3f:fa:57:54:6d:29:ce:73:5a:f1:33:45:5d:73:a9:4e:b5: 25:34:89:c0:36:b5:c3:68:6f:5b:fc:c6:89:70:78:7a:13:46: bd:16:e3:b3:41:09:22:6c:bf:aa:48:67:04:65:f5:9c:5c:9b: 43:c0:8d:ef:5e:65:fb:78:a1:ad:72:6f:8b:94:82:26:e4:82: b5:29:cb:20:c9:3a:46:c9:d8:94:e1:4f:ed:a0:8e:cc:be:e2: eb:d6:b3:f7:86:f7:6f:b7:b3:7e:19:20:cd:80:ef:af:d7:33: f6:63:69:ba:0a:87:1a:63:92:b9:00:b7:49:ff:c4:1a:e5:6e: 94:4c:ad:3e:29:34:a2:8e:17:01:e6:09:ba:20:47:b8:97:e2: 51:b2:c3:4c:e9:f8:ec:0b:1f:5b:ae:82:7a:a5:fa:4d:46:08: 62:c1:d0:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7ulkhZI7dpkiJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk NzlmYzE3OTAtNzgzYy00ZTJiLWFlNzktMjk5YTA3OWEyYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ1qcc7BcEfMXnuB6z2HGgxrc2ldymXe9SU/ BFksXxjY9AQcOoVLNY+6pZgNQrH0muM1i+HyPIZAjqNoFXQxS1ltfvs0V9GSkM2n 5IzC82xhWtYnrECxCQgP1r7kGbQMYuLq1rss1faLuRz1Wm1BUNxq2KCeOism0j4Z 2CPZh/TdSxj9i9bCDTaYgiymQngthu1cAilI90MRE+dp8sCa53LPv3hMIjHwcz+U gfA5yS9XXJvRTWg6zQkOR/CT40Z5MNik1s8Do/XbKB5UJX5uUHv9QW2RKexyaWMh Ry+agm/AteCWcm5bDK7yh+XPvWrJyCkIjTzo6WpaSO3iychvywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkLGsXKf+FmowUoZvQ0TvIKZGyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvM2U4ODI4ZWQtMDMyMi0z ZGVjLTgxNDUtYWE5NDNjOGYyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFis6pbypYQXcdRmRbc7zjDRz7XHC5oyQratVUEjuJlJy8UECJOU8kcy JpmEP9Id8eTFyue1/zWkeLf7ncrTvxXkHO3b2CXDS3xQ8PRajgUKCV+GOvt9b5rc Y6Y/+ldUbSnOc1rxM0Vdc6lOtSU0icA2tcNob1v8xolweHoTRr0W47NBCSJsv6pI ZwRl9Zxcm0PAje9eZft4oa1yb4uUgibkgrUpyyDJOkbJ2JThT+2gjsy+4uvWs/eG 92+3s34ZIM2A76/XM/ZjaboKhxpjkrkAt0n/xBrlbpRMrT4pNKKOFwHmCbogR7iX 4lGyw0zp+OwLH1uugnql+k1GCGLB0J0= -----END CERTIFICATE-----Generated at Sun Apr 13 03:09:52 2025 by rpki-client