$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/9490730e-141d-3048-854b-0239e96b2509.roa File: 9490730e-141d-3048-854b-0239e96b2509.roa (raw, json) Hash identifier: FkqwIw0FLSF3QTK74DzYh/8u4bgaobqZQYZ0OcW0nJo= Subject key identifier: 48:3D:83:18:55:CB:D8:A4:79:F5:FB:DC:E2:1A:CA:92:93:CD:F0:42 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F43285848F65BD1DD98469FF76F6D6300 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/9490730e-141d-3048-854b-0239e96b2509.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 393398 IP address blocks: 96.47.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d1:dd:98:46:9f:f7:6f:6d:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=f1ee43fc-47c6-4e55-a8e8-ccde9ff854ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cc:81:3a:08:0f:a3:40:9a:4a:24:05:5d:4b: 1b:62:09:15:38:09:58:4f:45:08:3f:55:7e:97:ef: 08:c9:9d:7b:ca:f7:75:56:4f:55:75:c7:ef:96:5d: dc:2d:6e:24:3a:88:92:a6:f2:e8:b5:6a:40:e3:c9: 56:db:74:85:da:8c:09:34:df:a3:15:cf:a4:7e:79: bf:5c:95:30:15:5c:a7:1b:71:f8:67:26:07:6d:dd: fc:04:01:a8:02:ff:81:d6:95:0c:2b:7d:12:04:66: 7a:3a:82:3a:98:fe:3b:52:11:bc:62:12:b7:72:35: 27:b8:c6:af:cf:dc:91:6b:5c:78:12:18:aa:7e:0f: 18:83:c8:34:a6:e1:bc:ef:e2:ce:f2:18:98:f3:fa: 4e:5b:ee:ff:f9:07:90:f3:3e:1d:2c:86:25:bc:86: 71:d9:6b:5a:e9:36:bc:b0:b6:ef:b0:1e:37:d9:7e: 7a:bc:49:61:66:c4:e9:fc:10:9b:0c:0d:fb:6c:1b: 4c:9a:c9:c6:f2:0d:98:e5:dc:15:cd:83:85:c5:48: 17:47:4f:05:62:f9:7d:c2:ab:94:cf:87:e0:f8:62: 2e:06:99:33:2c:dd:fe:f3:2d:5b:8b:45:5f:74:fe: 4f:83:cd:57:4a:57:cc:cd:d0:7d:a1:74:a7:ef:d2: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3D:83:18:55:CB:D8:A4:79:F5:FB:DC:E2:1A:CA:92:93:CD:F0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/9490730e-141d-3048-854b-0239e96b2509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f3:7d:f0:93:0f:17:58:ad:b1:47:b9:87:8c:b7:59:fa:73: a8:85:cf:86:04:e0:3e:f0:47:68:42:84:49:bc:ad:ea:d0:ac: a5:8b:5a:04:ed:64:2c:f7:16:f3:80:27:54:44:c7:76:be:6a: ec:26:12:14:ed:78:a3:b8:b2:01:8f:4b:48:fc:26:84:06:57: a0:58:84:74:d9:2d:f6:02:23:e6:ca:b8:f9:25:60:90:de:4f: 6d:a2:b6:64:66:94:84:33:b1:0d:64:61:72:dc:78:10:43:24: 52:5d:2a:40:f6:cd:9c:c8:87:9c:77:0d:1c:20:dc:63:50:6e: e7:82:15:9f:e3:80:73:1b:9e:a3:91:4a:10:07:ba:1c:64:90: c0:3b:8e:73:f3:1e:4e:b8:2b:59:8f:f0:60:6c:df:72:89:fc: 62:65:7e:d5:00:e5:a7:90:e5:41:87:24:a2:79:b0:e2:39:44: 3a:9e:d3:d2:21:76:75:65:3b:17:95:37:ad:6e:a4:c7:9b:1c: 22:0a:50:f0:9e:92:9c:31:f9:cd:0e:4d:72:b2:4b:68:79:6b: c2:fb:54:48:d0:8c:b2:a6:72:db:57:7e:10:48:58:33:b3:52: 83:b6:93:e7:4d:7f:0a:6a:60:8d:b3:d3:f9:3f:3a:fc:6e:ae: fa:26:83:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9HdmEaf929tYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZjFlZTQzZmMtNDdjNi00ZTU1LWE4ZTgtY2NkZTlmZjg1NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcyBOggPo0CaSiQFXUsbYgkVOAlYT0UIP1V+ l+8IyZ17yvd1Vk9Vdcfvll3cLW4kOoiSpvLotWpA48lW23SF2owJNN+jFc+kfnm/ XJUwFVynG3H4ZyYHbd38BAGoAv+B1pUMK30SBGZ6OoI6mP47UhG8YhK3cjUnuMav z9yRa1x4Ehiqfg8Yg8g0puG87+LO8hiY8/pOW+7/+QeQ8z4dLIYlvIZx2Wta6Ta8 sLbvsB432X56vElhZsTp/BCbDA37bBtMmsnG8g2Y5dwVzYOFxUgXR08FYvl9wquU z4fg+GIuBpkzLN3+8y1bi0VfdP5Pg81XSlfMzdB9oXSn79KFaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg9gxhVy9ikefX73OIaypKTzfBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvOTQ5MDczMGUtMTQxZC0z MDQ4LTg1NGItMDIzOWU5NmIyNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbzffCTDxdYrbFHuYeMt1n6c6iFz4YE4D7wR2hChEm8rerQrKWLWgTt ZCz3FvOAJ1REx3a+auwmEhTteKO4sgGPS0j8JoQGV6BYhHTZLfYCI+bKuPklYJDe T22itmRmlIQzsQ1kYXLceBBDJFJdKkD2zZzIh5x3DRwg3GNQbueCFZ/jgHMbnqOR ShAHuhxkkMA7jnPzHk64K1mP8GBs33KJ/GJlftUA5aeQ5UGHJKJ5sOI5RDqe09Ih dnVlOxeVN61upMebHCIKUPCekpwx+c0OTXKyS2h5a8L7VEjQjLKmcttXfhBIWDOz UoO2k+dNfwpqYI2z0/k/Ovxurvomg/4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:55:57 2025 by rpki-client