$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/3bc1c285-53b9-3ba1-9c3d-fffb35ca83a9.roa File: 3bc1c285-53b9-3ba1-9c3d-fffb35ca83a9.roa (raw, json) Hash identifier: 294iI6oUHYrXZOyUAcREb6y7C2oXBCyHF7ak3sO/G2s= Subject key identifier: A7:F5:62:91:91:57:2E:9A:10:5C:38:FB:CC:29:5F:40:86:3F:D8:D6 Certificate issuer: /CN=f7cd42e0-760c-4a8e-a7a9-074b638e2eb3 Certificate serial: 010D0C9F43285848B36C49421729EBB4EA812600 Authority key identifier: D0:D2:E6:F9:77:29:A5:F6:34:8E:29:40:D7:09:EA:66:EC:E5:8E:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/3bc1c285-53b9-3ba1-9c3d-fffb35ca83a9.roa Signing time: Wed 29 Jan 2025 02:34:46 +0000 ROA not before: Wed 29 Jan 2025 02:34:46 +0000 ROA not after: Tue 29 Apr 2025 01:34:46 +0000 asID: 6939 IP address blocks: 96.9.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:6c:49:42:17:29:eb:b4:ea:81:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7cd42e0-760c-4a8e-a7a9-074b638e2eb3 Validity Not Before: Jan 29 02:34:46 2025 GMT Not After : Apr 29 01:34:46 2025 GMT Subject: CN=0e7bb954-1ab2-40ec-b224-79e0ec69fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:e7:5c:77:6d:23:11:01:e9:6c:f1:fb:bb: c2:67:0f:0d:61:04:85:b2:0c:f0:0d:23:4c:c4:1d: 49:6b:5f:c3:cb:d3:50:f6:12:8d:1a:39:30:81:54: 88:76:10:a3:54:c3:00:1a:77:6b:bd:5c:d9:b3:9c: 62:b4:c8:44:c7:03:d6:08:6f:28:90:93:d3:d0:55: 59:66:be:c5:a6:7a:19:d4:4e:bc:9e:78:f0:b0:36: db:eb:84:fc:67:ec:d1:9b:50:f4:34:4c:80:e8:a0: 9d:c2:07:04:20:c9:1a:3d:8c:80:5e:cd:3d:7c:bc: d5:22:a6:26:0e:32:88:c2:6e:b8:6c:42:ba:ef:39: 8f:2c:4b:79:64:5c:2e:c0:ef:06:8a:a6:3b:1c:70: c1:9f:67:fe:18:58:fd:74:36:99:84:ea:29:c2:c0: f4:86:c0:a4:c9:06:ec:8b:c0:a2:9e:db:78:ba:06: b3:9e:eb:6f:af:30:2c:d3:02:87:14:41:f3:95:16: 8c:a1:2e:c3:13:bd:25:19:5c:2a:b8:a6:15:05:c6: 84:1d:93:c1:74:98:7c:74:40:dd:d8:9c:64:62:6e: 4f:a4:4f:b1:1e:77:7f:60:b4:26:a9:6c:ea:28:44: ea:0f:c9:b1:99:6e:ea:7c:70:70:6f:c0:19:2d:6e: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F5:62:91:91:57:2E:9A:10:5C:38:FB:CC:29:5F:40:86:3F:D8:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/3bc1c285-53b9-3ba1-9c3d-fffb35ca83a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.crl X509v3 Authority Key Identifier: keyid:D0:D2:E6:F9:77:29:A5:F6:34:8E:29:40:D7:09:EA:66:EC:E5:8E:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f7cd42e0-760c-4a8e-a7a9-074b638e2eb3.cer sbgp-ipAddrBlock: critical IPv4: 96.9.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ab:3c:a3:e0:cf:97:ed:da:bb:c8:0d:d9:25:6f:44:65:52: 4d:f5:3b:21:d8:5c:0d:0d:67:23:38:f6:c8:9d:bc:78:2a:f0: 43:9b:02:80:66:8e:38:c2:78:36:c7:b0:6b:5b:81:e7:25:f8: 19:f5:de:d5:21:54:14:fc:20:53:85:e8:12:c7:c9:74:59:65: 94:48:e4:00:5e:40:c9:07:57:ca:63:69:8a:79:a4:97:73:09: 6d:de:fd:ef:1c:b9:d6:07:bd:19:aa:bd:18:2d:45:69:c9:19: 36:5c:31:c1:f3:fc:df:7c:99:c4:91:bb:b6:ff:75:06:9f:46: f2:f9:e5:30:25:c5:df:bd:4f:89:51:00:b7:4a:56:9f:eb:38: d3:9b:4f:5d:eb:ae:6b:85:5d:26:50:4f:40:05:09:b8:3b:9d: bb:9e:56:61:8b:34:75:99:b0:b8:a6:b1:de:6f:a6:85:15:95: fd:7c:db:cc:fa:b4:80:51:fb:69:9b:35:1d:e9:54:ba:12:a2: e9:f6:de:0c:88:70:31:08:e9:ea:88:46:4c:4f:75:0a:d0:29: e6:1a:65:03:1a:e9:1c:a5:32:b6:eb:a9:a2:8f:b1:55:4b:69: 6c:40:a9:68:48:46:9c:b2:2f:47:39:38:d7:87:78:58:17:36: 96:98:9a:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizbElCFynrtOqBJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdjZDQyZTAtNzYwYy00YThlLWE3YTktMDc0YjYzOGUy ZWIzMB4XDTI1MDEyOTAyMzQ0NloXDTI1MDQyOTAxMzQ0NlowLzEtMCsGA1UEAxMk MGU3YmI5NTQtMWFiMi00MGVjLWIyMjQtNzllMGVjNjlmYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FDnXHdtIxEB6Wzx+7vCZw8NYQSFsgzwDSNM xB1Ja1/Dy9NQ9hKNGjkwgVSIdhCjVMMAGndrvVzZs5xitMhExwPWCG8okJPT0FVZ Zr7FpnoZ1E68nnjwsDbb64T8Z+zRm1D0NEyA6KCdwgcEIMkaPYyAXs09fLzVIqYm DjKIwm64bEK67zmPLEt5ZFwuwO8GiqY7HHDBn2f+GFj9dDaZhOopwsD0hsCkyQbs i8Cintt4ugaznutvrzAs0wKHFEHzlRaMoS7DE70lGVwquKYVBcaEHZPBdJh8dEDd 2JxkYm5PpE+xHnd/YLQmqWzqKETqD8mxmW7qfHBwb8AZLW4UpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf1YpGRVy6aEFw4+8wpX0CGP9jWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mN2Nk NDJlMC03NjBjLTRhOGUtYTdhOS0wNzRiNjM4ZTJlYjMvM2JjMWMyODUtNTNiOS0z YmExLTljM2QtZmZmYjM1Y2E4M2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjdjZDQyZTAtNzYwYy00YThlLWE3 YTktMDc0YjYzOGUyZWIzL2Y3Y2Q0MmUwLTc2MGMtNGE4ZS1hN2E5LTA3NGI2Mzhl MmViMy5jcmwwHwYDVR0jBBgwFoAU0NLm+XcppfY0jilA1wnqZuzlji4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mN2NkNDJlMC03NjBjLTRhOGUtYTdhOS0wNzRi NjM4ZTJlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyrPKPgz5ft2rvIDdklb0RlUk31OyHYXA0NZyM49sidvHgq8EObAoBm jjjCeDbHsGtbgecl+Bn13tUhVBT8IFOF6BLHyXRZZZRI5ABeQMkHV8pjaYp5pJdz CW3e/e8cudYHvRmqvRgtRWnJGTZcMcHz/N98mcSRu7b/dQafRvL55TAlxd+9T4lR ALdKVp/rONObT13rrmuFXSZQT0AFCbg7nbueVmGLNHWZsLimsd5vpoUVlf1828z6 tIBR+2mbNR3pVLoSoun23gyIcDEI6eqIRkxPdQrQKeYaZQMa6RylMrbrqaKPsVVL aWxAqWhIRpyyL0c5ONeHeFgXNpaYmi0= -----END CERTIFICATE-----Generated at Wed Feb 19 20:48:11 2025 by rpki-client