$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1abd5c28-9e2d-3b61-98a8-3c89da30685a.roa File: 1abd5c28-9e2d-3b61-98a8-3c89da30685a.roa (raw, json) Hash identifier: S/lfcGeEZfxBsKnliRsdBjlw4y1DJPUY/B25kmNJOFA= Subject key identifier: CE:36:FB:2D:A9:23:1A:07:0A:86:D5:C4:B4:55:08:BD:D6:BD:D4:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C399AF7A05CF014DD5D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1abd5c28-9e2d-3b61-98a8-3c89da30685a.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 96.17.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:39:9a:f7:a0:5c:f0:14:dd:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=a9b1cc13-3373-4fe5-b760-4a3064637552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e8:b6:df:e2:59:d4:16:e6:30:90:9b:09:a1: e7:e1:bd:56:34:2e:fb:d0:fe:84:1c:ed:af:d9:3a: 5e:69:3f:b7:c4:12:d1:09:ef:06:b8:51:fd:40:f3: c4:a0:ca:8c:a9:76:65:cc:1f:4f:6f:fc:1c:63:ee: 30:b5:ab:04:50:5c:ac:90:d3:2b:76:2d:28:23:e3: 33:e0:60:8d:68:dd:b5:2a:1d:e2:89:f9:32:ea:94: ef:d7:06:c2:ff:65:d8:ce:f8:5b:70:60:4f:6e:e1: 4e:67:9a:c6:6d:5b:27:7c:4a:23:8a:bf:64:e6:fe: 58:14:c8:5e:25:34:d1:f4:77:6b:64:e3:58:cb:5d: 16:d1:8a:3b:c8:88:8a:e5:2f:b9:21:f4:d1:a4:ff: 82:96:6c:83:3f:62:d5:7b:6b:60:bc:ec:a9:f8:25: d2:b8:ca:67:cc:93:c8:a4:dd:1f:12:f6:01:ae:73: 3e:ff:bd:60:15:0a:57:d9:21:57:7b:7e:ae:dd:f2: 75:b3:72:2d:d5:b9:dc:58:5d:9d:bb:1b:12:3f:b2: de:0b:4c:b0:f4:16:86:39:2a:3c:5f:4e:27:58:75: b2:5c:c3:73:a9:5e:35:10:b6:8f:b5:8b:17:d9:b9: f4:af:38:66:d5:48:c6:dc:61:00:64:9e:f2:7e:47: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:36:FB:2D:A9:23:1A:07:0A:86:D5:C4:B4:55:08:BD:D6:BD:D4:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1abd5c28-9e2d-3b61-98a8-3c89da30685a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1d:fa:b6:5e:c7:98:b5:b6:9d:f7:88:48:35:13:2c:32:00: f7:56:0d:15:3a:78:be:3f:3c:f4:65:7e:67:6b:f3:bd:f3:4c: ce:b5:f6:cb:b3:9c:03:68:6c:1c:4e:29:9b:47:d6:82:ff:ad: 9b:f4:a3:43:f4:cb:1c:80:97:64:6e:92:6a:15:9a:c9:24:7e: 09:fd:1f:a9:a9:16:0e:c2:cb:11:60:63:2b:49:f5:09:e6:4e: 68:46:4b:b2:1c:b4:7f:b0:66:49:cb:fe:b3:d5:4c:3a:58:0d: 64:90:9b:cc:ca:d7:b6:08:a9:ff:4a:a5:ef:61:7b:fa:b7:89: a3:4a:82:09:cc:4c:cf:d5:c1:d3:72:e6:e5:33:d3:b9:e2:73: 07:25:66:06:2d:09:5a:d1:c5:ec:9f:0e:fb:f8:b2:4d:a4:67: 21:a4:fb:39:d9:92:35:9c:d3:f5:3e:e5:b4:4f:d8:a5:68:a9: 14:93:50:be:15:37:c4:72:cf:78:0d:8d:03:66:10:17:88:84: f6:3f:f2:57:b7:d1:ae:27:e2:e3:9c:fa:a8:c0:63:c2:ba:0c: c5:99:a5:de:a6:ac:35:8c:09:38:31:23:fd:41:32:87:0e:54: 91:c1:be:70:96:32:a0:fd:9c:29:cb:ab:d0:96:d2:85:0d:c9: 4f:c6:17:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDma96Bc8BTdXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YTliMWNjMTMtMzM3My00ZmU1LWI3NjAtNGEzMDY0NjM3NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOi23+JZ1BbmMJCbCaHn4b1WNC770P6EHO2v 2TpeaT+3xBLRCe8GuFH9QPPEoMqMqXZlzB9Pb/wcY+4wtasEUFyskNMrdi0oI+Mz 4GCNaN21Kh3iifky6pTv1wbC/2XYzvhbcGBPbuFOZ5rGbVsnfEojir9k5v5YFMhe JTTR9HdrZONYy10W0Yo7yIiK5S+5IfTRpP+ClmyDP2LVe2tgvOyp+CXSuMpnzJPI pN0fEvYBrnM+/71gFQpX2SFXe36u3fJ1s3It1bncWF2duxsSP7LeC0yw9BaGOSo8 X04nWHWyXMNzqV41ELaPtYsX2bn0rzhm1UjG3GEAZJ7yfke4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM42+y2pIxoHCobVxLRVCL3WvdRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWFiZDVjMjgtOWUyZC0z YjYxLTk4YTgtM2M4OWRhMzA2ODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAd+rZex5i1tp33iEg1EywyAPdWDRU6eL4/PPRlfmdr873zTM619suz nANobBxOKZtH1oL/rZv0o0P0yxyAl2RukmoVmskkfgn9H6mpFg7CyxFgYytJ9Qnm TmhGS7IctH+wZknL/rPVTDpYDWSQm8zK17YIqf9Kpe9he/q3iaNKggnMTM/VwdNy 5uUz07nicwclZgYtCVrRxeyfDvv4sk2kZyGk+znZkjWc0/U+5bRP2KVoqRSTUL4V N8Ryz3gNjQNmEBeIhPY/8le30a4n4uOc+qjAY8K6DMWZpd6mrDWMCTgxI/1BMocO VJHBvnCWMqD9nCnLq9CW0oUNyU/GFyc= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:35 2025 by rpki-client