$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d63f820-e170-3f85-9862-bca56fe485c0.roa File: 2d63f820-e170-3f85-9862-bca56fe485c0.roa (raw, json) Hash identifier: d/aCFaccBahJ2FCDGfJIN/h6jQBxke6POCWbt2fMvJM= Subject key identifier: 48:CC:80:6E:91:D4:3C:E5:3D:D8:62:52:E1:7D:27:91:F2:E1:05:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C2F04FBD83362B75659A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d63f820-e170-3f85-9862-bca56fe485c0.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 96.16.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:2f:04:fb:d8:33:62:b7:56:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=88f56aac-f71c-4cd2-906e-ecf0c1587da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:3f:59:dc:d1:66:e5:fe:b5:55:8d:b0:03: 5d:d4:bc:cb:1c:68:e0:29:77:bb:f7:ff:bc:13:8a: dc:51:8b:33:53:bb:59:97:93:42:06:ac:b9:b5:cf: 5e:9e:8e:71:11:c8:0c:59:54:8e:3d:3d:92:61:bf: dc:65:0a:8b:a2:cb:c9:04:bc:e6:7c:7c:af:d1:fe: 9c:9b:7e:d0:f9:ab:5c:3d:4e:4a:d4:87:4e:33:9f: 5a:ea:dd:bf:14:16:b5:71:32:6b:03:9b:54:2f:8a: 31:63:7b:8c:b8:20:a3:3a:af:11:39:17:c9:9b:d2: 16:ca:80:c2:80:ca:33:de:67:10:f9:80:fc:54:8d: 35:31:b5:d0:c9:c6:93:37:78:16:50:70:8a:f0:29: 88:ac:a9:b5:a0:5d:ac:24:6e:60:ec:58:2d:8a:08: 6d:c5:61:43:db:32:6a:32:a0:16:8e:d5:7b:42:d6: ea:68:8a:60:37:5f:6d:d5:d2:16:3d:c0:cf:a1:fb: 49:bc:e8:c2:4c:32:c5:19:34:d8:7f:90:a4:05:a4: be:de:a6:9e:b1:0f:07:1e:cb:50:59:bb:81:59:31: f8:d3:ac:99:fd:81:9f:a2:3e:7a:9a:46:0c:bb:88: b4:23:d8:25:4c:89:d7:2d:ef:84:af:20:c1:1b:93: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CC:80:6E:91:D4:3C:E5:3D:D8:62:52:E1:7D:27:91:F2:E1:05:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d63f820-e170-3f85-9862-bca56fe485c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:55:7c:8a:f7:92:cd:73:d1:4c:93:9e:c1:d9:42:d2:d9:14: e8:b6:fe:b4:2f:42:ea:03:06:5a:85:18:4e:98:34:d6:08:78: d5:84:0c:59:7d:43:a0:97:97:74:9d:f5:1e:e7:44:15:18:4c: d4:36:19:32:6a:97:87:09:51:50:f7:e3:b5:89:22:7c:f2:4b: 75:a2:0e:a0:4f:63:45:11:88:d8:91:d8:08:81:bb:79:49:32: 84:49:29:b4:86:4c:04:38:95:36:93:c3:35:8c:ac:f3:79:7d: c0:9a:26:54:8e:9c:f8:fc:40:89:3b:17:00:4a:71:94:35:a6: 8c:ab:ee:3b:ea:95:f8:ec:97:bb:a4:72:3d:50:09:60:71:ba: a2:d9:50:2f:21:fd:b2:87:19:8c:b7:66:96:97:7a:14:d7:45: 22:4e:dc:36:fe:ae:58:f5:74:f5:7b:ce:d5:e9:e8:f0:8e:81: 70:99:f3:5f:c8:37:53:a9:cc:39:6f:14:1c:b5:1b:62:ac:24: 47:f2:f5:66:3d:92:b6:a5:91:fc:5b:07:51:40:aa:d9:7b:50: c1:ee:53:43:37:1d:17:91:d6:03:d8:02:1a:c0:f6:84:62:92: c8:35:bc:7e:ef:b1:c6:d5:6d:0b:d5:a4:b9:22:5a:34:97:e6: 91:94:db:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTC8E+9gzYrdWWaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ODhmNTZhYWMtZjcxYy00Y2QyLTkwNmUtZWNmMGMxNTg3ZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne8/WdzRZuX+tVWNsANd1LzLHGjgKXe79/+8 E4rcUYszU7tZl5NCBqy5tc9eno5xEcgMWVSOPT2SYb/cZQqLosvJBLzmfHyv0f6c m37Q+atcPU5K1IdOM59a6t2/FBa1cTJrA5tUL4oxY3uMuCCjOq8RORfJm9IWyoDC gMoz3mcQ+YD8VI01MbXQycaTN3gWUHCK8CmIrKm1oF2sJG5g7FgtightxWFD2zJq MqAWjtV7QtbqaIpgN19t1dIWPcDPoftJvOjCTDLFGTTYf5CkBaS+3qaesQ8HHstQ WbuBWTH406yZ/YGfoj56mkYMu4i0I9glTInXLe+EryDBG5P3nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjMgG6R1DzlPdhiUuF9J5Hy4QWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQ2M2Y4MjAtZTE3MC0z Zjg1LTk4NjItYmNhNTZmZTQ4NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlVfIr3ks1z0UyTnsHZQtLZFOi2/rQvQuoDBlqFGE6YNNYIeNWEDFl9 Q6CXl3Sd9R7nRBUYTNQ2GTJql4cJUVD347WJInzyS3WiDqBPY0URiNiR2AiBu3lJ MoRJKbSGTAQ4lTaTwzWMrPN5fcCaJlSOnPj8QIk7FwBKcZQ1poyr7jvqlfjsl7uk cj1QCWBxuqLZUC8h/bKHGYy3ZpaXehTXRSJO3Db+rlj1dPV7ztXp6PCOgXCZ81/I N1OpzDlvFBy1G2KsJEfy9WY9kralkfxbB1FAqtl7UMHuU0M3HReR1gPYAhrA9oRi ksg1vH7vscbVbQvVpLkiWjSX5pGU23k= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:35 2025 by rpki-client