$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/473b6dbf-aece-3ee3-abe9-39a3ce283153.roa File: 473b6dbf-aece-3ee3-abe9-39a3ce283153.roa (raw, json) Hash identifier: LWy0emXWDHRdR+gEJYtLx3ojxmGSIrTjXGoHl08MNp8= Subject key identifier: B6:8F:FA:BF:C5:18:0D:BA:C5:27:A0:B9:C5:62:95:A0:54:07:58:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C393B060733784E4A3B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/473b6dbf-aece-3ee3-abe9-39a3ce283153.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 96.17.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:39:3b:06:07:33:78:4e:4a:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=897f2f3b-8864-4f26-a82a-e5b116b51cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:de:11:42:91:28:58:8b:c5:49:86:b0:64: 31:9f:ca:57:25:73:ca:c1:83:5d:1f:af:8c:ed:2a: 91:a6:be:c7:80:7b:ae:4c:38:cc:b3:16:93:26:b2: 37:94:eb:c2:42:4d:94:47:05:ee:ef:d8:7c:4f:fd: 15:ab:17:6b:57:8a:e9:b9:6b:c1:f5:8c:03:0f:39: d3:4c:0b:69:48:ce:6a:82:25:47:8e:c1:5a:e4:0d: 2d:70:a6:57:5c:99:f5:a6:ff:cd:e4:01:50:80:7e: ff:6c:52:fd:b5:a0:11:ac:39:be:4f:7f:3e:eb:d4: 53:bd:1c:9c:3f:2f:31:73:68:d8:5f:f8:0f:4a:bf: b6:a6:ab:72:cc:a8:fe:de:d7:81:57:e0:bc:26:45: 3d:b5:9c:f7:58:35:ca:1d:c3:53:12:02:35:15:50: 2a:06:86:80:8a:8a:b4:a6:a4:a4:3b:50:74:f8:2f: e6:c8:1b:3b:71:47:34:37:77:ee:97:6f:59:41:b5: 1d:f9:7a:a4:4b:7a:42:a4:8b:2a:65:40:c5:a0:98: b6:b1:51:c1:b5:ae:ac:bd:1b:e3:f9:98:f2:99:78: ff:ca:f4:77:d5:d6:23:42:70:d4:b3:29:b8:6d:ae: 31:4d:4f:80:f7:bc:a6:48:2e:6b:99:fa:63:23:a8: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8F:FA:BF:C5:18:0D:BA:C5:27:A0:B9:C5:62:95:A0:54:07:58:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/473b6dbf-aece-3ee3-abe9-39a3ce283153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c8:fe:f9:76:37:e9:cc:ae:2f:d5:fe:2c:43:79:db:59:f3: dc:67:07:43:f8:bc:63:75:17:33:6d:b4:8c:d5:ab:1c:06:8f: f8:fb:1a:df:95:8c:28:42:1c:17:bd:d6:87:7a:61:d9:60:4f: 43:6f:0b:fe:3e:5b:42:c3:cb:cf:a0:e8:32:de:a0:07:97:52: 66:61:ea:9c:1d:5d:92:85:dd:c4:96:00:18:d0:60:01:9f:35: 0b:a5:32:37:13:08:de:75:b6:54:31:73:e7:cf:08:58:32:5e: c2:c2:37:fd:a1:37:f0:33:17:8c:47:39:42:4e:e8:b1:67:45: 79:76:72:41:11:07:f1:6d:0a:32:d5:23:65:10:e7:40:a3:d9: 11:b5:e6:32:8f:11:67:32:8c:da:63:e6:50:24:01:bb:6e:9c: e2:7c:89:4a:87:d4:85:98:6a:fb:e3:7c:d2:a2:2a:ca:ea:39: e4:1c:8e:8c:92:5e:d0:3c:38:4d:ee:07:b9:68:70:04:86:0e: c5:a0:d0:bb:d8:c3:dc:74:1c:d6:c6:3b:fe:a7:8e:0f:ca:45: d8:c7:22:fa:5d:48:19:46:b4:a8:4b:b4:ee:7f:d3:7c:d0:52: 81:b4:2b:bd:29:7a:e6:14:23:74:c9:90:38:e6:81:f6:5b:92: 59:d2:3b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDk7BgczeE5KO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ODk3ZjJmM2ItODg2NC00ZjI2LWE4MmEtZTViMTE2YjUxY2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri3eEUKRKFiLxUmGsGQxn8pXJXPKwYNdH6+M 7SqRpr7HgHuuTDjMsxaTJrI3lOvCQk2URwXu79h8T/0VqxdrV4rpuWvB9YwDDznT TAtpSM5qgiVHjsFa5A0tcKZXXJn1pv/N5AFQgH7/bFL9taARrDm+T38+69RTvRyc Py8xc2jYX/gPSr+2pqtyzKj+3teBV+C8JkU9tZz3WDXKHcNTEgI1FVAqBoaAioq0 pqSkO1B0+C/myBs7cUc0N3ful29ZQbUd+XqkS3pCpIsqZUDFoJi2sVHBta6svRvj +ZjymXj/yvR31dYjQnDUsym4ba4xTU+A97ymSC5rmfpjI6jxUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaP+r/FGA26xSegucVilaBUB1jfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDczYjZkYmYtYWVjZS0z ZWUzLWFiZTktMzlhM2NlMjgzMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBGmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3I/vl2N+nMri/V/ixDedtZ89xnB0P4vGN1FzNttIzVqxwGj/j7Gt+V jChCHBe91od6YdlgT0NvC/4+W0LDy8+g6DLeoAeXUmZh6pwdXZKF3cSWABjQYAGf NQulMjcTCN51tlQxc+fPCFgyXsLCN/2hN/AzF4xHOUJO6LFnRXl2ckERB/FtCjLV I2UQ50Cj2RG15jKPEWcyjNpj5lAkAbtunOJ8iUqH1IWYavvjfNKiKsrqOeQcjoyS XtA8OE3uB7locASGDsWg0LvYw9x0HNbGO/6njg/KRdjHIvpdSBlGtKhLtO5/03zQ UoG0K70peuYUI3TJkDjmgfZbklnSO/Y= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:56 2025 by rpki-client