$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a9615a5-d872-3ee5-ad89-e0ae51dd4af8.roa File: 5a9615a5-d872-3ee5-ad89-e0ae51dd4af8.roa (raw, json) Hash identifier: MQvckMqpd/WVGwI2BlQKl4ZaALyCkp4subO961blHUs= Subject key identifier: 4D:42:FE:25:70:D8:87:57:F2:15:D7:E4:AD:5D:B0:7E:E2:8C:83:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C37DAAC8C9060C54B8780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a9615a5-d872-3ee5-ad89-e0ae51dd4af8.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 96.16.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:37:da:ac:8c:90:60:c5:4b:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=dd9b2c7e-3112-46c1-a211-e69d6865d13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:0c:20:c9:7e:cb:52:5d:1c:3e:14:cb:2e: 68:72:56:74:b8:bc:14:92:10:09:ce:1e:13:7f:1f: 32:c2:b2:9a:6c:eb:12:4f:97:11:96:40:46:54:cb: b7:73:89:5c:59:b4:03:94:fa:7f:6d:3c:c4:c8:f1: 10:3a:d7:6f:c0:81:58:92:c2:57:9b:eb:eb:8e:97: 03:59:3e:a0:4d:a2:e9:75:7d:28:71:07:90:fd:c0: 66:79:e2:65:00:9a:e8:06:6b:cb:a7:c5:37:89:e9: 1d:94:42:c0:2c:56:66:99:ed:44:91:07:3d:11:8f: 5a:2e:3d:6c:21:6d:0e:55:11:84:88:67:57:4d:eb: da:cd:9e:22:a0:57:ff:84:ae:47:65:f9:45:7d:d7: 90:bd:f2:53:d8:fc:b8:a1:5e:2a:ff:f2:9a:70:31: ae:63:41:8f:de:4d:f0:48:78:d9:94:ca:0f:e1:d4: 25:45:7a:09:7f:6f:19:6d:20:da:dd:e6:5d:09:28: 09:ce:08:f4:4c:a6:9f:65:89:a2:26:da:c8:a9:d6: 05:87:a6:ad:12:11:05:36:57:82:c5:3c:1b:0d:e6: c4:53:f5:e0:ff:1b:50:c3:ba:63:f9:d4:2f:6a:2b: d6:7d:e0:49:0a:ef:2b:42:7c:9a:01:4d:14:ad:9f: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:42:FE:25:70:D8:87:57:F2:15:D7:E4:AD:5D:B0:7E:E2:8C:83:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a9615a5-d872-3ee5-ad89-e0ae51dd4af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:10:b1:df:83:c2:c0:9f:27:d2:16:11:2f:cb:36:ae:f4:e5: e3:c0:52:56:f9:fd:00:c6:72:11:7c:a1:df:18:c6:11:c1:02: f6:cd:5b:0a:03:47:89:f2:da:85:f3:fb:cf:59:17:32:08:13: ae:63:f7:d8:4e:d7:a2:cf:eb:48:2d:0a:0e:c9:a0:dd:43:0a: bd:ae:9d:ac:59:ce:2c:69:3e:53:b3:bb:0a:bf:5b:0c:be:f4: f9:d8:41:d9:95:83:69:a3:74:44:a4:88:a4:aa:1c:ec:32:44: 27:01:f0:4b:b7:94:2d:6b:0f:00:e0:ec:b5:cc:98:53:20:01: 1d:09:ac:d0:3c:61:da:36:c9:d5:30:1e:fd:81:cd:3c:1e:d2: 69:32:dc:82:be:a9:b3:02:be:e9:45:19:c8:35:b6:c4:56:4a: 72:be:5f:14:fc:c3:d8:a8:86:e0:6f:04:34:6a:41:68:26:80: ca:e9:33:30:ca:7d:d1:c0:e8:d5:c2:30:70:67:b0:34:ff:51: 01:bb:9a:eb:09:85:d1:83:11:81:98:75:62:0b:69:fd:45:5b: 8a:d5:b8:9f:1d:15:f5:5b:4a:b3:7c:0e:18:13:a3:be:a9:43: 3a:c6:1f:77:f6:46:b5:52:52:b2:cf:ec:2e:71:50:66:c5:83: b4:75:31:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDfarIyQYMVLh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZGQ5YjJjN2UtMzExMi00NmMxLWEyMTEtZTY5ZDY4NjVkMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfAMIMl+y1JdHD4Uyy5oclZ0uLwUkhAJzh4T fx8ywrKabOsST5cRlkBGVMu3c4lcWbQDlPp/bTzEyPEQOtdvwIFYksJXm+vrjpcD WT6gTaLpdX0ocQeQ/cBmeeJlAJroBmvLp8U3iekdlELALFZmme1EkQc9EY9aLj1s IW0OVRGEiGdXTevazZ4ioFf/hK5HZflFfdeQvfJT2Py4oV4q//KacDGuY0GP3k3w SHjZlMoP4dQlRXoJf28ZbSDa3eZdCSgJzgj0TKafZYmiJtrIqdYFh6atEhEFNleC xTwbDebEU/Xg/xtQw7pj+dQvaivWfeBJCu8rQnyaAU0UrZ9zYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1C/iVw2IdX8hXX5K1dsH7ijIOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWE5NjE1YTUtZDg3Mi0z ZWU1LWFkODktZTBhZTUxZGQ0YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIQsd+DwsCfJ9IWES/LNq705ePAUlb5/QDGchF8od8YxhHBAvbNWwoD R4ny2oXz+89ZFzIIE65j99hO16LP60gtCg7JoN1DCr2unaxZzixpPlOzuwq/Wwy+ 9PnYQdmVg2mjdESkiKSqHOwyRCcB8Eu3lC1rDwDg7LXMmFMgAR0JrNA8Ydo2ydUw Hv2BzTwe0mky3IK+qbMCvulFGcg1tsRWSnK+XxT8w9iohuBvBDRqQWgmgMrpMzDK fdHA6NXCMHBnsDT/UQG7musJhdGDEYGYdWILaf1FW4rVuJ8dFfVbSrN8DhgTo76p QzrGH3f2RrVSUrLP7C5xUGbFg7R1MXM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:46 2025 by rpki-client