$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66505887-39f1-3f9c-a22c-d37819efaa9e.roa File: 66505887-39f1-3f9c-a22c-d37819efaa9e.roa (raw, json) Hash identifier: jQ5pOU1IVfp+CRg1eRaHbAU3BJZjF2jpvyD3zoaBNaw= Subject key identifier: A3:DE:C3:57:E8:0F:94:7D:25:13:95:18:00:85:BB:41:27:82:02:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C398E7EECA9AE1E4779C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66505887-39f1-3f9c-a22c-d37819efaa9e.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 96.17.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:39:8e:7e:ec:a9:ae:1e:47:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=95f580c7-88bd-4046-82f1-bb467c994565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e1:2e:1a:bd:92:93:12:30:59:db:c8:3e:07: e2:33:05:48:65:43:78:fe:64:03:4e:26:32:e6:53: 91:1f:3e:2f:0e:da:69:46:06:5e:0d:72:58:a1:cf: ad:ab:42:3f:3a:96:bf:e2:cc:e9:da:36:66:f5:b1: 11:c1:fd:12:2b:0b:ad:de:df:0e:a7:38:71:1f:47: 1e:ce:54:d7:fc:93:c7:6d:4d:38:fd:36:ef:6d:20: 82:24:59:2f:df:07:65:dc:5c:77:16:cb:76:11:dd: 2f:78:21:e3:4e:28:c3:c0:50:ca:57:cf:92:96:d0: 05:93:62:f6:f4:20:16:1a:70:a2:27:5b:76:13:4b: 43:60:09:d7:bf:5d:11:5f:47:0a:34:88:2f:4f:80: ec:a9:10:a8:a3:ef:5d:06:9c:49:e5:0c:34:4f:9c: ee:42:9f:a8:02:a3:33:1a:c3:bc:22:47:8b:6c:b4: b0:1b:ed:fe:ca:e5:1e:f4:21:be:1c:ff:46:28:c3: 60:92:7b:dd:6f:e4:3f:4d:88:83:ce:d3:7f:67:be: 56:14:58:af:a8:04:45:cf:18:2f:32:91:62:58:31: d0:df:8f:3c:a3:e5:3e:51:8e:4f:5a:85:0d:f1:8d: 80:00:e8:c2:3a:41:3a:c1:ba:99:89:12:18:0c:5c: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DE:C3:57:E8:0F:94:7D:25:13:95:18:00:85:BB:41:27:82:02:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66505887-39f1-3f9c-a22c-d37819efaa9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7a:8d:12:6e:ba:b8:08:9a:c0:ae:e2:bf:a5:da:d0:b1:3a: 4f:ee:82:59:e1:60:24:f0:f3:82:04:26:b8:b3:bc:89:f7:5c: 2e:b8:f0:96:ae:54:d1:d0:9c:45:ab:ae:6f:f8:58:5f:bc:d9: 52:22:20:16:f3:11:fc:fd:5e:99:80:0d:5b:a0:71:84:9c:26: 8f:41:08:9a:97:3d:3e:49:7c:f4:f8:81:57:ed:9b:42:21:98: e9:26:87:aa:e3:2d:98:17:59:09:6c:0d:01:ae:b6:3a:ae:11: bb:ac:3c:25:0b:e8:2c:85:61:4b:c3:1b:b8:5f:88:2b:f7:a8: bd:ad:e9:62:e2:f4:cd:d2:51:77:9e:db:f3:1d:a6:3f:64:22: eb:66:6f:64:b0:0f:b6:90:6f:58:80:ef:fd:96:ee:d1:f5:56: f0:63:24:89:07:7b:58:e6:e8:e8:fa:46:2f:ef:61:3f:28:18: 0e:ce:72:36:64:1b:51:9f:22:a5:46:ea:47:46:62:ca:e9:f8: 90:ac:f8:55:2a:62:7e:c0:d7:e0:eb:cf:5d:9d:be:70:e3:d1: f7:62:7a:7a:a8:7e:93:80:72:74:ab:ac:b9:ac:57:48:41:40: 70:6f:7c:4d:52:dc:eb:72:1f:c4:7b:2f:b7:e6:c5:fa:28:72: d3:08:b3:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDmOfuyprh5HecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk OTVmNTgwYzctODhiZC00MDQ2LTgyZjEtYmI0NjdjOTk0NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uEuGr2SkxIwWdvIPgfiMwVIZUN4/mQDTiYy 5lORHz4vDtppRgZeDXJYoc+tq0I/Opa/4szp2jZm9bERwf0SKwut3t8OpzhxH0ce zlTX/JPHbU04/TbvbSCCJFkv3wdl3Fx3Fst2Ed0veCHjTijDwFDKV8+SltAFk2L2 9CAWGnCiJ1t2E0tDYAnXv10RX0cKNIgvT4DsqRCoo+9dBpxJ5Qw0T5zuQp+oAqMz GsO8IkeLbLSwG+3+yuUe9CG+HP9GKMNgknvdb+Q/TYiDztN/Z75WFFivqARFzxgv MpFiWDHQ3488o+U+UY5PWoUN8Y2AAOjCOkE6wbqZiRIYDFx3xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPew1foD5R9JROVGACFu0EnggLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjY1MDU4ODctMzlmMS0z ZjljLWEyMmMtZDM3ODE5ZWZhYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt6jRJuurgImsCu4r+l2tCxOk/uglnhYCTw84IEJrizvIn3XC648Jau VNHQnEWrrm/4WF+82VIiIBbzEfz9XpmADVugcYScJo9BCJqXPT5JfPT4gVftm0Ih mOkmh6rjLZgXWQlsDQGutjquEbusPCUL6CyFYUvDG7hfiCv3qL2t6WLi9M3SUXee 2/Mdpj9kIutmb2SwD7aQb1iA7/2W7tH1VvBjJIkHe1jm6Oj6Ri/vYT8oGA7OcjZk G1GfIqVG6kdGYsrp+JCs+FUqYn7A1+Drz12dvnDj0fdienqofpOAcnSrrLmsV0hB QHBvfE1S3OtyH8R7L7fmxfooctMIs9g= -----END CERTIFICATE-----Generated at Tue Apr 8 17:12:10 2025 by rpki-client