$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/743640df-438f-3dbf-8e0a-0cff783ea9ee.roa File: 743640df-438f-3dbf-8e0a-0cff783ea9ee.roa (raw, json) Hash identifier: fYivFwMQH7bitG36GukMq/zExyaYkhdCfm4fzKW+Spc= Subject key identifier: C2:50:5E:92:0F:86:54:B6:EB:B3:EC:A7:79:FA:31:E0:99:20:51:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC216EC135DB94F7B86E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/743640df-438f-3dbf-8e0a-0cff783ea9ee.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 20940 IP address blocks: 96.7.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:21:6e:c1:35:db:94:f7:b8:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=d9f6ca4c-621d-4d01-bbf1-3a21e087966e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:de:50:c7:0e:cd:a7:f3:49:7c:9b:c2:60: db:be:5a:96:e4:ee:1b:3d:a1:b4:dd:2d:a7:e1:29: ab:1b:82:9e:df:e9:93:e4:73:af:c3:80:31:78:9b: 19:2b:20:0b:4e:b1:bd:1e:e0:d2:aa:4e:eb:57:9b: 14:f8:d0:f2:c6:c0:f3:f5:ac:26:33:72:a5:c1:7c: b0:bd:03:e1:35:0d:0e:1e:bd:1a:c3:05:1b:43:33: eb:b8:c7:a4:ac:9c:29:25:37:37:84:fc:0f:19:b2: 9b:de:a0:39:3d:54:fc:52:9f:ee:90:99:d1:ba:23: da:4e:57:3d:9d:70:2b:33:93:8f:2e:02:6c:dc:74: 0a:6c:c6:0e:66:e9:66:59:84:3d:9d:23:8f:7d:24: cb:76:10:03:03:97:eb:17:f7:f1:02:19:f5:28:68: 8a:43:fc:cf:ed:8e:91:50:e8:4c:1c:9e:1c:94:ea: 01:70:7b:74:b9:c9:df:f9:54:72:45:91:da:e0:0c: a4:c6:cb:3a:e8:f8:b7:37:bd:d7:36:49:ab:41:ed: c0:84:83:bf:3f:a1:43:53:ab:86:47:59:6b:3f:db: 5e:5f:74:7b:cf:0f:59:df:58:48:d2:8b:cc:36:a3: 76:ed:9d:b3:e8:bb:b9:fe:76:e2:b2:c5:a0:9d:0b: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:50:5E:92:0F:86:54:B6:EB:B3:EC:A7:79:FA:31:E0:99:20:51:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/743640df-438f-3dbf-8e0a-0cff783ea9ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4b:dd:a7:f9:03:1f:0f:57:ee:be:d0:48:5b:40:4f:45:04: 1d:7c:57:4c:d1:a1:04:7b:e2:db:52:31:b7:5a:71:77:9c:c6: 61:10:ad:6d:ba:62:de:4e:8e:15:39:cd:47:d9:67:44:ad:35: c4:62:6b:0b:c0:5a:55:f6:a4:62:e3:0a:d4:74:fc:1e:6f:a1: d1:56:56:65:c0:49:97:1f:3c:76:11:4d:ed:6e:55:34:1b:b5: ae:c4:44:85:50:82:ed:48:61:33:a5:01:76:91:01:5c:60:09: 38:70:78:99:8a:37:1d:33:d9:bc:75:e8:28:37:7c:e4:d9:71: 13:f5:f3:d4:09:cd:76:2b:c9:09:1c:c8:b6:5b:65:50:48:49: 6d:18:1a:46:81:10:c0:81:0c:cc:56:2a:31:5d:59:57:24:4f: 34:f2:8f:ca:23:9e:b5:76:2b:4b:ab:69:ac:25:8c:f3:51:2c: 09:ad:46:6a:c8:03:0e:ea:b6:a2:02:3d:0e:bf:5c:5b:fc:6e: 36:81:6b:8d:80:84:79:8f:05:6a:c9:90:f0:93:6e:f7:57:52: fd:a4:57:78:7b:84:bf:b3:73:48:f1:f6:aa:e5:69:03:29:12: 59:80:11:80:a1:74:03:05:2d:48:31:24:42:53:45:a0:92:cc: 21:2c:f1:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CFuwTXblPe4boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZDlmNmNhNGMtNjIxZC00ZDAxLWJiZjEtM2EyMWUwODc5NjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7jeUMcOzafzSXybwmDbvlqW5O4bPaG03S2n 4SmrG4Ke3+mT5HOvw4AxeJsZKyALTrG9HuDSqk7rV5sU+NDyxsDz9awmM3KlwXyw vQPhNQ0OHr0awwUbQzPruMekrJwpJTc3hPwPGbKb3qA5PVT8Up/ukJnRuiPaTlc9 nXArM5OPLgJs3HQKbMYOZulmWYQ9nSOPfSTLdhADA5frF/fxAhn1KGiKQ/zP7Y6R UOhMHJ4clOoBcHt0ucnf+VRyRZHa4Aykxss66Pi3N73XNkmrQe3AhIO/P6FDU6uG R1lrP9teX3R7zw9Z31hI0ovMNqN27Z2z6Lu5/nbissWgnQsMmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJQXpIPhlS267Psp3n6MeCZIFHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQzNjQwZGYtNDM4Zi0z ZGJmLThlMGEtMGNmZjc4M2VhOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAf1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdL3af5Ax8PV+6+0EhbQE9FBB18V0zRoQR74ttSMbdacXecxmEQrW26 Yt5OjhU5zUfZZ0StNcRiawvAWlX2pGLjCtR0/B5vodFWVmXASZcfPHYRTe1uVTQb ta7ERIVQgu1IYTOlAXaRAVxgCThweJmKNx0z2bx16Cg3fOTZcRP189QJzXYryQkc yLZbZVBISW0YGkaBEMCBDMxWKjFdWVckTzTyj8ojnrV2K0uraawljPNRLAmtRmrI Aw7qtqICPQ6/XFv8bjaBa42AhHmPBWrJkPCTbvdXUv2kV3h7hL+zc0jx9qrlaQMp ElmAEYChdAMFLUgxJEJTRaCSzCEs8Qw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:09 2025 by rpki-client