$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fdea58-337f-35ca-8355-4d1cf9573d27.roa File: a0fdea58-337f-35ca-8355-4d1cf9573d27.roa (raw, json) Hash identifier: Q3eUDrIFV6HVq4DVP/QlZAhdNzBaG8z95ottJpPkc9M= Subject key identifier: B4:38:C0:61:57:62:A1:73:39:2B:10:D5:41:33:29:E6:BD:46:FD:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490015702BBA8E6436CAFB1F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fdea58-337f-35ca-8355-4d1cf9573d27.roa Signing time: Tue 25 Feb 2025 13:37:01 +0000 ROA not before: Tue 25 Feb 2025 13:37:01 +0000 ROA not after: Mon 26 May 2025 12:37:01 +0000 asID: 200005 IP address blocks: 96.7.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:15:70:2b:ba:8e:64:36:ca:fb:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 25 13:37:01 2025 GMT Not After : May 26 12:37:01 2025 GMT Subject: CN=38472b27-9eb7-4ace-84f5-3b6db4cb25e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:3d:76:4e:2a:4c:da:74:6f:f3:91:d5:ee: 35:7c:50:14:8e:f3:f9:89:48:28:b0:a8:6e:a2:4d: 07:8b:eb:ee:dc:d8:c0:fc:94:df:60:61:8d:b6:4d: 84:80:f8:ac:da:cd:6d:91:22:04:41:0d:94:b8:86: 33:61:2e:50:33:5a:52:b5:07:51:bd:60:d3:17:55: 91:8a:29:16:e3:28:90:59:88:8e:95:49:1e:72:ee: 64:b4:49:9c:48:78:58:9f:0a:47:ff:3e:b6:04:34: 66:01:a4:26:f6:8c:33:73:1a:23:4a:75:eb:e9:18: ae:01:6e:a5:99:db:ce:aa:75:d8:62:c9:39:45:8f: 99:f5:cb:99:a6:68:62:3d:81:91:b6:a5:cc:44:99: 8c:64:db:de:68:de:96:b2:70:be:ae:ff:59:d3:99: 1e:00:f1:c3:ee:3f:c4:eb:3c:fa:06:91:66:4f:2c: 1f:f8:e8:ac:37:a3:75:51:ef:5f:0c:10:a3:bd:f7: e0:42:c5:40:40:48:ac:99:71:45:2a:33:48:ba:b0: 24:08:2a:08:79:8f:a7:8e:36:32:7c:d1:41:ee:51: 50:96:ce:d4:f4:30:37:12:a9:d8:5a:57:9b:42:80: d4:e3:9f:79:98:f5:a2:00:ab:26:1f:4f:51:7f:da: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:C0:61:57:62:A1:73:39:2B:10:D5:41:33:29:E6:BD:46:FD:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0fdea58-337f-35ca-8355-4d1cf9573d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e0:da:71:d1:93:d1:27:88:67:99:55:91:8c:6d:a3:14:be: 62:80:e3:c1:e6:f8:10:62:5d:1d:f7:05:19:92:c1:bd:e5:4c: f2:e0:8b:79:93:47:3d:35:dd:68:ee:10:75:86:44:78:ef:67: c4:f3:6b:ec:35:f1:31:4a:4c:e7:5e:b2:d8:ae:33:cd:e7:36: 76:82:08:b0:fc:28:85:42:eb:46:04:a1:8b:18:4d:8c:6c:c5: 83:8a:bf:fc:e6:31:ac:30:b5:b6:fb:3a:97:ff:cb:71:b6:9e: d9:e0:70:c6:c9:4c:fe:fc:08:40:2a:c4:0a:ba:ec:70:81:f8: f1:00:78:d1:c9:d6:da:db:e4:1c:24:b9:09:de:df:18:0a:05: 7a:9d:30:2b:b8:e0:d7:fd:96:e5:cd:45:8a:81:fc:35:6a:90: 85:c8:2d:c2:82:5e:20:62:86:6d:e1:9b:af:e6:1f:2b:50:83: 66:5a:91:05:54:b8:62:ff:7e:40:ba:40:45:3f:53:6a:5d:13: 97:a0:10:35:aa:78:e4:1d:a2:cb:d2:bc:28:dd:26:ae:83:29: b7:29:02:fd:28:1c:51:56:60:83:fc:2a:f8:7d:3d:fc:86:fd: 99:9b:6b:f9:57:f9:2a:b0:5d:a9:29:d5:28:a2:4f:d4:3e:28: 0f:92:dc:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAFXAruo5kNsr7H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNTEzMzcwMVoXDTI1MDUyNjEyMzcwMVowLzEtMCsGA1UEAxMk Mzg0NzJiMjctOWViNy00YWNlLTg0ZjUtM2I2ZGI0Y2IyNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5M9dk4qTNp0b/OR1e41fFAUjvP5iUgosKhu ok0Hi+vu3NjA/JTfYGGNtk2EgPis2s1tkSIEQQ2UuIYzYS5QM1pStQdRvWDTF1WR iikW4yiQWYiOlUkecu5ktEmcSHhYnwpH/z62BDRmAaQm9owzcxojSnXr6RiuAW6l mdvOqnXYYsk5RY+Z9cuZpmhiPYGRtqXMRJmMZNveaN6WsnC+rv9Z05keAPHD7j/E 6zz6BpFmTywf+OisN6N1Ue9fDBCjvffgQsVAQEismXFFKjNIurAkCCoIeY+njjYy fNFB7lFQls7U9DA3EqnYWlebQoDU4595mPWiAKsmH09Rf9odsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ4wGFXYqFzOSsQ1UEzKea9Rv0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBmZGVhNTgtMzM3Zi0z NWNhLTgzNTUtNGQxY2Y5NTczZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAfJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFng2nHRk9EniGeZVZGMbaMUvmKA48Hm+BBiXR33BRmSwb3lTPLgi3mT Rz013WjuEHWGRHjvZ8Tza+w18TFKTOdestiuM83nNnaCCLD8KIVC60YEoYsYTYxs xYOKv/zmMawwtbb7Opf/y3G2ntngcMbJTP78CEAqxAq67HCB+PEAeNHJ1trb5Bwk uQne3xgKBXqdMCu44Nf9luXNRYqB/DVqkIXILcKCXiBihm3hm6/mHytQg2ZakQVU uGL/fkC6QEU/U2pdE5egEDWqeOQdosvSvCjdJq6DKbcpAv0oHFFWYIP8Kvh9PfyG /Zmba/lX+SqwXakp1SiiT9Q+KA+S3DU= -----END CERTIFICATE-----Generated at Fri Mar 14 15:00:52 2025 by rpki-client