$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb9c6f6-a8be-31a2-b79e-aec03914a532.roa File: bfb9c6f6-a8be-31a2-b79e-aec03914a532.roa (raw, json) Hash identifier: Apf7GwFOB0BskGNSXz+qYAN34+kGRpT/Ue2YW95bJlE= Subject key identifier: 90:6B:B5:6E:99:DB:23:F7:CD:27:7E:73:5B:AB:1E:90:16:D7:EE:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC34DC87A7B7075CD80B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb9c6f6-a8be-31a2-b79e-aec03914a532.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 20940 IP address blocks: 96.16.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:34:dc:87:a7:b7:07:5c:d8:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=1728aa23-44e9-4d46-bab8-06bba75443ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:2f:8d:fb:bc:91:87:69:c2:26:4e:8f:6b: 62:63:f8:53:ba:6d:8b:94:26:1a:a9:a1:c4:24:13: 3f:e1:6f:ec:af:f5:fa:67:55:b7:a7:b1:9c:f3:e1: 8d:73:34:07:c7:02:74:93:ba:a1:0d:34:5b:51:27: fc:c7:dc:8f:6f:f9:de:71:63:c8:04:81:73:b7:ea: 27:fb:6f:ac:3e:b3:b3:0a:ff:bd:93:15:6b:cd:03: 8e:6a:04:1e:0e:87:55:56:8d:0c:80:6e:59:1b:33: cb:a3:44:28:60:69:60:8b:92:47:b9:f0:bb:3e:c1: df:c3:88:18:14:0e:2d:54:22:df:5f:62:87:90:9f: 4d:c6:c0:19:67:83:24:07:67:3a:d3:f6:c2:44:01: 59:07:1b:e7:ee:89:3c:ce:ad:26:65:7b:c5:3d:63: 2b:14:e3:8a:49:0e:5e:ba:1c:62:01:10:4a:17:8b: 91:aa:5f:4d:6d:21:ae:ad:ac:ec:66:24:03:3f:6d: 27:25:23:56:14:b6:e0:ea:35:0e:af:74:fa:4b:71: 10:5d:d5:7c:32:49:7a:0f:6a:ae:71:94:53:01:c3: 21:f2:06:0b:8f:28:08:6d:a8:50:3d:28:35:fe:87: 4c:ab:f8:44:23:aa:b8:c5:42:5b:ac:17:9e:ce:aa: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6B:B5:6E:99:DB:23:F7:CD:27:7E:73:5B:AB:1E:90:16:D7:EE:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb9c6f6-a8be-31a2-b79e-aec03914a532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:75:f8:07:f5:69:24:fd:d8:b2:cb:a1:40:24:4d:ee:8e:06: c3:84:eb:23:8f:10:06:90:88:92:9a:d6:e9:62:8b:df:01:12: 36:99:bc:04:5c:ae:35:49:ab:e7:2f:d3:7d:f1:a9:fd:82:e0: 9d:c1:73:b2:34:77:91:4a:47:5b:c0:39:01:88:cf:4f:a9:ab: 82:68:12:83:e3:91:e2:9e:25:f6:3c:c5:e7:bf:24:1d:66:87: 2a:37:81:d1:62:f4:41:23:fd:27:70:ec:70:21:a5:cf:d4:ff: fd:73:24:63:98:94:2b:a5:9d:66:1b:b0:c2:f9:b8:14:16:d3: eb:fa:15:91:37:0d:cf:ab:7b:ad:f9:0a:6a:8f:c5:6f:08:06: 2e:9c:62:7d:fa:d1:5c:8f:ec:9d:90:6e:a0:1f:9d:87:3e:19: fd:ca:96:6e:71:64:9c:77:98:95:bf:5f:8c:4a:d9:3a:47:97: 7d:37:10:b6:44:1b:97:25:51:e8:b9:ee:c9:b8:1b:03:b7:b2: 3d:d9:94:01:03:22:a2:36:36:e2:24:1b:ee:89:22:aa:06:45: 53:7a:0f:bf:07:b0:94:42:1c:75:12:dd:64:b6:b2:11:21:42: be:97:20:ca:83:99:d1:c3:ea:5b:df:47:66:db:94:ad:f6:59: 5d:66:81:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DTch6e3B1zYC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MTcyOGFhMjMtNDRlOS00ZDQ2LWJhYjgtMDZiYmE3NTQ0M2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszYvjfu8kYdpwiZOj2tiY/hTum2LlCYaqaHE JBM/4W/sr/X6Z1W3p7Gc8+GNczQHxwJ0k7qhDTRbUSf8x9yPb/necWPIBIFzt+on +2+sPrOzCv+9kxVrzQOOagQeDodVVo0MgG5ZGzPLo0QoYGlgi5JHufC7PsHfw4gY FA4tVCLfX2KHkJ9NxsAZZ4MkB2c60/bCRAFZBxvn7ok8zq0mZXvFPWMrFOOKSQ5e uhxiARBKF4uRql9NbSGurazsZiQDP20nJSNWFLbg6jUOr3T6S3EQXdV8Mkl6D2qu cZRTAcMh8gYLjygIbahQPSg1/odMq/hEI6q4xUJbrBeezqoBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBrtW6Z2yP3zSd+c1urHpAW1+5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZiOWM2ZjYtYThiZS0z MWEyLWI3OWUtYWVjMDM5MTRhNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBA9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB1+Af1aST92LLLoUAkTe6OBsOE6yOPEAaQiJKa1ulii98BEjaZvARc rjVJq+cv033xqf2C4J3Bc7I0d5FKR1vAOQGIz0+pq4JoEoPjkeKeJfY8xee/JB1m hyo3gdFi9EEj/Sdw7HAhpc/U//1zJGOYlCulnWYbsML5uBQW0+v6FZE3Dc+re635 CmqPxW8IBi6cYn360VyP7J2QbqAfnYc+Gf3Klm5xZJx3mJW/X4xK2TpHl303ELZE G5clUei57sm4GwO3sj3ZlAEDIqI2NuIkG+6JIqoGRVN6D78HsJRCHHUS3WS2shEh Qr6XIMqDmdHD6lvfR2bblK32WV1mgZI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:07 2025 by rpki-client