$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfd26a7d-8f4f-3eb5-bd0c-3427235e2679.roa File: dfd26a7d-8f4f-3eb5-bd0c-3427235e2679.roa (raw, json) Hash identifier: 5qbDIb40OfToG586tkYaKcN6ub7vvxQLNBbGNjQnMvo= Subject key identifier: 32:91:1C:F8:B4:0C:75:44:A0:FC:55:3B:7B:2F:49:B4:9F:B8:02:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC1DD7E04A218433F3D280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfd26a7d-8f4f-3eb5-bd0c-3427235e2679.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 20940 IP address blocks: 96.7.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:1d:d7:e0:4a:21:84:33:f3:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=6c1e1517-b409-4217-b622-9243b3174244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:a7:7e:5e:ce:fc:41:41:5e:60:54:ad:0c: 97:5c:23:5e:0f:2f:34:8a:4a:58:ca:b1:70:11:77: 0f:dc:b7:3b:8e:88:c2:69:15:83:31:04:a0:9a:45: 61:6a:3e:fa:9a:fd:7f:7b:fe:8e:c5:f3:a7:b8:55: 2a:ae:66:e3:68:6e:a1:59:63:5a:53:74:f4:25:85: c6:7f:51:9d:52:17:ff:09:b5:6e:6d:b9:db:ac:96: 82:10:20:18:75:11:4b:01:e2:15:81:7c:44:70:0d: e5:54:dd:46:e1:a2:ca:0a:dd:87:84:5b:1a:3f:21: 76:72:46:10:28:10:30:f3:7d:6e:48:ab:5d:e4:bb: bb:8f:56:f0:1a:f0:26:db:0c:02:ce:94:28:c6:69: fa:7e:2b:50:57:6b:4d:29:79:0b:e0:ca:6d:be:48: ce:47:26:f6:18:b4:37:e9:c1:e4:58:e6:db:00:6f: 0f:c7:6f:59:70:c6:bd:65:f0:2d:19:3b:b8:71:f1: fb:96:4b:24:ea:69:5d:9c:f5:c7:01:18:50:36:5c: 04:4f:5b:94:ca:09:b7:cf:4c:82:f9:c1:79:90:63: da:1a:89:89:a0:51:78:35:0e:88:30:e0:0a:cf:81: 5d:80:86:60:62:e0:4d:16:65:95:40:04:2e:4c:5a: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:91:1C:F8:B4:0C:75:44:A0:FC:55:3B:7B:2F:49:B4:9F:B8:02:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfd26a7d-8f4f-3eb5-bd0c-3427235e2679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:92:33:19:95:cd:d3:dd:4c:ea:62:4a:98:67:2e:6e:46:e4: 9e:59:cb:2e:29:c4:1f:6c:1f:4b:87:ce:2f:f2:cb:d9:48:ee: af:45:27:22:58:d9:c3:cf:d4:f4:2c:b3:aa:79:48:b6:71:5f: f8:ef:52:3b:1c:61:7c:64:f5:49:9d:a4:ef:cd:0b:c2:89:28: 22:37:f8:ca:ed:37:43:69:1a:9b:c3:ac:f3:ba:da:14:9c:9a: c7:52:d3:d6:31:f5:8b:47:35:3b:b7:14:ac:0e:ee:8d:26:50: 60:70:42:d2:87:d3:ce:18:e1:5e:24:0c:85:0f:bb:d5:dc:6b: 96:a0:bb:59:5d:e7:4e:7f:88:3d:d9:b6:d5:2f:20:ce:d5:f8: 6c:17:9e:cf:9a:4a:53:8a:7b:45:53:16:88:92:f6:60:8c:24: f7:d1:7a:bf:f7:ff:6f:0e:5c:fd:fa:2a:fb:b8:9f:59:ff:2f: e5:ee:0c:07:c8:4e:d9:b3:5a:b7:bf:e1:a7:6c:07:12:bc:b1: 38:b5:be:f9:c1:87:e8:9a:64:b6:e1:44:f8:5f:8e:dc:1b:50: 35:70:8a:c3:c5:66:e0:6d:2a:8e:82:fb:eb:b4:c6:3d:22:6c: 2b:39:03:bc:4c:06:75:29:5c:89:21:81:5d:21:06:66:6a:b3: fb:57:ec:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7B3X4EohhDPz0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NmMxZTE1MTctYjQwOS00MjE3LWI2MjItOTI0M2IzMTc0MjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJunfl7O/EFBXmBUrQyXXCNeDy80ikpYyrFw EXcP3Lc7jojCaRWDMQSgmkVhaj76mv1/e/6OxfOnuFUqrmbjaG6hWWNaU3T0JYXG f1GdUhf/CbVubbnbrJaCECAYdRFLAeIVgXxEcA3lVN1G4aLKCt2HhFsaPyF2ckYQ KBAw831uSKtd5Lu7j1bwGvAm2wwCzpQoxmn6fitQV2tNKXkL4MptvkjORyb2GLQ3 6cHkWObbAG8Px29ZcMa9ZfAtGTu4cfH7lksk6mldnPXHARhQNlwET1uUygm3z0yC +cF5kGPaGomJoFF4NQ6IMOAKz4FdgIZgYuBNFmWVQAQuTFrGPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKRHPi0DHVEoPxVO3svSbSfuAIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZkMjZhN2QtOGY0Zi0z ZWI1LWJkMGMtMzQyNzIzNWUyNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6SMxmVzdPdTOpiSphnLm5G5J5Zyy4pxB9sH0uHzi/yy9lI7q9FJyJY 2cPP1PQss6p5SLZxX/jvUjscYXxk9UmdpO/NC8KJKCI3+MrtN0NpGpvDrPO62hSc msdS09Yx9YtHNTu3FKwO7o0mUGBwQtKH084Y4V4kDIUPu9Xca5agu1ld505/iD3Z ttUvIM7V+GwXns+aSlOKe0VTFoiS9mCMJPfRer/3/28OXP36Kvu4n1n/L+XuDAfI TtmzWre/4adsBxK8sTi1vvnBh+iaZLbhRPhfjtwbUDVwisPFZuBtKo6C++u0xj0i bCs5A7xMBnUpXIkhgV0hBmZqs/tX7OE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:54 2025 by rpki-client