$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8fe66b-e2c8-3c81-9192-c3e528d2c053.roa File: df8fe66b-e2c8-3c81-9192-c3e528d2c053.roa (raw, json) Hash identifier: 18pKhUCYt4ebA/4LSTSzgv6ktvUFr5sGPReVdduFAbE= Subject key identifier: 82:DD:DF:59:09:95:3C:A6:F2:DF:AE:4D:E2:26:B6:8D:0D:0F:4A:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA625D9815758F5B980D740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8fe66b-e2c8-3c81-9192-c3e528d2c053.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33490 IP address blocks: 96.124.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:25:d9:81:57:58:f5:b9:80:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=1fae57b2-b15d-47d4-870d-fe87f926d9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:47:0f:3c:2f:a9:6c:45:6e:36:44:28:04: 67:a0:79:30:4f:a0:04:e7:ee:14:95:87:67:69:b5: d3:a5:52:f5:89:45:a0:f0:95:2a:2e:ba:a1:bc:6f: 9d:c6:3b:7f:b0:66:c4:6e:08:af:a7:db:a2:c0:22: 90:29:ec:41:7c:a0:6b:28:8c:cd:23:81:17:b8:cc: 87:04:9a:f8:d0:5c:a1:c3:65:ba:62:e0:3e:83:9f: 1e:29:ff:aa:53:55:e3:00:92:b4:46:45:11:c2:70: 25:30:e6:b7:96:79:8f:38:2d:0f:28:f4:29:df:53: 9f:c0:ca:63:f7:2b:a7:66:c9:fd:11:1f:fc:76:9f: ec:55:ac:c9:36:9d:1d:ac:8d:1a:8a:5a:93:45:50: aa:a6:29:ff:c3:8e:54:64:cd:3a:af:de:da:ef:ef: 91:29:f2:e7:4a:10:fb:c0:d3:be:f0:14:dc:ca:4b: 6b:80:a9:26:0f:bc:4c:3e:f9:af:db:9d:9a:61:01: 09:f1:b0:41:3f:c9:01:e5:db:9e:43:76:09:a7:72: f4:29:09:a4:35:80:be:af:bc:fb:90:de:56:d9:21: 06:33:30:79:9f:ec:fe:fc:b3:b5:f4:50:32:9e:fc: 3b:f7:87:6a:4b:8d:42:36:fc:81:68:fb:e3:32:00: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DD:DF:59:09:95:3C:A6:F2:DF:AE:4D:E2:26:B6:8D:0D:0F:4A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8fe66b-e2c8-3c81-9192-c3e528d2c053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.124.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:87:73:4e:22:3e:54:88:b7:d9:06:27:4f:68:1a:eb:69:89: e8:4b:5d:41:f1:e9:08:3c:4f:ad:c9:49:3a:6c:51:49:c1:9b: 9a:8a:12:1d:3e:6d:89:35:b3:55:9f:ea:8b:21:0e:47:70:0d: 60:2e:42:5d:87:5b:98:85:0b:5b:70:29:16:57:42:7e:fc:58: ae:d2:59:29:18:e7:17:cc:26:b9:cf:8f:ce:b8:b7:87:0c:82: 31:b0:12:78:60:38:81:2a:ed:be:d9:78:d6:4b:c4:8a:af:30: 27:93:de:08:b4:06:ec:b3:c8:56:38:86:4b:08:77:55:c8:38: 34:75:43:a8:01:61:a9:7c:58:fb:03:f3:31:4b:7d:a7:c4:11: be:bf:0e:93:91:7f:8f:a6:3c:ff:c0:4c:65:78:8b:c0:b4:35: c2:c8:31:08:ad:11:c6:17:c4:25:dc:63:30:46:97:c0:a3:84: 16:8e:0f:ce:71:11:3d:ff:7c:2c:ac:11:4a:f6:a4:a3:f2:a9: 18:c3:d9:73:6e:a4:06:68:31:b2:f9:ba:36:c8:07:51:14:e8: 8f:47:a8:22:74:1a:3a:1f:8b:c7:c7:ba:ac:9f:33:89:75:e6: 7a:02:7a:4d:86:cd:cf:1d:7b:fd:72:30:c3:1a:66:24:24:cc: bb:ea:12:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9piXZgVdY9bmA10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWZhZTU3YjItYjE1ZC00N2Q0LTg3MGQtZmU4N2Y5MjZkOWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0hHDzwvqWxFbjZEKARnoHkwT6AE5+4UlYdn abXTpVL1iUWg8JUqLrqhvG+dxjt/sGbEbgivp9uiwCKQKexBfKBrKIzNI4EXuMyH BJr40Fyhw2W6YuA+g58eKf+qU1XjAJK0RkURwnAlMOa3lnmPOC0PKPQp31OfwMpj 9yunZsn9ER/8dp/sVazJNp0drI0ailqTRVCqpin/w45UZM06r97a7++RKfLnShD7 wNO+8BTcyktrgKkmD7xMPvmv252aYQEJ8bBBP8kB5dueQ3YJp3L0KQmkNYC+r7z7 kN5W2SEGMzB5n+z+/LO19FAynvw794dqS41CNvyBaPvjMgDWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILd31kJlTym8t+uTeImto0ND0pFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4ZmU2NmItZTJjOC0z YzgxLTkxOTItYzNlNTI4ZDJjMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuHc04iPlSIt9kGJ09oGutpiehLXUHx6Qg8T63JSTpsUUnBm5qKEh0+ bYk1s1Wf6oshDkdwDWAuQl2HW5iFC1twKRZXQn78WK7SWSkY5xfMJrnPj864t4cM gjGwEnhgOIEq7b7ZeNZLxIqvMCeT3gi0BuyzyFY4hksId1XIODR1Q6gBYal8WPsD 8zFLfafEEb6/DpORf4+mPP/ATGV4i8C0NcLIMQitEcYXxCXcYzBGl8CjhBaOD85x ET3/fCysEUr2pKPyqRjD2XNupAZoMbL5ujbIB1EU6I9HqCJ0Gjofi8fHuqyfM4l1 5noCek2Gzc8de/1yMMMaZiQkzLvqEiY= -----END CERTIFICATE-----Generated at Sun Apr 27 23:02:43 2025 by rpki-client