$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa File: 0bca3e92-daaf-3256-84aa-2ade85e7a084.roa (raw, json) Hash identifier: BkunFnW0ydhKCPI4D/n4wClbt51q5xJADIyHh3CohBM= Subject key identifier: F4:C2:E9:A7:64:32:3E:F1:99:B8:46:2C:44:8B:44:24:D7:47:06:91 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F432858499EAB4F3D470A6FD2C7942A80 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa Signing time: Wed 23 Apr 2025 08:56:43 +0000 ROA not before: Wed 23 Apr 2025 08:56:43 +0000 ROA not after: Tue 22 Jul 2025 08:56:43 +0000 asID: 211440 IP address blocks: 96.43.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9e:ab:4f:3d:47:0a:6f:d2:c7:94:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 23 08:56:43 2025 GMT Not After : Jul 22 08:56:43 2025 GMT Subject: CN=7d56aba6-0304-403a-9a03-fceaafc9309f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:76:e5:6e:82:29:d6:a8:87:8c:cf:39:e7: 22:b5:37:43:24:20:d9:0e:69:e9:1a:48:a5:5b:af: a1:e7:2c:53:98:a5:15:b4:e7:bd:3d:b8:98:43:52: 5d:04:8c:85:5c:11:32:4e:ca:68:35:bd:17:a7:69: 57:c8:82:22:7d:4a:97:c4:b8:e8:9c:9b:7c:6c:ae: 8f:f2:dd:c1:28:4a:4b:63:01:f3:ca:e4:08:23:f7: 79:d6:22:6b:eb:93:ac:d0:e8:d8:e7:c9:24:d2:1f: 86:da:03:55:cf:6a:13:b6:68:b6:03:1e:00:09:be: 67:d2:08:ef:20:31:39:2a:7f:e3:6b:b8:e0:84:7a: 72:fa:c5:be:8e:b1:a8:02:78:31:d2:bb:25:ea:66: 2d:b8:f0:db:e7:68:b9:0f:ef:76:f1:7f:e7:bb:6b: 11:57:f5:c3:08:f0:0a:f0:5c:ca:74:3b:b3:95:43: fd:91:9a:c1:99:87:89:14:b0:26:e3:aa:64:6d:a0: ef:15:d7:3c:01:76:e3:e2:dd:73:c3:2a:f7:63:14: 7d:0e:93:a0:81:6b:35:cb:95:55:30:1f:5d:6b:ab: 7d:05:d8:ce:53:10:0b:62:62:63:aa:3d:ad:79:69: 14:a1:15:9c:90:c0:5b:a7:9b:04:da:ac:0d:13:57: 74:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C2:E9:A7:64:32:3E:F1:99:B8:46:2C:44:8B:44:24:D7:47:06:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d7:c5:d9:aa:4e:16:9c:c7:2d:f2:15:ca:a8:68:36:c8:11: 33:44:94:5b:df:b4:e8:55:af:34:e3:53:5f:39:23:a4:ef:88: 34:c0:ff:5c:08:a4:08:fb:36:17:74:b1:b3:bf:dd:e4:54:73: d6:eb:77:c8:6e:3d:c6:16:5b:96:c9:09:88:a2:fb:22:9e:e2: 2a:12:a0:e5:11:5d:78:d9:63:2e:f1:ed:52:a0:03:60:2a:70: fd:09:75:1b:21:dc:32:17:4d:91:37:3c:3d:7a:3a:1b:c0:35: 0e:69:da:05:42:c6:6f:d2:65:b5:be:f8:ea:30:f4:49:2c:17: e7:74:c2:8f:9c:5e:35:9d:65:93:16:64:e6:b3:ad:4a:37:1b: 06:4b:76:f2:d8:a5:fe:f7:39:28:7c:cd:3e:65:20:e8:eb:3a: 50:88:f2:db:26:ff:3b:d6:68:af:b3:b5:47:63:62:42:e0:a8: 4d:5c:24:fe:ac:30:c0:9b:a2:0b:7c:aa:c4:19:7a:de:2c:d9: 21:b1:b4:3a:bf:dd:5b:fa:e1:8b:19:f6:9e:d8:b4:bb:27:b3: ae:69:cd:eb:2f:7d:13:06:f8:ad:a1:96:bf:ce:c2:8a:c9:a4: 98:a1:2f:0b:f0:41:4b:36:e7:47:7a:b1:54:1a:71:9e:b3:49: c3:f4:5e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmeq089Rwpv0seUKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQyMzA4NTY0M1oXDTI1MDcyMjA4NTY0M1owLzEtMCsGA1UEAxMk N2Q1NmFiYTYtMDMwNC00MDNhLTlhMDMtZmNlYWFmYzkzMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDB25W6CKdaoh4zPOecitTdDJCDZDmnpGkil W6+h5yxTmKUVtOe9PbiYQ1JdBIyFXBEyTspoNb0Xp2lXyIIifUqXxLjonJt8bK6P 8t3BKEpLYwHzyuQII/d51iJr65Os0OjY58kk0h+G2gNVz2oTtmi2Ax4ACb5n0gjv IDE5Kn/ja7jghHpy+sW+jrGoAngx0rsl6mYtuPDb52i5D+928X/nu2sRV/XDCPAK 8FzKdDuzlUP9kZrBmYeJFLAm46pkbaDvFdc8AXbj4t1zwyr3YxR9DpOggWs1y5VV MB9da6t9BdjOUxALYmJjqj2teWkUoRWckMBbp5sE2qwNE1d0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTC6adkMj7xmbhGLESLRCTXRwaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMGJjYTNlOTItZGFhZi0z MjU2LTg0YWEtMmFkZTg1ZTdhMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrXxdmqThacxy3yFcqoaDbIETNElFvftOhVrzTjU185I6TviDTA/1wI pAj7Nhd0sbO/3eRUc9brd8huPcYWW5bJCYii+yKe4ioSoOURXXjZYy7x7VKgA2Aq cP0JdRsh3DIXTZE3PD16OhvANQ5p2gVCxm/SZbW++Oow9EksF+d0wo+cXjWdZZMW ZOazrUo3GwZLdvLYpf73OSh8zT5lIOjrOlCI8tsm/zvWaK+ztUdjYkLgqE1cJP6s MMCbogt8qsQZet4s2SGxtDq/3Vv64YsZ9p7YtLsns65pzesvfRMG+K2hlr/OworJ pJihLwvwQUs250d6sVQacZ6zScP0Xo0= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:10 2025 by rpki-client