$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c853ecb-67fd-3b83-91e5-2e250feb2565.roa File: 1c853ecb-67fd-3b83-91e5-2e250feb2565.roa (raw, json) Hash identifier: 45AeRmSUB4eRq3M4Th8wUCTV0PeGOk4OrnwDXLqJUeE= Subject key identifier: 74:58:5D:B5:3F:D7:2F:FC:13:73:F2:37:6A:C5:85:CE:5C:11:99:49 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584993F9D9F45988E994F943D340 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c853ecb-67fd-3b83-91e5-2e250feb2565.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 29802 IP address blocks: 96.43.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:d9:f4:59:88:e9:94:f9:43:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=b9978c13-99d6-41c7-b971-f069e0389f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:70:5e:dd:77:2f:ac:d3:b0:9d:ca:45:a1: 43:14:e9:8c:15:04:a2:62:b2:37:55:b6:67:25:c0: 8c:ec:7a:87:d2:2e:5b:01:7c:f5:d8:7c:b9:ba:a9: 78:26:52:28:b2:96:7d:de:0a:f5:85:4c:a1:b9:81: 1c:5b:1b:db:f4:0b:d3:f2:aa:1e:ce:e4:51:9b:9a: dc:6e:ee:c2:db:04:bc:ba:4a:58:60:70:d1:66:f3: 4e:aa:af:a7:81:b0:fb:7b:29:24:8a:42:a2:df:6a: d1:f2:5c:1a:40:c4:df:24:96:a8:0a:8a:e2:ff:4b: 10:82:49:5b:43:3f:cb:2f:22:f3:27:d1:26:71:f6: 7a:39:a0:d0:33:a7:0a:23:68:52:eb:c1:2d:6b:5d: 8a:d7:00:2a:10:c3:76:af:65:05:9c:4f:99:bd:1b: f1:f5:0e:0e:5f:ac:ef:86:74:63:ff:0a:3f:86:d3: 3b:50:d5:f2:2f:ef:2d:1f:4a:a9:33:d4:8d:7e:60: 49:99:fd:d2:63:29:a7:a5:e9:4e:96:35:a0:57:11: 8b:3d:72:03:f1:d8:b2:cb:f1:66:d1:0c:17:47:11: a4:33:d6:4a:2c:48:da:bf:c4:d9:4e:4c:c2:19:a7: a6:6a:fc:62:ef:6e:2c:8d:61:1e:3d:dd:4d:80:fb: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:58:5D:B5:3F:D7:2F:FC:13:73:F2:37:6A:C5:85:CE:5C:11:99:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1c853ecb-67fd-3b83-91e5-2e250feb2565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:74:70:42:2c:6c:f6:e7:1b:1e:f1:a4:57:4c:a6:dc:7e:5d: d1:63:63:d6:be:d7:18:94:af:97:59:40:8b:82:f9:f7:3c:7a: 42:3f:f7:c6:fa:6c:6c:5f:58:99:6b:d7:59:23:80:e1:1d:84: 62:a5:bf:ae:89:20:7a:15:5a:c4:aa:1f:bd:b5:3c:9a:19:98: f2:46:74:f8:cc:61:0d:5d:8f:0f:89:11:3e:a9:54:92:cf:b0: 5f:38:18:e2:84:da:bb:71:94:e3:1a:33:6f:ad:46:13:7c:f4: 6b:46:1a:24:5d:32:99:06:79:84:b1:1b:28:51:35:2b:38:ab: 63:12:ed:a2:ad:12:b6:5e:1e:13:da:51:93:76:16:b6:2f:eb: 07:e0:ca:57:b0:b9:f3:d1:c7:7c:0f:2f:a9:52:57:eb:64:83: bd:b4:77:5c:5d:ac:ad:85:93:1c:5a:92:ef:ea:33:c3:38:99: d1:b8:10:53:9d:25:91:88:91:b8:f3:5b:61:0a:d5:11:8c:da: 87:b8:97:34:d4:2d:be:95:d2:e0:97:26:bb:3e:1d:75:a3:42: db:38:a9:2c:84:e8:02:7f:be:5e:f2:47:b9:8d:db:54:90:32: 68:3d:c6:b5:d6:0f:1d:d8:41:8e:83:6f:40:ad:f3:8b:9c:d0: 3c:cb:3e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+dn0WYjplPlD00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk Yjk5NzhjMTMtOTlkNi00MWM3LWI5NzEtZjA2OWUwMzg5ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxdwXt13L6zTsJ3KRaFDFOmMFQSiYrI3VbZn JcCM7HqH0i5bAXz12Hy5uql4JlIospZ93gr1hUyhuYEcWxvb9AvT8qoezuRRm5rc bu7C2wS8ukpYYHDRZvNOqq+ngbD7eykkikKi32rR8lwaQMTfJJaoCori/0sQgklb Qz/LLyLzJ9EmcfZ6OaDQM6cKI2hS68Eta12K1wAqEMN2r2UFnE+ZvRvx9Q4OX6zv hnRj/wo/htM7UNXyL+8tH0qpM9SNfmBJmf3SYymnpelOljWgVxGLPXID8diyy/Fm 0QwXRxGkM9ZKLEjav8TZTkzCGaemavxi724sjWEePd1NgPs4uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRYXbU/1y/8E3PyN2rFhc5cEZlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMWM4NTNlY2ItNjdmZC0z YjgzLTkxZTUtMmUyNTBmZWIyNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER0cEIsbPbnGx7xpFdMptx+XdFjY9a+1xiUr5dZQIuC+fc8ekI/98b6 bGxfWJlr11kjgOEdhGKlv66JIHoVWsSqH721PJoZmPJGdPjMYQ1djw+JET6pVJLP sF84GOKE2rtxlOMaM2+tRhN89GtGGiRdMpkGeYSxGyhRNSs4q2MS7aKtErZeHhPa UZN2FrYv6wfgylewufPRx3wPL6lSV+tkg720d1xdrK2Fkxxaku/qM8M4mdG4EFOd JZGIkbjzW2EK1RGM2oe4lzTULb6V0uCXJrs+HXWjQts4qSyE6AJ/vl7yR7mN21SQ Mmg9xrXWDx3YQY6Db0Ct84uc0DzLPgA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:06:28 2025 by rpki-client