$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa File: cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa (raw, json) Hash identifier: 0bBSwH4U/JLlNpUrbyplg0h1ya/vcNB88uavVc7tPP0= Subject key identifier: 7F:2C:A2:75:9C:D5:30:0D:85:35:2A:FC:8E:B2:4F:27:C4:91:CC:19 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584968B41F1D5814EBF65EE0B540 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 211373 IP address blocks: 96.43.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:1f:1d:58:14:eb:f6:5e:e0:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=abd96e99-8ed5-4e2e-bc1f-923bf561e480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:38:09:04:d6:81:e9:40:55:da:7f:14:97: 9b:7a:5b:84:f5:ba:6a:1d:d0:56:61:6f:50:3a:d8: 7e:f2:79:b9:fc:65:5e:c4:59:29:14:e3:69:57:a2: a3:fc:9e:48:70:30:5f:06:72:c1:71:bb:7f:39:73: 39:41:4c:a1:b1:10:74:ca:94:f8:c8:be:e6:25:dd: 90:b8:f1:87:7d:43:c6:53:58:45:29:c0:7e:c0:29: b1:d2:50:00:3d:cc:6d:d2:f7:57:28:7a:21:54:97: 44:dd:a3:57:5e:fb:2f:81:cd:d0:fe:20:4c:76:c5: 27:f7:d3:4c:0c:4d:f9:26:f7:cf:5f:f9:40:eb:3e: d7:27:86:c5:37:23:b8:18:51:38:19:6b:dc:cf:4f: 22:3c:28:b8:b2:42:d0:e9:d6:25:44:47:ad:e3:1c: f3:b1:7b:80:d2:3b:b5:33:f9:08:e5:74:86:f0:41: 3f:37:1c:94:7a:58:a1:37:91:58:d3:f9:e0:45:c1: 4b:37:8e:81:76:2a:a5:15:58:dd:ea:c4:bb:58:dc: ce:68:43:2f:d3:a8:47:c1:79:28:e8:b1:1d:7a:21: 7f:bb:42:03:3c:22:3f:e3:6b:57:45:79:6f:8e:19: 2a:59:e2:ec:62:fb:38:0b:47:63:51:d9:6a:f4:f1: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2C:A2:75:9C:D5:30:0D:85:35:2A:FC:8E:B2:4F:27:C4:91:CC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cad770ff-8ba0-3986-8c3b-1e1353e0da01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9d:50:7e:4a:51:d2:e9:b8:b3:e8:63:31:36:cb:3b:44:78: 5a:72:7a:7a:13:68:2d:d4:58:44:97:41:e6:8c:88:ac:bf:1c: 9a:c2:6a:61:86:79:2f:a4:ec:7c:23:2d:25:6e:2b:96:d4:87: 24:9e:ae:75:9d:88:6c:6b:1b:0d:fb:d6:0d:01:62:3f:17:5a: 01:0c:7a:2e:1a:fb:fa:8c:73:09:98:0a:ea:15:8a:65:56:f2: 8f:77:56:20:63:53:29:f9:7e:70:85:55:14:87:49:c2:66:37: 5c:7c:5c:6f:de:26:c3:be:87:f7:f4:5a:4a:bc:2f:7c:4c:f3: 3f:54:33:2e:ea:65:f4:82:7f:72:e0:58:9d:66:66:1d:4c:85: 78:ae:88:1e:e1:62:26:eb:30:62:e9:e0:f5:a0:70:95:46:a4: 17:bc:24:5d:5b:5d:cd:9f:e9:f3:ec:7e:59:05:08:63:62:90: 63:6d:6a:4f:8e:a1:7f:aa:88:a1:30:c6:06:e0:d7:ae:58:18: 69:4a:82:61:03:90:d4:43:6f:bb:e2:24:e6:7b:c7:ce:bf:20: 63:bc:91:0d:3d:a8:cb:0f:fa:b2:78:c9:82:55:13:b5:52:42: 03:b4:67:06:02:26:cb:3e:bc:1d:ac:5b:45:a5:55:d2:d3:ba: d5:14:f8:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotB8dWBTr9l7gtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk YWJkOTZlOTktOGVkNS00ZTJlLWJjMWYtOTIzYmY1NjFlNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicQ4CQTWgelAVdp/FJebeluE9bpqHdBWYW9Q Oth+8nm5/GVexFkpFONpV6Kj/J5IcDBfBnLBcbt/OXM5QUyhsRB0ypT4yL7mJd2Q uPGHfUPGU1hFKcB+wCmx0lAAPcxt0vdXKHohVJdE3aNXXvsvgc3Q/iBMdsUn99NM DE35JvfPX/lA6z7XJ4bFNyO4GFE4GWvcz08iPCi4skLQ6dYlREet4xzzsXuA0ju1 M/kI5XSG8EE/NxyUelihN5FY0/ngRcFLN46BdiqlFVjd6sS7WNzOaEMv06hHwXko 6LEdeiF/u0IDPCI/42tXRXlvjhkqWeLsYvs4C0djUdlq9PEmrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8sonWc1TANhTUq/I6yTyfEkcwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvY2FkNzcwZmYtOGJhMC0z OTg2LThjM2ItMWUxMzUzZTBkYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAedUH5KUdLpuLPoYzE2yztEeFpyenoTaC3UWESXQeaMiKy/HJrCamGG eS+k7HwjLSVuK5bUhySernWdiGxrGw371g0BYj8XWgEMei4a+/qMcwmYCuoVimVW 8o93ViBjUyn5fnCFVRSHScJmN1x8XG/eJsO+h/f0Wkq8L3xM8z9UMy7qZfSCf3Lg WJ1mZh1MhXiuiB7hYibrMGLp4PWgcJVGpBe8JF1bXc2f6fPsflkFCGNikGNtak+O oX+qiKEwxgbg165YGGlKgmEDkNRDb7viJOZ7x86/IGO8kQ09qMsP+rJ4yYJVE7VS QgO0ZwYCJss+vB2sW0WlVdLTutUU+Ig= -----END CERTIFICATE-----Generated at Mon Apr 28 01:00:00 2025 by rpki-client