$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa File: dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa (raw, json) Hash identifier: DYtHAkMdvZ0omMHA6qp5NhkiJXFKW4NPkGj4k6F4nsM= Subject key identifier: 38:8A:CC:D3:E9:35:14:B0:07:BE:15:DE:16:B1:8E:CF:6D:67:99:F0 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849A784C0619F87BC609F65DE40 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 13335 IP address blocks: 96.43.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c0:61:9f:87:bc:60:9f:65:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c8d0f7e0-dfee-4a0a-a1c5-59f651a40f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:98:91:bf:8b:48:32:5f:95:eb:88:7c:7e:f7: c7:32:5b:10:0f:6d:14:02:18:65:58:17:f8:43:b4: a2:6d:f7:9e:82:90:5d:c7:2d:d3:3a:1a:8a:03:c7: 53:07:1a:f7:34:45:d3:ea:eb:0b:27:51:7a:b4:71: 57:86:d1:4b:bb:16:07:e0:d4:89:36:53:34:d8:40: 4b:37:61:eb:16:ae:a6:04:48:a2:94:60:63:ca:f8: 2d:50:e2:57:cf:75:27:38:40:25:f9:18:88:3a:65: 32:15:8c:1f:56:76:fa:55:bc:de:87:9e:d1:63:5f: 87:4f:22:1a:cb:04:c3:3d:5f:27:70:5d:d8:49:38: 49:65:a3:61:c5:fa:a4:f6:c2:a8:0b:b4:eb:f7:a3: fe:8e:fb:d0:2c:3d:1f:b9:59:5f:04:cc:a6:68:eb: 44:af:b9:8f:07:93:fe:f3:e9:1d:5c:e8:9b:fe:fa: 97:76:98:58:d3:1e:55:ee:f0:17:81:01:f0:76:75: 15:6d:87:c1:3a:e8:a5:53:38:0b:bc:16:75:4d:b9: af:ed:b9:8d:22:c5:bc:40:25:ca:0e:97:d8:29:88: 2d:a5:5f:f1:d1:c7:49:a5:24:4e:cc:15:8b:c6:00: f8:95:91:79:28:b0:b2:ac:c3:f0:fd:47:d4:8b:99: 04:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:CC:D3:E9:35:14:B0:07:BE:15:DE:16:B1:8E:CF:6D:67:99:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0b:09:98:e3:fa:9f:0a:e5:e8:22:c1:12:b2:fa:65:ec:d2: 29:bf:6d:61:8d:93:05:e2:58:2d:dc:a7:05:6a:c6:7a:8b:84: 39:cf:dd:e1:ee:96:90:8a:90:d2:ce:0b:55:e6:2c:d7:a5:a2: 52:5b:2f:37:12:47:a7:93:c0:e2:66:2b:a9:75:b1:45:70:71: a3:54:da:c4:e4:66:f5:e2:04:f3:81:4a:73:25:7e:00:3d:43: 9b:f9:d7:d9:dc:6b:bc:0c:95:20:11:c3:65:da:5a:3f:2a:c5: 9f:d8:e9:03:76:56:3e:5e:1b:89:b6:9b:fd:bb:3e:69:81:b3: 21:47:ec:77:00:a6:86:08:32:b4:25:a0:37:9c:d5:7a:9f:da: e9:ce:df:bd:bf:56:4c:0d:1e:d4:d6:f1:ab:40:10:dd:34:74: 2a:52:7d:d4:32:b8:87:88:34:96:5e:ab:10:0d:5e:d9:ff:31: 3f:47:27:0b:50:15:ce:ad:95:6f:75:a9:17:01:fd:b3:70:fd: 11:c2:c3:a1:e7:c6:81:68:b6:e5:05:67:e3:fd:98:f5:c0:36: 71:a1:02:0c:3f:6c:8c:19:56:c4:8c:7d:32:3d:80:17:c5:c5: 14:d5:c3:e3:4a:7d:22:01:4b:f9:cb:d7:f7:11:c9:cd:44:fd: 3e:f6:fb:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMBhn4e8YJ9l3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzhkMGY3ZTAtZGZlZS00YTBhLWExYzUtNTlmNjUxYTQwZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZiRv4tIMl+V64h8fvfHMlsQD20UAhhlWBf4 Q7SibfeegpBdxy3TOhqKA8dTBxr3NEXT6usLJ1F6tHFXhtFLuxYH4NSJNlM02EBL N2HrFq6mBEiilGBjyvgtUOJXz3UnOEAl+RiIOmUyFYwfVnb6Vbzeh57RY1+HTyIa ywTDPV8ncF3YSThJZaNhxfqk9sKoC7Tr96P+jvvQLD0fuVlfBMymaOtEr7mPB5P+ 8+kdXOib/vqXdphY0x5V7vAXgQHwdnUVbYfBOuilUzgLvBZ1Tbmv7bmNIsW8QCXK DpfYKYgtpV/x0cdJpSROzBWLxgD4lZF5KLCyrMPw/UfUi5kErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiKzNPpNRSwB74V3haxjs9tZ5nwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGMwNjUzZmItNmVlZS0z MjU2LWJjZjAtNTljNjNkZTcyZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkLCZjj+p8K5egiwRKy+mXs0im/bWGNkwXiWC3cpwVqxnqLhDnP3eHu lpCKkNLOC1XmLNelolJbLzcSR6eTwOJmK6l1sUVwcaNU2sTkZvXiBPOBSnMlfgA9 Q5v519nca7wMlSARw2XaWj8qxZ/Y6QN2Vj5eG4m2m/27PmmBsyFH7HcApoYIMrQl oDec1Xqf2unO372/VkwNHtTW8atAEN00dCpSfdQyuIeINJZeqxANXtn/MT9HJwtQ Fc6tlW91qRcB/bNw/RHCw6HnxoFotuUFZ+P9mPXANnGhAgw/bIwZVsSMfTI9gBfF xRTVw+NKfSIBS/nL1/cRyc1E/T72+4I= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:54 2025 by rpki-client