$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa File: ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa (raw, json) Hash identifier: KbouxWYjqcfu0stE6Hv+/uetv2+Ta96MjKQsrriyHsw= Subject key identifier: A7:6A:4E:D4:D5:FB:AF:64:1B:BE:21:AE:97:95:F1:BC:D5:27:12:D5 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849203C11A8129755E35B17DD00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 834 IP address blocks: 96.43.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:11:a8:12:97:55:e3:5b:17:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=f62c9dcb-cc47-4bc3-abb0-97e90815d090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:8a:6f:17:a1:30:72:a1:1d:ef:4d:35:c3: 55:6a:ad:4f:1c:1b:24:ee:06:18:75:d9:8d:e6:80: c7:e3:85:1e:89:f5:ab:c0:98:8f:6e:bf:8f:dd:85: d9:7d:32:e2:60:8d:b7:91:9b:2f:f6:a2:f1:3c:f2: 7e:fe:7c:6b:c4:cd:4c:9d:3c:cf:dd:79:77:5d:8c: 85:7e:0d:2e:25:45:5c:2f:1b:69:81:19:52:28:db: 4d:21:74:8c:e5:38:ea:31:06:4b:a3:28:42:2a:0d: 24:ae:09:62:53:fd:b9:1a:c2:d4:5b:bb:ce:ef:21: b9:a4:d4:64:9e:80:3c:da:5a:c7:fd:c6:cb:31:31: 9e:58:6e:ed:cf:35:39:86:0e:98:be:bc:14:32:93: b8:06:9e:4f:ff:69:61:a1:56:6d:63:34:69:cd:1f: f7:ca:6c:60:eb:4e:9c:e4:99:92:5f:a7:59:9a:bc: fe:0b:33:18:3a:7f:83:39:2d:8c:d5:73:29:0a:54: 70:22:01:e1:36:04:09:4b:53:00:6a:ae:08:29:ab: 9a:16:83:4e:b8:2f:8d:22:75:d8:9e:75:16:2b:8c: 46:b9:16:42:0c:fc:92:95:ff:b4:af:c3:74:aa:d2: 2d:d5:96:d0:5b:ff:0d:be:b6:6c:14:9d:9d:a9:0e: 44:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:4E:D4:D5:FB:AF:64:1B:BE:21:AE:97:95:F1:BC:D5:27:12:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:20:59:85:76:d7:dd:c0:f1:0e:b7:f2:d9:84:c7:08:93:dd: 38:f7:0c:5c:99:da:75:4d:ec:37:35:4c:81:73:3d:36:48:6b: 87:9a:fd:85:64:20:af:c3:3d:c3:f9:d2:a0:2e:53:67:25:b7: b3:00:5b:a6:00:c5:a0:c3:b9:5a:be:f4:55:7a:6c:17:1c:72: e6:7e:dc:ff:f4:35:5b:16:9f:e6:49:b1:74:10:db:ce:a4:bf: 69:da:7c:c1:4c:e8:5e:22:61:55:45:a7:c2:d0:20:ad:dd:74: 7c:16:4c:6b:eb:3b:87:c1:64:be:d5:f5:04:6b:bf:ff:df:ee: 89:c3:78:9d:b5:73:11:1c:a7:ac:27:fa:f7:b4:8a:2f:35:e7: de:53:6c:71:61:92:f8:98:47:38:31:24:93:f2:32:05:3a:a5: 07:00:1a:bc:04:69:13:8a:65:11:ec:2e:c6:ae:e0:5b:db:4e: b4:84:c7:bf:8b:f5:2c:4b:ba:00:43:7d:59:8d:cd:5c:39:fc: a9:13:f5:38:d9:3f:58:90:08:d7:65:8c:fd:9a:e7:9b:3d:05: dc:f1:b3:70:95:20:1c:de:15:72:58:96:90:54:81:33:20:1a: 12:e5:0d:f4:af:79:80:20:06:17:9a:3f:1c:ea:28:78:cb:c3: 41:d4:49:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBGoEpdV41sX3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjYyYzlkY2ItY2M0Ny00YmMzLWFiYjAtOTdlOTA4MTVkMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja+KbxehMHKhHe9NNcNVaq1PHBsk7gYYddmN 5oDH44UeifWrwJiPbr+P3YXZfTLiYI23kZsv9qLxPPJ+/nxrxM1MnTzP3Xl3XYyF fg0uJUVcLxtpgRlSKNtNIXSM5TjqMQZLoyhCKg0krgliU/25GsLUW7vO7yG5pNRk noA82lrH/cbLMTGeWG7tzzU5hg6YvrwUMpO4Bp5P/2lhoVZtYzRpzR/3ymxg606c 5JmSX6dZmrz+CzMYOn+DOS2M1XMpClRwIgHhNgQJS1MAaq4IKauaFoNOuC+NInXY nnUWK4xGuRZCDPySlf+0r8N0qtIt1ZbQW/8NvrZsFJ2dqQ5EkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdqTtTV+69kG74hrpeV8bzVJxLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZWQ5MWM2YTItMDkyZi0z YjdlLTg3Y2YtZTg3YmJiZWQ0MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4gWYV2193A8Q638tmExwiT3Tj3DFyZ2nVN7Dc1TIFzPTZIa4ea/YVk IK/DPcP50qAuU2clt7MAW6YAxaDDuVq+9FV6bBcccuZ+3P/0NVsWn+ZJsXQQ286k v2nafMFM6F4iYVVFp8LQIK3ddHwWTGvrO4fBZL7V9QRrv//f7onDeJ21cxEcp6wn +ve0ii81595TbHFhkviYRzgxJJPyMgU6pQcAGrwEaROKZRHsLsau4FvbTrSEx7+L 9SxLugBDfVmNzVw5/KkT9TjZP1iQCNdljP2a55s9Bdzxs3CVIBzeFXJYlpBUgTMg GhLlDfSveYAgBheaPxzqKHjLw0HUSbM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:15 2025 by rpki-client