$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa File: 60d67551-cf73-33da-9edf-a4d13c922e9c.roa (raw, json) Hash identifier: ST2ifE2DDwdObmScz6M5JQxMkgT21bruaZRcS+/zX9g= Subject key identifier: 25:0D:87:E5:9B:7A:82:48:B2:BA:BF:2A:BE:4A:FA:5A:89:95:B6:FF Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285849AE7F4308892D88A939A65600 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa Signing time: Tue 29 Apr 2025 01:00:47 +0000 ROA not before: Tue 29 Apr 2025 01:00:47 +0000 ROA not after: Mon 28 Jul 2025 01:00:47 +0000 asID: 397630 IP address blocks: 172.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:7f:43:08:89:2d:88:a9:39:a6:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 29 01:00:47 2025 GMT Not After : Jul 28 01:00:47 2025 GMT Subject: CN=2db568ba-0476-4f42-87c8-887d1a33e636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:ec:e7:78:4e:fd:6e:6e:1f:37:e8:dc:cc: ab:2c:cd:03:cd:24:69:5d:95:2c:94:ed:76:02:ba: 7b:de:e0:70:cf:d9:7e:0f:51:53:5e:14:85:bf:56: 04:83:b4:e7:48:c3:8f:d0:2f:4a:c1:03:80:38:39: ed:53:a5:ad:dc:89:4d:6c:fc:e9:75:16:89:b5:31: 7f:85:7e:45:f4:51:51:e9:4d:1d:05:cb:95:e8:09: 88:82:74:ca:64:b0:97:42:62:b9:27:a3:54:94:ce: fa:1c:e9:32:dc:ba:8a:79:13:5d:a6:98:72:d6:f6: a6:75:33:81:ad:a1:de:77:93:7d:56:46:d0:4d:79: 37:7d:40:3c:34:b6:96:9f:80:73:b9:f8:8a:d6:20: 98:9c:d0:31:3c:90:78:bf:05:72:c0:e0:86:75:74: 9f:bd:91:3b:fe:a7:98:5e:33:5e:05:9d:40:39:98: be:3e:7b:c4:af:30:92:b6:bb:4d:39:57:7d:05:6b: ae:90:b9:8d:bb:5e:fc:01:21:59:50:de:b7:f0:b1: 37:0f:b7:f6:0e:5d:2f:43:aa:b1:c9:94:69:22:69: a1:66:51:f4:24:cb:86:2a:ca:7a:e0:c8:1b:6e:92: 63:70:e0:07:48:93:1c:74:7e:45:92:1a:cd:9e:bb: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0D:87:E5:9B:7A:82:48:B2:BA:BF:2A:BE:4A:FA:5A:89:95:B6:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:50:ba:7e:10:56:78:49:30:26:4c:73:8b:02:1e:3c:63:92: 16:71:51:c5:1f:63:62:ba:f9:fe:bf:cf:15:07:1c:c0:d6:d0: cf:fd:da:93:be:bb:3e:ee:e7:6c:b1:33:59:6d:6f:62:ab:a5: 1f:3f:12:2c:24:5f:aa:dd:bb:20:59:c4:8d:80:d3:05:2b:20: cf:e7:9e:ed:e4:81:21:f3:16:52:8b:eb:e7:a6:1a:2e:d5:5b: 76:1e:76:92:d0:df:5f:0f:79:85:27:ea:3f:1f:3e:ca:26:bf: bc:ee:96:eb:84:98:77:65:c8:7f:ce:a4:db:42:c3:b4:7f:69: a4:99:99:bb:28:cc:62:cb:13:db:e1:b0:d0:94:68:96:97:d7: 4b:5e:fd:61:58:5d:e7:8a:0c:57:b7:1b:97:cc:31:94:3c:91: fe:ca:f6:d2:18:2b:70:a4:1f:a0:ab:06:80:44:45:d2:57:ec: 9c:5e:75:11:7e:6b:73:b9:f7:7d:9a:ab:7d:7a:3d:73:d4:11: e5:94:e1:34:47:8d:e9:3d:8f:e2:a3:89:4f:45:26:17:89:c7: b0:4a:a5:54:91:a1:cc:21:79:e8:64:86:89:d1:f9:55:40:8a: c0:3d:96:5a:8a:ae:13:e8:68:8e:37:4f:91:e4:c7:74:22:a0: ea:65:6e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmuf0MIiS2IqTmmVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk MmRiNTY4YmEtMDQ3Ni00ZjQyLTg3YzgtODg3ZDFhMzNlNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0rs53hO/W5uHzfo3MyrLM0DzSRpXZUslO12 Arp73uBwz9l+D1FTXhSFv1YEg7TnSMOP0C9KwQOAODntU6Wt3IlNbPzpdRaJtTF/ hX5F9FFR6U0dBcuV6AmIgnTKZLCXQmK5J6NUlM76HOky3LqKeRNdpphy1vamdTOB raHed5N9VkbQTXk3fUA8NLaWn4BzufiK1iCYnNAxPJB4vwVywOCGdXSfvZE7/qeY XjNeBZ1AOZi+PnvErzCStrtNOVd9BWuukLmNu178ASFZUN638LE3D7f2Dl0vQ6qx yZRpImmhZlH0JMuGKsp64MgbbpJjcOAHSJMcdH5FkhrNnrsnPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUNh+WbeoJIsrq/Kr5K+lqJlbb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjBkNjc1NTEtY2Y3My0z M2RhLTllZGYtYTRkMTNjOTIyZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVQun4QVnhJMCZMc4sCHjxjkhZxUcUfY2K6+f6/zxUHHMDW0M/92pO+ uz7u52yxM1ltb2KrpR8/EiwkX6rduyBZxI2A0wUrIM/nnu3kgSHzFlKL6+emGi7V W3YedpLQ318PeYUn6j8fPsomv7zuluuEmHdlyH/OpNtCw7R/aaSZmbsozGLLE9vh sNCUaJaX10te/WFYXeeKDFe3G5fMMZQ8kf7K9tIYK3CkH6CrBoBERdJX7JxedRF+ a3O5932aq316PXPUEeWU4TRHjek9j+KjiU9FJheJx7BKpVSRocwheehkhonR+VVA isA9llqKrhPoaI43T5Hkx3QioOplbsM= -----END CERTIFICATE-----Generated at Fri May 2 23:28:49 2025 by rpki-client