$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa File: b7091e43-35d5-3171-a245-3dadb9d48c94.roa (raw, json) Hash identifier: 0ZIlTKz84VjzPp5KezJw4ghOJKvJ931qRMrIr9CZyGE= Subject key identifier: BC:55:45:12:AF:69:B2:30:7C:7D:3C:8C:A9:F0:D1:2B:AD:6A:99:25 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F43285848F65BD2ADC6B2CF709DD63680 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 20278 IP address blocks: 96.9.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d2:ad:c6:b2:cf:70:9d:d6:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=fc72ea78-a091-4c80-a59f-03d0935d4b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:bf:2a:6f:c5:b2:7e:1a:ef:fc:ee:18:eb: b7:ba:88:45:25:89:d6:fe:75:45:b6:90:25:e3:b1: 97:84:d7:5a:e1:a1:9c:be:e5:d1:68:b0:e4:46:40: e3:74:63:6f:f0:9c:f8:e1:97:15:04:50:18:53:af: 63:9d:91:c8:9c:24:27:72:18:8e:ac:d2:b6:cf:27: 43:b1:5c:de:53:13:b5:b1:32:4f:79:cf:e3:7c:92: c9:c0:f1:e3:6c:cd:65:12:d0:b1:88:22:52:74:62: be:35:1b:f9:a1:ca:de:37:9b:66:05:c5:69:86:08: 9b:ab:1d:4a:ca:10:95:19:94:0b:60:59:08:c4:b2: 1b:a2:5e:fc:b0:c5:42:a5:6d:ce:41:03:c4:ab:ba: e1:9d:48:ee:b5:48:49:a9:b9:79:3e:48:25:1d:29: 39:6e:7a:f7:b8:57:dc:fb:70:f9:d9:40:7e:88:a0: f5:43:79:d7:d4:ab:fa:3f:9e:60:6e:98:b2:89:29: a8:c1:51:b1:ee:8e:ef:30:e0:32:1e:fb:93:2f:8a: f8:e3:ae:49:84:bd:50:aa:a3:85:99:15:e3:fb:61: 6f:b0:78:dd:9d:83:a1:9f:93:ad:dd:e6:2d:db:6f: 30:02:1e:a0:d5:57:dd:de:9d:24:44:6c:2a:00:55: 63:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:55:45:12:AF:69:B2:30:7C:7D:3C:8C:A9:F0:D1:2B:AD:6A:99:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 96.9.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c9:61:7a:47:55:04:04:91:15:62:04:ae:d8:f7:f6:64:1f: 65:b9:88:79:30:7a:4d:30:c1:e4:fb:35:b5:35:14:86:a6:d6: 53:ca:80:d4:75:81:5d:97:b0:16:3c:00:4d:61:80:65:1d:3a: 8a:24:49:83:b9:bc:f8:06:49:02:14:fb:fa:cb:78:78:a2:f2: 1f:56:1b:03:62:7f:0a:1f:30:1f:da:a8:29:14:ab:33:33:c9: 70:48:97:48:57:7a:ef:72:4d:8d:a5:e0:0f:53:91:d7:7b:c0: a1:60:66:e3:9e:8a:3a:4c:e0:f8:bb:de:33:cf:31:ba:00:be: 8d:01:47:41:d0:51:4d:cf:6f:8d:07:c6:0c:25:52:e4:e8:64: f9:ec:7f:2b:2d:22:88:af:fd:6f:58:4e:16:b4:7f:fa:8e:89: 49:c7:0e:aa:c8:7c:ed:d0:0f:67:a3:84:f1:b0:f7:79:ff:21: 3a:4d:ab:0b:b8:02:62:f3:a1:2c:c1:ba:e7:f0:96:68:a1:72: ea:32:19:bf:ff:29:df:69:4b:7e:28:2d:e2:7d:73:ca:ae:d7: 6f:93:31:ce:46:ff:e5:db:06:6f:2f:ca:93:d8:98:80:fe:d5: 42:dc:e9:67:a4:ca:87:43:58:9a:cb:7f:fc:7f:c8:9d:ed:90: a3:f7:c2:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9KtxrLPcJ3WNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZmM3MmVhNzgtYTA5MS00YzgwLWE1OWYtMDNkMDkzNWQ0YjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lS/Km/Fsn4a7/zuGOu3uohFJYnW/nVFtpAl 47GXhNda4aGcvuXRaLDkRkDjdGNv8Jz44ZcVBFAYU69jnZHInCQnchiOrNK2zydD sVzeUxO1sTJPec/jfJLJwPHjbM1lEtCxiCJSdGK+NRv5ocreN5tmBcVphgibqx1K yhCVGZQLYFkIxLIbol78sMVCpW3OQQPEq7rhnUjutUhJqbl5PkglHSk5bnr3uFfc +3D52UB+iKD1Q3nX1Kv6P55gbpiyiSmowVGx7o7vMOAyHvuTL4r4465JhL1QqqOF mRXj+2FvsHjdnYOhn5Ot3eYt228wAh6g1Vfd3p0kRGwqAFVjkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxVRRKvabIwfH08jKnw0SutapklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjcwOTFlNDMtMzVkNS0z MTcxLWEyNDUtM2RhZGI5ZDQ4Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDJYXpHVQQEkRViBK7Y9/ZkH2W5iHkwek0wweT7NbU1FIam1lPKgNR1 gV2XsBY8AE1hgGUdOookSYO5vPgGSQIU+/rLeHii8h9WGwNifwofMB/aqCkUqzMz yXBIl0hXeu9yTY2l4A9Tkdd7wKFgZuOeijpM4Pi73jPPMboAvo0BR0HQUU3Pb40H xgwlUuToZPnsfystIoiv/W9YTha0f/qOiUnHDqrIfO3QD2ejhPGw93n/ITpNqwu4 AmLzoSzBuufwlmihcuoyGb//Kd9pS34oLeJ9c8qu12+TMc5G/+XbBm8vypPYmID+ 1ULc6WekyodDWJrLf/x/yJ3tkKP3wgM= -----END CERTIFICATE-----Generated at Wed Apr 30 02:51:03 2025 by rpki-client