$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa File: 6a126d6e-350c-3218-8782-b483551489da.roa (raw, json) Hash identifier: BOiJlpIUc/Zud0bNTp9V5JcWUO+o4D7Uxe22lQJsW3s= Subject key identifier: 44:B2:BE:E8:D2:52:C3:CF:09:ED:31:F4:91:C8:6E:F2:FA:DF:C4:C5 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F43285849A3547D1CA59C2658008EDA00 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 20454 IP address blocks: 96.47.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:7d:1c:a5:9c:26:58:00:8e:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=c4ef246e-5016-455c-a599-f0bd6e74ea5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:61:47:24:bc:52:33:03:d6:a7:88:2b:c7: 64:1b:ad:80:71:57:44:8f:34:28:fe:41:e4:e1:0d: 7b:95:ce:73:01:c2:a3:d7:5f:23:5c:b5:72:bf:d1: 36:a0:2f:cc:cc:f6:8e:d8:28:48:d8:4f:8e:e0:43: 8e:4b:09:96:6d:66:5a:ba:a1:83:51:34:5c:76:65: 0b:29:3d:e7:46:80:8c:f0:f3:d5:1d:4c:2d:5f:45: b8:8c:1a:f0:86:e6:c4:45:81:42:2b:8a:2b:07:16: 41:7c:26:0c:51:1e:12:cb:af:9b:0e:db:a8:a4:e9: 9d:3a:60:a4:a3:d3:35:35:cc:7d:b5:ee:e7:59:05: de:fb:fc:b6:ca:1e:4e:85:20:ee:83:67:3d:5e:c0: f1:eb:ae:dd:5d:03:bf:63:b0:67:7c:20:70:41:4a: e2:b0:df:00:0f:80:e9:93:21:61:c3:7d:0a:28:6a: 7a:5a:61:63:ab:b6:08:f5:58:f2:96:c0:2d:02:84: 60:8b:1f:cf:bc:9d:69:07:0a:28:dc:ef:8a:6f:da: c6:7b:d9:27:c5:51:a4:a5:7d:38:44:5b:05:db:ca: ca:c5:5d:93:f2:0b:53:b2:61:ee:af:c8:5e:45:1a: e0:32:4a:cf:9b:1e:80:c0:4e:b6:cd:2d:30:ee:fb: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B2:BE:E8:D2:52:C3:CF:09:ED:31:F4:91:C8:6E:F2:FA:DF:C4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/6a126d6e-350c-3218-8782-b483551489da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c0:81:e7:ad:8a:ee:60:76:b0:26:c0:7b:24:6d:c6:10:e6: 23:ab:82:fa:23:13:84:c9:13:65:43:15:cb:de:77:b7:55:59: 17:8d:e2:57:00:5e:8e:53:ee:e1:6e:85:b9:ec:50:b2:df:52: d4:ac:a4:04:00:f1:6b:63:ed:39:6e:5c:c4:4b:78:24:f0:ce: 22:f4:44:1f:95:98:26:6c:2c:ed:94:64:4f:bd:a9:b9:9e:4b: 92:f4:69:b2:58:1c:b1:93:21:78:dc:87:4e:33:ea:64:73:58: 46:eb:c7:c0:18:49:69:77:c4:68:5d:6b:3c:03:0a:2b:71:10: 35:15:d8:b2:15:b3:08:26:de:9b:8e:10:7d:30:fd:ad:16:20: 16:02:6b:57:9c:15:f3:f6:20:2c:55:40:46:90:ee:09:7b:b5: 0c:eb:47:a2:7b:4b:e2:c5:a4:b1:a5:11:98:81:4c:d3:91:88: a2:0c:be:78:9d:d5:3e:8d:d7:1d:a0:f9:58:89:95:7b:b5:52: 43:3b:cf:a0:5f:d3:43:b4:c0:02:2a:e1:dd:60:40:7e:48:02: a7:c7:9a:44:19:d0:45:a9:08:4d:c1:c5:06:e4:1e:fa:76:54: d6:cc:48:35:75:11:ee:2c:6d:45:65:1e:8b:f1:ff:e0:d6:18: 15:d1:fc:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVH0cpZwmWACO2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk YzRlZjI0NmUtNTAxNi00NTVjLWE1OTktZjBiZDZlNzRlYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ9hRyS8UjMD1qeIK8dkG62AcVdEjzQo/kHk 4Q17lc5zAcKj118jXLVyv9E2oC/MzPaO2ChI2E+O4EOOSwmWbWZauqGDUTRcdmUL KT3nRoCM8PPVHUwtX0W4jBrwhubERYFCK4orBxZBfCYMUR4Sy6+bDtuopOmdOmCk o9M1Ncx9te7nWQXe+/y2yh5OhSDug2c9XsDx667dXQO/Y7BnfCBwQUrisN8AD4Dp kyFhw30KKGp6WmFjq7YI9VjylsAtAoRgix/PvJ1pBwoo3O+Kb9rGe9knxVGkpX04 RFsF28rKxV2T8gtTsmHur8heRRrgMkrPmx6AwE62zS0w7vuMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESyvujSUsPPCe0x9JHIbvL638TFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNmExMjZkNmUtMzUwYy0z MjE4LTg3ODItYjQ4MzU1MTQ4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnAgeetiu5gdrAmwHskbcYQ5iOrgvojE4TJE2VDFcved7dVWReN4lcA Xo5T7uFuhbnsULLfUtSspAQA8Wtj7TluXMRLeCTwziL0RB+VmCZsLO2UZE+9qbme S5L0abJYHLGTIXjch04z6mRzWEbrx8AYSWl3xGhdazwDCitxEDUV2LIVswgm3puO EH0w/a0WIBYCa1ecFfP2ICxVQEaQ7gl7tQzrR6J7S+LFpLGlEZiBTNORiKIMvnid 1T6N1x2g+ViJlXu1UkM7z6Bf00O0wAIq4d1gQH5IAqfHmkQZ0EWpCE3BxQbkHvp2 VNbMSDV1Ee4sbUVlHovx/+DWGBXR/BQ= -----END CERTIFICATE-----Generated at Sun Apr 27 16:34:48 2025 by rpki-client