$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/0fa73620-d323-3c7d-9365-e96bf2c10eb7.roa File: 0fa73620-d323-3c7d-9365-e96bf2c10eb7.roa (raw, json) Hash identifier: JaW98fVUCmyz0RKdMHjX7xhvloAUwmfDWIEz8bf/CnE= Subject key identifier: 89:C0:23:53:05:86:AD:B6:A1:D2:43:47:34:32:84:D9:83:2A:13:A6 Certificate issuer: /CN=f22aba24-e2d9-4f58-ac80-6b95236d64e2 Certificate serial: 010D0C9F432858499F040BB4B4407C14CF7AEB80 Authority key identifier: 4D:EF:F5:1A:48:3C:08:40:8C:59:E4:16:6B:15:5E:2F:10:D9:55:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/0fa73620-d323-3c7d-9365-e96bf2c10eb7.roa Signing time: Wed 23 Apr 2025 11:55:30 +0000 ROA not before: Wed 23 Apr 2025 11:55:30 +0000 ROA not after: Tue 22 Jul 2025 11:55:30 +0000 asID: 2914 IP address blocks: 96.47.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/f22aba24-e2d9-4f58-ac80-6b95236d64e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/f22aba24-e2d9-4f58-ac80-6b95236d64e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:04:0b:b4:b4:40:7c:14:cf:7a:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22aba24-e2d9-4f58-ac80-6b95236d64e2 Validity Not Before: Apr 23 11:55:30 2025 GMT Not After : Jul 22 11:55:30 2025 GMT Subject: CN=25ed25e0-60c3-4dc0-b9f9-f6c46a821069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:73:ed:90:c4:15:f9:80:32:d7:90:b2:c5: bb:7e:91:31:78:4d:fe:4b:e8:d5:e3:83:9b:d0:c8: 0b:c9:43:fc:d0:ef:88:64:e7:37:a7:18:c3:f9:02: fd:1b:32:4d:ef:d5:58:4f:45:8f:af:06:24:d7:0c: 3b:24:79:81:a5:4c:76:0f:3f:27:c6:c6:23:2f:c8: ee:52:7e:72:f4:fd:56:60:2e:99:18:1d:ef:f0:77: d9:1b:6e:b7:fc:18:ae:09:51:06:55:79:ea:92:29: c9:81:c1:0c:a2:14:1e:9c:02:59:9f:4a:2d:69:3c: 0d:3f:88:ab:4e:0e:37:08:97:4f:a7:86:fd:10:70: 58:69:e3:a4:cc:f7:29:72:3d:41:f8:ea:1c:29:b7: a9:28:31:40:96:e3:72:76:65:40:72:7b:09:8d:02: df:bc:8e:bd:1a:a9:01:7f:0b:af:db:1e:a4:60:a6: f8:17:81:8c:4b:6e:11:cb:2d:b4:89:3f:ab:9f:ac: 12:aa:7d:b0:6d:1d:ea:4c:31:6f:3c:66:d3:53:9e: 47:14:d6:98:68:42:a5:77:b9:97:f6:34:91:38:7f: bb:1b:a6:8d:a4:56:0a:0c:a0:72:87:9d:41:4f:11: 84:bd:20:05:bc:b4:15:d1:98:07:d2:4f:0b:95:35: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C0:23:53:05:86:AD:B6:A1:D2:43:47:34:32:84:D9:83:2A:13:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/0fa73620-d323-3c7d-9365-e96bf2c10eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/f22aba24-e2d9-4f58-ac80-6b95236d64e2.crl X509v3 Authority Key Identifier: keyid:4D:EF:F5:1A:48:3C:08:40:8C:59:E4:16:6B:15:5E:2F:10:D9:55:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2.cer sbgp-ipAddrBlock: critical IPv4: 96.47.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:68:a9:40:ed:cf:e4:b3:31:3f:48:14:03:65:80:0c:15:7d: ea:70:f2:dc:71:db:90:80:00:df:92:c8:bd:06:69:17:75:e5: b8:7f:23:e8:08:63:23:46:7b:2b:ac:7a:ba:fb:32:85:fc:b0: 9d:98:3e:0f:9e:00:76:f0:69:ec:79:dd:84:16:c3:5c:60:dd: 18:38:2f:51:51:7e:85:ff:0f:f2:d1:2e:29:7b:7d:fe:a4:9b: 66:1d:44:71:0d:c7:88:30:4a:7f:1d:29:6d:4a:25:dd:f3:1a: a4:cb:a8:9a:1d:70:09:43:27:00:0b:52:06:12:8c:49:47:c0: b2:e1:f1:c5:56:7f:93:82:26:8c:8f:5d:39:1e:32:0c:8d:ce: aa:0a:47:f0:d4:b4:f1:41:a7:b8:57:b8:1e:dc:81:71:3a:69: db:2f:1e:10:e8:aa:68:7a:79:ae:db:40:61:76:a0:1d:ad:16: 98:20:ab:a5:33:de:21:72:23:b6:c1:b3:ab:91:d3:45:27:ec: 2d:e6:6d:9f:db:0e:1a:45:ea:3d:47:71:f6:94:10:36:5c:78: 8f:09:e5:64:7c:0b:83:b5:bf:3d:82:3f:3b:34:30:38:fd:19: 65:df:78:02:ac:e4:3b:ab:e5:71:3d:13:4b:af:5e:5b:01:f7: 5d:9a:a3:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfBAu0tEB8FM9664AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIyYWJhMjQtZTJkOS00ZjU4LWFjODAtNmI5NTIzNmQ2 NGUyMB4XDTI1MDQyMzExNTUzMFoXDTI1MDcyMjExNTUzMFowLzEtMCsGA1UEAxMk MjVlZDI1ZTAtNjBjMy00ZGMwLWI5ZjktZjZjNDZhODIxMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDBz7ZDEFfmAMteQssW7fpExeE3+S+jV44Ob 0MgLyUP80O+IZOc3pxjD+QL9GzJN79VYT0WPrwYk1ww7JHmBpUx2Dz8nxsYjL8ju Un5y9P1WYC6ZGB3v8HfZG263/BiuCVEGVXnqkinJgcEMohQenAJZn0otaTwNP4ir Tg43CJdPp4b9EHBYaeOkzPcpcj1B+OocKbepKDFAluNydmVAcnsJjQLfvI69GqkB fwuv2x6kYKb4F4GMS24Ryy20iT+rn6wSqn2wbR3qTDFvPGbTU55HFNaYaEKld7mX 9jSROH+7G6aNpFYKDKByh51BTxGEvSAFvLQV0ZgH0k8LlTXhCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInAI1MFhq22odJDRzQyhNmDKhOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mMjJh YmEyNC1lMmQ5LTRmNTgtYWM4MC02Yjk1MjM2ZDY0ZTIvMGZhNzM2MjAtZDMyMy0z YzdkLTkzNjUtZTk2YmYyYzEwZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjIyYWJhMjQtZTJkOS00ZjU4LWFj ODAtNmI5NTIzNmQ2NGUyL2YyMmFiYTI0LWUyZDktNGY1OC1hYzgwLTZiOTUyMzZk NjRlMi5jcmwwHwYDVR0jBBgwFoAUTe/1Gkg8CECMWeQWaxVeLxDZVSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mMjJhYmEyNC1lMmQ5LTRmNTgtYWM4MC02Yjk1 MjM2ZDY0ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYC+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABoqUDtz+SzMT9IFANlgAwVfepw8txx25CAAN+SyL0GaRd15bh/I+gI YyNGeyuserr7MoX8sJ2YPg+eAHbwaex53YQWw1xg3Rg4L1FRfoX/D/LRLil7ff6k m2YdRHENx4gwSn8dKW1KJd3zGqTLqJodcAlDJwALUgYSjElHwLLh8cVWf5OCJoyP XTkeMgyNzqoKR/DUtPFBp7hXuB7cgXE6adsvHhDoqmh6ea7bQGF2oB2tFpggq6Uz 3iFyI7bBs6uR00Un7C3mbZ/bDhpF6j1HcfaUEDZceI8J5WR8C4O1vz2CPzs0MDj9 GWXfeAKs5Dur5XE9E0uvXlsB912ao7Q= -----END CERTIFICATE-----Generated at Sat Apr 26 16:38:11 2025 by rpki-client