$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa File: 41a70eb2-5061-30f1-809b-803f649d06f9.roa (raw, json) Hash identifier: szzdHK9AZkzHwDrtYTbG+jJKqU/XwVwLk98KIBnA59Q= Subject key identifier: 20:CF:DF:D1:4C:7F:B7:5B:B8:CE:95:40:6C:B2:83:24:15:82:8C:25 Certificate issuer: /CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Certificate serial: 010D0C9F43285849A4BA4AC2EFDD18D505C87F80 Authority key identifier: 4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 54225 IP address blocks: 96.31.192.0/20 maxlen: 32 209.239.96.0/20 maxlen: 32 216.49.96.0/19 maxlen: 32 2607:fb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4a:c2:ef:dd:18:d5:05:c8:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c04edf23-742e-4aa9-8729-f386a3254255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:8e:a8:22:60:4c:ab:d7:de:e0:5f:11:45: 29:d6:f7:3e:ee:e5:4f:fb:96:a1:84:12:7f:23:68: 08:70:ca:84:22:95:99:49:80:57:ff:e3:03:3e:83: 76:85:d7:dc:46:1d:99:a7:7f:bf:12:d7:37:04:56: 36:31:b7:fe:73:2c:32:c1:e9:36:57:64:9c:6f:05: fb:e0:14:f1:65:db:17:13:bd:8f:89:99:62:65:85: 94:f5:bd:3a:8f:a2:0e:85:d4:f7:5f:3b:aa:50:06: a0:ba:32:1b:8f:2b:8d:bf:14:85:b8:1a:2d:e1:59: 4f:be:14:b7:75:f6:c7:5b:d7:2c:c7:ba:b0:6a:6f: d3:11:65:7f:af:ec:ba:6a:ad:58:6f:11:6d:c8:8c: 5e:8e:46:f0:28:d8:c6:8c:b5:70:c0:43:c9:f3:6f: 48:3a:83:db:c1:c7:db:c2:50:66:2f:c0:a4:23:cf: 91:3a:d1:78:b7:c3:9f:36:af:49:28:21:1a:f6:b1: 60:8b:a5:06:5c:86:56:67:6b:44:77:46:d4:c0:06: 45:0c:0e:b4:b5:14:b6:06:43:a2:66:11:84:ec:fd: e1:fd:cf:fa:4c:18:43:21:ac:29:93:70:83:c8:15: db:2f:84:71:d8:04:6d:02:38:e4:80:fa:6a:2e:b0: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:DF:D1:4C:7F:B7:5B:B8:CE:95:40:6C:B2:83:24:15:82:8C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/41a70eb2-5061-30f1-809b-803f649d06f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl X509v3 Authority Key Identifier: keyid:4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer sbgp-ipAddrBlock: critical IPv4: 96.31.192.0/20 209.239.96.0/20 216.49.96.0/19 IPv6: 2607:fb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:1c:8c:03:a6:fb:cb:d4:ee:86:ad:40:b4:92:14:60:fb:03: 7d:14:90:97:27:57:4e:80:cf:6e:ce:31:4b:7d:88:ed:5c:de: bf:de:4b:7d:c7:4b:51:7b:f5:4b:49:d0:c6:71:83:04:b3:5e: 4a:4d:5a:88:51:ed:ca:3f:52:a0:cb:93:51:f6:3d:56:00:e5: 8c:f2:b4:49:a6:59:03:1d:a7:ae:79:54:69:3a:3b:53:d6:f1: b9:60:93:00:0e:b3:f9:5f:0d:4a:21:33:e3:0d:c1:41:57:9a: 9f:c6:36:c6:a4:f3:c7:69:74:73:a0:32:e0:39:7d:b0:35:76: 5e:d3:72:1c:d1:b0:30:5e:0f:f0:bc:c7:94:46:35:ce:8e:8b: a7:4f:18:51:d8:f9:eb:0d:47:c5:a0:a5:d8:1e:9c:d7:d8:3d: 70:6c:f7:24:e0:37:ef:38:8a:8d:7a:e4:f0:ce:56:8e:91:1d: 51:f7:8b:b0:8a:c9:e2:83:7d:f1:10:c1:a8:be:78:e8:42:62: 6d:52:48:a0:46:5e:2b:df:3b:45:eb:4f:6a:33:20:4b:5d:6d: d7:89:77:4a:20:03:f1:33:00:20:4d:3e:06:9e:c9:eb:be:7d: e9:56:52:51:1d:54:ea:b1:5e:78:fa:86:b7:ee:ae:4a:88:61: a8:48:77:7a -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEmkukrC790Y1QXIf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdiNWZhYWQtNjNkYi00Y2ZkLWE1NWItNDE0M2MzZTk0 MjkxMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzA0ZWRmMjMtNzQyZS00YWE5LTg3MjktZjM4NmEzMjU0MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlluOqCJgTKvX3uBfEUUp1vc+7uVP+5ahhBJ/ I2gIcMqEIpWZSYBX/+MDPoN2hdfcRh2Zp3+/Etc3BFY2Mbf+cywywek2V2ScbwX7 4BTxZdsXE72PiZliZYWU9b06j6IOhdT3XzuqUAagujIbjyuNvxSFuBot4VlPvhS3 dfbHW9csx7qwam/TEWV/r+y6aq1YbxFtyIxejkbwKNjGjLVwwEPJ829IOoPbwcfb wlBmL8CkI8+ROtF4t8OfNq9JKCEa9rFgi6UGXIZWZ2tEd0bUwAZFDA60tRS2BkOi ZhGE7P3h/c/6TBhDIawpk3CDyBXbL4Rx2ARtAjjkgPpqLrANiQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFCDP39FMf7dbuM6VQGyygyQVgowlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1 ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQzYzNlOTQyOTEvNDFhNzBlYjItNTA2MS0z MGYxLTgwOWItODAzZjY0OWQwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTdiNWZhYWQtNjNkYi00Y2ZkLWE1 NWItNDE0M2MzZTk0MjkxLzU3YjVmYWFkLTYzZGItNGNmZC1hNTViLTQxNDNjM2U5 NDI5MS5jcmwwHwYDVR0jBBgwFoAUS3Ybjt1V265CNvhniSBnepTz7ZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQz YzNlOTQyOTEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEYB/AAwQE 0e9gAwQF2DFgMA0EAgACMAcDBQAmB/tAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHccjAOm+8vU7oatQLSS FGD7A30UkJcnV06Az27OMUt9iO1c3r/eS33HS1F79UtJ0MZxgwSzXkpNWohR7co/ UqDLk1H2PVYA5YzytEmmWQMdp655VGk6O1PW8blgkwAOs/lfDUohM+MNwUFXmp/G Nsak88dpdHOgMuA5fbA1dl7TchzRsDBeD/C8x5RGNc6Oi6dPGFHY+esNR8Wgpdge nNfYPXBs9yTgN+84io165PDOVo6RHVH3i7CKyeKDffEQwai+eOhCYm1SSKBGXivf O0XrT2ozIEtdbdeJd0ogA/EzACBNPgaeyeu+felWUlEdVOqxXnj6hrfurkqIYahI d3o= -----END CERTIFICATE-----Generated at Tue Apr 29 10:00:19 2025 by rpki-client