$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae235ec-014c-32c7-b3b8-803945f14e08.roa File: 8ae235ec-014c-32c7-b3b8-803945f14e08.roa (raw, json) Hash identifier: WCOpdaK1ec5j7d7qPeZ/ACbAz2dreA58BIcuNeEDaqA= Subject key identifier: 96:05:DD:4A:A9:FC:58:D2:79:5B:78:E6:FD:03:39:5D:81:1F:1B:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C38D0C0D8D71DCE4FD780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae235ec-014c-32c7-b3b8-803945f14e08.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 16625 IP address blocks: 96.17.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:38:d0:c0:d8:d7:1d:ce:4f:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=010fb974-4dc4-4dc5-979c-8df9e6c35a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8b:52:1e:09:e2:64:fd:fb:8a:c4:df:f8:31: ad:7d:2d:36:74:dd:73:d8:bd:d8:d7:ba:eb:2c:e1: ce:ce:7d:76:9a:c4:c7:a6:5d:84:86:d4:1a:37:45: f9:1e:e8:37:8e:72:01:10:a8:62:21:aa:5e:dd:4f: c2:d3:c1:4d:06:23:1d:c8:5d:f3:d2:90:9b:73:78: e0:27:90:eb:a9:4e:a7:c6:23:15:84:59:9c:86:6f: 95:19:cf:cc:f7:9b:b7:72:7d:85:2d:1b:40:3c:16: 9c:13:55:01:de:2c:9d:49:40:4b:53:13:11:a3:5b: 10:5a:fd:67:13:1d:09:39:36:58:fe:d9:9c:a1:08: 2f:81:98:47:35:b2:ad:fd:d6:a6:29:55:69:f6:5e: 18:ae:ec:b8:42:9a:18:c6:f3:f9:0a:61:ab:2d:a4: 1e:5b:a9:88:18:96:fd:42:89:79:2b:95:62:83:37: d1:40:e8:32:a8:04:09:f5:d9:06:a2:04:de:7a:4d: 12:85:bb:4b:5c:47:7a:9e:36:c0:43:91:34:b6:f7: 01:bf:e1:e0:f6:d8:24:54:5d:64:c4:8a:7f:a7:59: 45:00:f3:ae:a5:19:90:0a:f8:c8:b2:9e:ec:fe:52: b4:b3:d0:60:58:5c:ac:39:1c:d9:2c:02:7c:b3:ff: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:05:DD:4A:A9:FC:58:D2:79:5B:78:E6:FD:03:39:5D:81:1F:1B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae235ec-014c-32c7-b3b8-803945f14e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:26:6c:a8:fe:85:aa:5b:8f:31:96:2b:a2:c7:d3:78:90:9e: 26:a7:48:07:cf:bd:5e:1d:b2:83:45:dd:ac:39:c8:70:d5:b3: 9a:2b:5a:01:34:4b:c3:16:aa:95:ba:37:9c:91:c1:40:01:7c: 45:3c:03:f7:e9:c7:3b:35:02:2a:8c:40:f4:70:31:31:91:b0: e7:34:fc:d5:2d:9a:d2:84:93:10:d2:24:04:e9:cb:dd:fc:12: ca:1f:7c:7c:e6:00:45:eb:e2:c5:f0:df:82:8c:5f:68:0a:4a: 21:dc:c1:0c:14:41:3d:a2:7c:13:40:2d:fb:f4:23:bf:8b:e4: 0e:17:cf:87:18:80:be:38:d4:9f:3f:fa:a6:60:e0:cf:8b:ab: c9:ee:1f:6f:51:92:c8:f8:85:bd:5c:02:a5:3e:7f:e1:c7:8b: c0:5e:af:bc:24:59:3d:6b:e0:75:82:e1:01:48:f0:e9:09:0d: 4c:85:97:a6:64:eb:b8:3b:ec:bd:a2:a1:2e:97:c3:cb:b9:3b: be:2a:c6:a2:56:8b:0e:e0:0c:f1:c6:cf:18:2b:16:bd:34:3c: 3f:79:1a:15:96:17:b4:77:21:f3:7c:2e:f2:29:91:93:1f:bc: 0d:37:90:a5:27:dc:a5:fd:25:7a:70:d9:c3:28:27:4c:93:22: c0:b2:2a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDjQwNjXHc5P14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MDEwZmI5NzQtNGRjNC00ZGM1LTk3OWMtOGRmOWU2YzM1YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiItSHgniZP37isTf+DGtfS02dN1z2L3Y17rr LOHOzn12msTHpl2EhtQaN0X5Hug3jnIBEKhiIape3U/C08FNBiMdyF3z0pCbc3jg J5DrqU6nxiMVhFmchm+VGc/M95u3cn2FLRtAPBacE1UB3iydSUBLUxMRo1sQWv1n Ex0JOTZY/tmcoQgvgZhHNbKt/damKVVp9l4Yruy4QpoYxvP5CmGrLaQeW6mIGJb9 Qol5K5VigzfRQOgyqAQJ9dkGogTeek0ShbtLXEd6njbAQ5E0tvcBv+Hg9tgkVF1k xIp/p1lFAPOupRmQCvjIsp7s/lK0s9BgWFysORzZLAJ8s//2gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYF3Uqp/FjSeVt45v0DOV2BHxvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGFlMjM1ZWMtMDE0Yy0z MmM3LWIzYjgtODAzOTQ1ZjE0ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwmbKj+hapbjzGWK6LH03iQnianSAfPvV4dsoNF3aw5yHDVs5orWgE0 S8MWqpW6N5yRwUABfEU8A/fpxzs1AiqMQPRwMTGRsOc0/NUtmtKEkxDSJATpy938 EsoffHzmAEXr4sXw34KMX2gKSiHcwQwUQT2ifBNALfv0I7+L5A4Xz4cYgL441J8/ +qZg4M+Lq8nuH29Rksj4hb1cAqU+f+HHi8Ber7wkWT1r4HWC4QFI8OkJDUyFl6Zk 67g77L2ioS6Xw8u5O74qxqJWiw7gDPHGzxgrFr00PD95GhWWF7R3IfN8LvIpkZMf vA03kKUn3KX9JXpw2cMoJ0yTIsCyKsU= -----END CERTIFICATE-----Generated at Sun Apr 27 03:01:33 2025 by rpki-client