$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ffa19c5-cdf8-3b93-9815-661c2060a214.roa File: 8ffa19c5-cdf8-3b93-9815-661c2060a214.roa (raw, json) Hash identifier: huVo3lgoHn8luL/skwYTi95Y3jg7JN/InNxtbdb0NXw= Subject key identifier: CD:FF:6A:F1:EE:D7:64:B4:2D:BB:D8:DA:BE:F2:09:12:63:CA:F0:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584902EC1F3B7E367B73DB64EE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ffa19c5-cdf8-3b93-9815-661c2060a214.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16625 IP address blocks: 96.6.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:1f:3b:7e:36:7b:73:db:64:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=1a1af9db-9d90-4dbc-b617-f10ef021d074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:e7:5e:64:03:4b:26:42:e0:d3:cb:15:2b: 13:64:16:92:cb:1d:9f:ed:5f:fd:11:e7:cd:04:00: c1:9b:21:9e:1d:60:af:95:77:ec:e4:43:07:14:5a: 3f:c3:95:81:6a:bd:52:45:ab:b7:1a:b6:93:10:61: 48:32:16:6d:69:81:a4:62:f3:7c:29:c7:09:9b:ad: a5:81:50:a6:58:d1:3d:44:e1:aa:73:76:82:2c:01: 37:cd:6b:f5:ef:98:c5:bf:cb:a3:bb:aa:25:7f:ce: 29:8d:6c:73:e0:15:9d:92:a6:52:bf:c1:a0:2f:18: c0:bd:09:f7:e9:ff:f9:f8:25:c3:b1:1d:ca:f5:1e: 0e:b6:48:f3:87:34:4f:1c:52:d9:f1:ab:a7:6e:b6: e3:ee:6c:4e:26:33:75:f2:aa:d5:16:a3:6c:8a:d5: 31:95:3f:a4:2b:bc:d3:98:6f:cb:00:df:6e:d8:23: 44:c2:2d:e0:34:b4:aa:ae:3f:75:ff:5a:1a:b0:16: 55:45:df:2d:c8:7d:db:5b:04:ff:7b:a7:78:d8:1c: d1:5d:5e:89:9e:2d:54:0d:18:6a:fb:0b:40:4d:d7: 09:15:08:4f:89:f7:63:01:35:c5:cb:13:d1:89:98: 93:e7:37:cd:7e:a2:0e:07:22:9a:09:c1:11:80:70: 6c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FF:6A:F1:EE:D7:64:B4:2D:BB:D8:DA:BE:F2:09:12:63:CA:F0:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ffa19c5-cdf8-3b93-9815-661c2060a214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.6.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:4d:89:3f:7c:9c:de:16:a8:1f:36:c8:f0:35:38:40:97:d9: 6d:bf:0e:5f:a0:79:a5:ff:3f:a8:28:de:4a:45:b2:b5:4a:18: 97:a0:3b:d4:06:0c:66:bd:f6:76:a7:a1:11:d1:ad:ba:87:bc: c3:08:1c:79:bc:d3:50:c1:0b:33:84:6d:18:d3:3d:a8:5c:d8: 32:fb:7a:9d:f4:27:06:20:76:df:6c:a1:db:46:5b:63:f6:7c: 94:d5:6a:c6:f2:0c:6c:23:d5:77:55:6e:fa:8b:ec:35:23:97: bc:f4:fa:64:ca:10:89:5b:c9:97:aa:89:c2:f1:95:b4:98:41: 74:50:92:f0:7d:a8:5a:e6:c5:38:e8:c6:0b:bf:31:65:6d:a2: 11:4e:7c:a9:80:bd:04:ed:c1:bc:3f:25:9d:4b:32:dd:93:a8: 85:14:43:15:02:c3:75:40:b5:cd:0e:b6:23:e1:a4:87:de:66: 8e:05:5e:20:e4:ab:1b:e7:f7:22:8d:bc:43:18:27:57:a4:86: 23:20:32:4e:dd:81:35:99:1a:29:04:6f:78:7e:ed:b0:85:18: 81:2f:ce:db:13:0d:9d:b4:e9:b2:1a:e5:71:62:72:8f:98:35: d3:44:03:3c:ea:f7:75:a2:b1:a9:16:5d:b8:9e:b4:58:0e:dd: 3a:0f:9b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7B87fjZ7c9tk7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MWExYWY5ZGItOWQ5MC00ZGJjLWI2MTctZjEwZWYwMjFkMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziLnXmQDSyZC4NPLFSsTZBaSyx2f7V/9EefN BADBmyGeHWCvlXfs5EMHFFo/w5WBar1SRau3GraTEGFIMhZtaYGkYvN8KccJm62l gVCmWNE9ROGqc3aCLAE3zWv175jFv8uju6olf84pjWxz4BWdkqZSv8GgLxjAvQn3 6f/5+CXDsR3K9R4OtkjzhzRPHFLZ8aunbrbj7mxOJjN18qrVFqNsitUxlT+kK7zT mG/LAN9u2CNEwi3gNLSqrj91/1oasBZVRd8tyH3bWwT/e6d42BzRXV6Jni1UDRhq +wtATdcJFQhPifdjATXFyxPRiZiT5zfNfqIOByKaCcERgHBs5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3/avHu12S0LbvY2r7yCRJjyvAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGZmYTE5YzUtY2RmOC0z YjkzLTk4MTUtNjYxYzIwNjBhMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANNiT98nN4WqB82yPA1OECX2W2/Dl+geaX/P6go3kpFsrVKGJegO9QG DGa99nanoRHRrbqHvMMIHHm801DBCzOEbRjTPahc2DL7ep30JwYgdt9sodtGW2P2 fJTVasbyDGwj1XdVbvqL7DUjl7z0+mTKEIlbyZeqicLxlbSYQXRQkvB9qFrmxTjo xgu/MWVtohFOfKmAvQTtwbw/JZ1LMt2TqIUUQxUCw3VAtc0OtiPhpIfeZo4FXiDk qxvn9yKNvEMYJ1ekhiMgMk7dgTWZGikEb3h+7bCFGIEvztsTDZ206bIa5XFico+Y NdNEAzzq93WisakWXbietFgO3ToPm3c= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:05 2025 by rpki-client