$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa File: c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa (raw, json) Hash identifier: 3FyTWt58SdPTQ7vzz3MAWCRaygar453NdPf5eEkNkB8= Subject key identifier: 88:56:60:98:FF:79:9D:5F:27:FD:83:78:8F:87:F7:66:DD:27:15:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490B4C39E1F7FEA3B0F80D3600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 45758 IP address blocks: 96.17.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:39:e1:f7:fe:a3:b0:f8:0d:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=c29846b8-912c-490a-9049-2b4846b65e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:19:ac:9a:92:45:90:d0:a0:60:31:03:01: a7:a5:cb:64:50:de:b7:45:b6:9e:a1:6d:68:7c:ec: 33:2d:ea:0b:14:34:2e:07:42:ca:a8:65:14:84:04: df:d5:a9:b7:e1:7d:c1:94:73:f4:f7:b2:ba:14:cb: 2b:d5:0e:19:f1:18:14:48:58:76:2a:03:2f:a4:73: ce:1f:f8:2f:b8:a3:d4:89:63:7f:9a:f4:3a:12:68: 87:26:c0:9f:55:4d:b1:87:6f:00:09:89:0d:1f:bd: 59:cf:aa:cc:60:98:10:7e:e1:7b:5c:f3:c1:d3:fc: c7:e6:74:0a:74:11:d5:83:4a:65:7f:6c:9f:fc:f7: 58:c2:23:e3:1f:61:e5:0d:2c:19:ce:ca:e2:e3:f1: f8:47:13:9a:2b:e8:42:d4:07:94:d9:04:e4:58:43: 2d:79:68:c2:6f:f4:c6:52:ea:4f:94:d4:5a:5a:c1: 56:93:bc:68:3c:01:b6:91:7b:0f:f6:69:e7:fc:54: 17:0c:73:26:90:bf:e5:e8:75:ca:9c:30:14:2c:88: 05:1a:eb:aa:c8:10:b0:9f:a4:a9:cb:2e:c4:22:e5: ed:a6:d6:2c:66:03:0b:98:85:a2:18:7b:94:27:b0: 1e:49:5f:e4:66:75:b6:c0:53:42:4b:a9:d3:78:2f: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:60:98:FF:79:9D:5F:27:FD:83:78:8F:87:F7:66:DD:27:15:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6177cb1-3b06-307c-8e0d-71d12a8d3e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6f:13:28:e0:0f:09:b1:d6:b7:07:b7:47:49:11:c2:52:9e: 08:f1:7b:47:89:19:7f:68:f5:df:25:83:0b:7b:d6:31:2e:32: f8:7c:ea:41:98:00:5a:d7:3f:77:71:ac:9b:87:0b:c0:37:fa: a8:40:60:5d:28:f1:bd:00:7a:ef:6a:72:7a:10:b3:b6:9b:ea: bb:11:3b:04:6c:d1:70:0e:1e:60:03:1d:eb:65:cf:2f:2d:25: 90:43:46:2d:19:6c:66:1b:82:5b:f0:86:83:b1:bb:d4:4b:3b: c6:c6:ad:d3:39:4c:2f:5d:23:9a:cc:4a:f5:09:5f:76:64:7c: 0b:88:24:f9:83:45:30:b2:10:6c:b1:2f:d4:53:89:af:88:d5: 96:ae:68:2f:63:b8:ee:53:69:58:88:8a:4c:22:b9:a6:d6:3c: cd:b9:ac:eb:3e:15:e6:ac:6c:4e:b5:55:45:c9:a1:2c:ce:e6: 5b:62:7b:f0:9c:48:a8:24:12:21:ec:7a:d9:bd:a5:d1:fe:7d: dc:32:4e:8b:c6:af:df:0c:e3:40:1c:3a:15:42:cc:9d:fc:40: d5:c2:2c:34:30:06:df:a5:9d:f9:43:47:e6:25:23:45:a3:5f: 07:76:c6:db:35:16:22:72:3a:96:8c:65:52:73:85:5a:27:ce: 4e:92:c4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTDnh9/6jsPgNNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk YzI5ODQ2YjgtOTEyYy00OTBhLTkwNDktMmI0ODQ2YjY1ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuoZrJqSRZDQoGAxAwGnpctkUN63RbaeoW1o fOwzLeoLFDQuB0LKqGUUhATf1am34X3BlHP097K6FMsr1Q4Z8RgUSFh2KgMvpHPO H/gvuKPUiWN/mvQ6EmiHJsCfVU2xh28ACYkNH71Zz6rMYJgQfuF7XPPB0/zH5nQK dBHVg0plf2yf/PdYwiPjH2HlDSwZzsri4/H4RxOaK+hC1AeU2QTkWEMteWjCb/TG UupPlNRaWsFWk7xoPAG2kXsP9mnn/FQXDHMmkL/l6HXKnDAULIgFGuuqyBCwn6Sp yy7EIuXtptYsZgMLmIWiGHuUJ7AeSV/kZnW2wFNCS6nTeC9KWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhWYJj/eZ1fJ/2DeI+H92bdJxXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzYxNzdjYjEtM2IwNi0z MDdjLThlMGQtNzFkMTJhOGQzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYBHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRvEyjgDwmx1rcHt0dJEcJSngjxe0eJGX9o9d8lgwt71jEuMvh86kGY AFrXP3dxrJuHC8A3+qhAYF0o8b0Aeu9qcnoQs7ab6rsROwRs0XAOHmADHetlzy8t JZBDRi0ZbGYbglvwhoOxu9RLO8bGrdM5TC9dI5rMSvUJX3ZkfAuIJPmDRTCyEGyx L9RTia+I1ZauaC9juO5TaViIikwiuabWPM25rOs+FeasbE61VUXJoSzO5ltie/Cc SKgkEiHsetm9pdH+fdwyTovGr98M40AcOhVCzJ38QNXCLDQwBt+lnflDR+YlI0Wj Xwd2xts1FiJyOpaMZVJzhVonzk6SxJg= -----END CERTIFICATE-----Generated at Sun Apr 27 06:13:04 2025 by rpki-client