$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f7cb1d0-a9ea-3622-aeb9-3b8afa558a67.roa File: 1f7cb1d0-a9ea-3622-aeb9-3b8afa558a67.roa (raw, json) Hash identifier: z9PKRe0FkJLLiX5FRZEQVGKF/1KUVHfMLQ7S5NmBs0w= Subject key identifier: 22:9D:1D:DF:C9:61:54:B5:D9:7A:1B:43:3A:D9:35:F4:54:AD:52:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858498E64B1AD61042CD3F4ADBD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f7cb1d0-a9ea-3622-aeb9-3b8afa558a67.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 33661 IP address blocks: 96.71.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b1:ad:61:04:2c:d3:f4:ad:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=aa7a32eb-78cc-4e8e-844e-e6b71581cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:6f:26:10:40:b0:24:e8:12:d9:56:0d:e2: d2:b1:97:8d:68:df:37:46:8e:8d:c3:cb:02:db:db: 13:c9:3d:c7:8f:43:b8:d3:e3:7a:ca:61:18:3e:ba: 80:b4:46:45:af:12:b6:70:43:be:25:91:c4:33:a8: 8e:d8:37:22:70:34:6d:d7:b5:28:c7:bb:20:1c:be: 31:94:23:7f:d0:2d:33:72:e2:54:da:3d:c8:7b:ce: f1:5b:65:67:b3:ff:38:15:70:f5:b4:d1:7a:35:25: cf:86:e5:f1:6f:2f:70:fe:b0:f7:cd:8f:c9:50:5b: 4b:9d:fa:8a:0e:aa:47:5f:28:6a:b0:21:1d:0f:11: 9d:c3:9f:2d:bb:5d:97:30:d8:75:c1:02:f7:c0:11: 0f:76:be:6a:0a:6f:89:61:88:c3:4e:c3:db:6c:85: 4a:1c:7a:9c:5e:45:35:4c:08:a8:17:66:28:2d:9c: 7d:a2:61:26:b2:35:71:f3:86:4a:41:21:01:eb:79: a6:09:80:ca:20:45:6e:c4:09:ca:7a:0e:81:71:d0: ce:1e:1b:69:5c:d6:cd:45:d6:fd:87:08:00:7a:d8: 3b:93:d0:c5:ad:30:6d:c4:6e:5e:99:d6:c0:0a:cb: d2:24:5d:df:eb:94:98:cc:db:b9:98:af:b3:4f:1b: 77:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:1D:DF:C9:61:54:B5:D9:7A:1B:43:3A:D9:35:F4:54:AD:52:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f7cb1d0-a9ea-3622-aeb9-3b8afa558a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.71.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:88:2e:af:b2:98:9d:a9:4a:33:fb:bd:6e:a7:83:71:f9:24: 74:46:57:a1:c4:6e:aa:e1:da:17:0d:53:fb:bc:11:8e:f2:b1: 6c:d8:b3:43:72:e7:4b:a0:09:fb:70:89:27:67:da:41:dd:20: b1:64:8c:c6:5b:b4:4a:65:26:a3:8d:86:69:c2:e1:a1:da:7a: d5:2c:e5:64:29:93:93:85:ad:9d:5b:21:d7:75:cf:a4:6c:7d: 5c:43:ed:a2:0e:11:17:4e:bf:02:34:1f:63:66:c0:3b:66:32: 0e:ff:c0:18:47:72:4b:e3:89:ad:5b:59:7c:36:88:09:f7:b9: d3:22:65:21:f9:46:a1:a1:9a:1b:87:6c:94:fc:c5:cc:3f:32: dd:68:a1:08:8d:1f:87:05:a9:9c:a0:0d:26:a4:b2:c0:6f:4f: 94:62:6a:c9:1a:65:00:69:49:7c:e9:52:d4:da:42:e9:72:0a: 74:3a:e5:36:54:d3:13:eb:29:f2:76:0b:ef:93:33:ef:5c:37: 22:7e:23:d6:c7:3d:61:69:ec:93:64:38:d4:92:12:9e:78:d6: 17:74:3a:c0:18:05:7b:ef:ea:fe:32:c9:2f:71:48:44:cb:89: e7:e5:e7:1e:fd:21:fa:4a:92:bc:0a:7c:18:51:3a:ef:4d:51: de:18:73:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLGtYQQs0/StvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YWE3YTMyZWItNzhjYy00ZThlLTg0NGUtZTZiNzE1ODFjYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf1vJhBAsCToEtlWDeLSsZeNaN83Ro6Nw8sC 29sTyT3Hj0O40+N6ymEYPrqAtEZFrxK2cEO+JZHEM6iO2DcicDRt17Uox7sgHL4x lCN/0C0zcuJU2j3Ie87xW2Vns/84FXD1tNF6NSXPhuXxby9w/rD3zY/JUFtLnfqK DqpHXyhqsCEdDxGdw58tu12XMNh1wQL3wBEPdr5qCm+JYYjDTsPbbIVKHHqcXkU1 TAioF2YoLZx9omEmsjVx84ZKQSEB63mmCYDKIEVuxAnKeg6BcdDOHhtpXNbNRdb9 hwgAetg7k9DFrTBtxG5emdbACsvSJF3f65SYzNu5mK+zTxt3SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKdHd/JYVS12XobQzrZNfRUrVLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY3Y2IxZDAtYTllYS0z NjIyLWFlYjktM2I4YWZhNTU4YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYEdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+ILq+ymJ2pSjP7vW6ng3H5JHRGV6HEbqrh2hcNU/u8EY7ysWzYs0Ny 50ugCftwiSdn2kHdILFkjMZbtEplJqONhmnC4aHaetUs5WQpk5OFrZ1bIdd1z6Rs fVxD7aIOERdOvwI0H2NmwDtmMg7/wBhHckvjia1bWXw2iAn3udMiZSH5RqGhmhuH bJT8xcw/Mt1ooQiNH4cFqZygDSakssBvT5RiaskaZQBpSXzpUtTaQulyCnQ65TZU 0xPrKfJ2C++TM+9cNyJ+I9bHPWFp7JNkONSSEp541hd0OsAYBXvv6v4yyS9xSETL iefl5x79IfpKkrwKfBhROu9NUd4Yc3M= -----END CERTIFICATE-----Generated at Fri May 9 20:00:27 2025 by rpki-client