$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc10a05f-d714-3901-9b46-a435e14e423d.roa File: cc10a05f-d714-3901-9b46-a435e14e423d.roa (raw, json) Hash identifier: OYJABMRoJEgaLJn+j0J/WuZdjc1GXo/yDZaS2vOYBcw= Subject key identifier: 1E:B7:E3:C1:82:5E:D2:61:8C:6A:CD:4A:5E:4E:54:D7:8C:91:75:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858498E64B17A687F24A955E5F860 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc10a05f-d714-3901-9b46-a435e14e423d.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 33661 IP address blocks: 96.66.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b1:7a:68:7f:24:a9:55:e5:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=0d81dee0-a91a-4c56-8bd0-f4997771afe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:18:e3:d3:81:2d:75:40:cb:60:74:4e:3b: b6:e5:39:c4:83:5f:e4:30:0e:17:de:e1:13:49:4b: 12:ba:04:39:23:d0:c4:bc:58:ea:07:08:73:6d:7e: 2f:7f:4c:42:ee:55:0c:d1:a7:30:b4:0b:79:d7:79: ec:9b:13:b5:49:9c:52:20:69:58:1b:d1:71:44:4d: 12:7e:a2:3d:04:c9:bd:71:53:ce:1f:e4:f1:e9:cb: ac:0f:c8:76:92:25:6d:91:44:30:3d:d1:0a:47:b0: 08:46:53:07:b2:bf:8a:80:c6:87:0a:77:d0:c6:db: 16:3f:f3:db:f6:c8:21:18:63:ff:ea:ee:5e:0c:0b: 03:d2:2a:3d:58:65:5d:df:8c:fe:4c:ee:32:7c:83: d1:5d:0a:14:02:c3:01:fb:94:37:9c:10:bf:1a:a0: 6c:3b:56:11:5c:f8:e1:86:29:27:a4:ec:f7:0b:0b: ed:69:c3:68:96:ee:e3:1b:f4:d3:ca:89:4c:4a:12: bf:2f:85:ac:f6:49:66:52:44:73:51:ae:56:b2:eb: 07:a6:23:4f:ba:b0:10:b9:b5:67:7d:62:06:69:1b: c1:b4:b2:df:66:97:54:e0:84:5d:06:a8:83:19:bd: 6c:a6:4d:b0:6c:59:36:96:47:d9:d5:85:7d:10:8a: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B7:E3:C1:82:5E:D2:61:8C:6A:CD:4A:5E:4E:54:D7:8C:91:75:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc10a05f-d714-3901-9b46-a435e14e423d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.66.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:53:3d:a0:57:24:30:8c:07:87:60:27:53:b8:b1:ab:73:ed: fb:b0:97:cc:a7:37:58:20:f4:bb:60:15:1c:5d:e2:5c:b2:3c: e0:7d:92:c0:81:ce:c7:d0:44:16:2d:9c:60:8d:75:56:cd:36: 95:26:05:97:6c:56:9c:82:6d:fd:bb:c6:bd:a2:4a:67:f3:c5: 82:e3:80:1e:c9:e8:1b:a7:5a:a2:88:99:29:01:b6:59:d4:2e: 03:a1:b9:7d:a4:d4:82:37:e6:9e:3e:19:b6:32:b3:b1:17:96: cb:c8:62:e4:d4:d0:64:77:4e:22:6f:7a:24:02:98:9f:99:de: 71:d1:a3:64:45:f2:4d:c6:36:5b:37:70:c8:9b:13:ed:86:76: 21:30:01:09:66:0d:d0:91:c3:25:b2:81:f0:23:e6:6c:ae:9e: dd:2b:e1:4d:ca:4d:eb:78:24:79:df:29:80:81:fd:ee:d7:0e: 60:b8:62:78:44:9e:51:61:45:3c:8a:28:71:9f:ef:d3:02:76: 37:d2:20:89:56:b9:77:e4:f1:fc:22:f8:1f:b6:c9:15:a2:56: 46:43:33:2c:35:dc:13:03:a3:86:a3:55:51:bf:15:26:05:99: 0a:40:ea:66:93:21:82:e8:63:1c:af:0c:02:ca:f2:e6:ae:5f: e7:7c:a7:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLF6aH8kqVXl+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MGQ4MWRlZTAtYTkxYS00YzU2LThiZDAtZjQ5OTc3NzFhZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9kY49OBLXVAy2B0Tju25TnEg1/kMA4X3uET SUsSugQ5I9DEvFjqBwhzbX4vf0xC7lUM0acwtAt513nsmxO1SZxSIGlYG9FxRE0S fqI9BMm9cVPOH+Tx6cusD8h2kiVtkUQwPdEKR7AIRlMHsr+KgMaHCnfQxtsWP/Pb 9sghGGP/6u5eDAsD0io9WGVd34z+TO4yfIPRXQoUAsMB+5Q3nBC/GqBsO1YRXPjh hiknpOz3CwvtacNolu7jG/TTyolMShK/L4Ws9klmUkRzUa5WsusHpiNPurAQubVn fWIGaRvBtLLfZpdU4IRdBqiDGb1spk2wbFk2lkfZ1YV9EIrNsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6348GCXtJhjGrNSl5OVNeMkXX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2MxMGEwNWYtZDcxNC0z OTAxLTliNDYtYTQzNWUxNGU0MjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYEKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhTPaBXJDCMB4dgJ1O4satz7fuwl8ynN1gg9LtgFRxd4lyyPOB9ksCB zsfQRBYtnGCNdVbNNpUmBZdsVpyCbf27xr2iSmfzxYLjgB7J6BunWqKImSkBtlnU LgOhuX2k1II35p4+GbYys7EXlsvIYuTU0GR3TiJveiQCmJ+Z3nHRo2RF8k3GNls3 cMibE+2GdiEwAQlmDdCRwyWygfAj5myunt0r4U3KTet4JHnfKYCB/e7XDmC4YnhE nlFhRTyKKHGf79MCdjfSIIlWuXfk8fwi+B+2yRWiVkZDMyw13BMDo4ajVVG/FSYF mQpA6maTIYLoYxyvDALK8uauX+d8p4c= -----END CERTIFICATE-----Generated at Fri May 9 18:01:14 2025 by rpki-client