$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa File: 33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa (raw, json) Hash identifier: G2GC+sep3LKQta9P0I91rNBL1eg6GacyOj4AeeNRHbY= Subject key identifier: 99:DB:FE:8F:5D:33:82:E7:51:F2:B8:A6:93:5E:67:21:BE:A8:45:21 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849393E957866B11DBD21E2D780 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 49981 IP address blocks: 96.43.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:95:78:66:b1:1d:bd:21:e2:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=4e6d5b2c-50c8-4025-bada-a6bbe92b16e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c5:65:65:97:c7:2c:00:1b:2f:23:32:94:f1: be:b9:10:ec:45:2e:5a:d9:4f:6a:7c:10:81:17:8b: 2e:26:9e:f6:65:29:7a:92:3c:9a:e7:9d:d3:a4:8c: d2:2f:59:3c:a3:30:69:3f:cd:15:4e:3a:5a:d4:bc: 42:cd:0c:fc:9d:79:d3:7f:dc:b5:fa:77:e3:97:f2: 7f:d6:8b:3b:6b:92:d3:33:da:35:2e:97:50:1f:a5: f9:60:24:72:8f:89:7d:f0:69:3a:a6:e3:23:c6:a6: 50:8f:6a:71:e6:05:a3:16:c8:aa:7b:ab:e5:a5:9f: a6:1f:64:87:ad:f8:ce:47:bd:ab:18:66:ed:77:ed: c7:b1:84:85:df:b2:60:e7:4c:08:b8:6a:e5:2f:64: aa:cb:39:7e:27:e6:09:09:e9:ac:06:f3:dc:3b:a6: ac:f2:b8:bc:48:a3:94:47:db:01:7c:01:e4:fa:f9: b6:a5:4d:c7:82:ff:24:65:b5:ad:3e:fc:94:7f:cf: b3:18:ca:eb:dc:da:db:28:36:5b:cf:11:52:94:60: f5:ee:d8:f5:f2:1a:a0:ea:4f:ab:58:07:bc:cd:f3: a0:b4:06:e9:c2:e0:26:a6:5b:57:08:5b:ff:75:57: 80:31:6b:2b:7f:8a:56:e4:7a:7d:a7:27:01:f3:f9: 00:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:FE:8F:5D:33:82:E7:51:F2:B8:A6:93:5E:67:21:BE:A8:45:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/33db2d95-1055-34bc-bf74-6b80ea9b6b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3e:0d:b7:0e:df:2b:35:9a:81:8f:1e:64:ea:30:ac:68:69: 82:4b:2d:d5:c7:b7:83:de:99:d6:3a:6b:1a:fc:f9:fc:a5:c7: b1:d8:cb:2c:4a:3a:69:d3:8a:f4:77:7c:36:6a:2e:b9:d3:30: 9c:0c:6f:08:27:3d:e1:92:3b:7e:79:f9:72:4c:ab:66:60:88: 55:f7:d4:f7:4a:cb:f9:b8:e9:02:4a:16:5f:cb:f8:89:2c:e6: 88:44:69:77:5d:36:85:28:6e:17:28:70:70:c2:7a:74:1d:30: 78:b6:8e:18:c1:b9:8a:e3:8e:ea:68:da:fc:67:bf:fb:c7:78: 38:fd:3a:9c:20:da:c1:21:94:0c:e7:4b:e9:8d:21:a6:9e:ba: e8:43:32:8a:de:05:e8:5a:7a:3d:b7:29:33:99:80:e2:72:64: 19:26:fc:ee:2d:db:18:ed:cc:1f:af:1e:66:d0:93:8a:01:eb: 0d:f4:60:35:ea:d1:03:61:dc:e0:f4:fd:db:99:a2:76:b5:d6: af:e8:14:97:93:f4:2c:db:95:c6:47:7d:80:04:d9:42:f8:89: 7a:ce:8f:ec:5e:f1:d4:b6:63:64:b9:0a:f1:28:53:59:26:f9: bc:95:f4:25:4d:0d:41:e3:fb:c4:24:5c:f4:f9:6a:91:4a:1d: 9f:be:52:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PpV4ZrEdvSHi14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NGU2ZDViMmMtNTBjOC00MDI1LWJhZGEtYTZiYmU5MmIxNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsVlZZfHLAAbLyMylPG+uRDsRS5a2U9qfBCB F4suJp72ZSl6kjya553TpIzSL1k8ozBpP80VTjpa1LxCzQz8nXnTf9y1+nfjl/J/ 1os7a5LTM9o1LpdQH6X5YCRyj4l98Gk6puMjxqZQj2px5gWjFsiqe6vlpZ+mH2SH rfjOR72rGGbtd+3HsYSF37Jg50wIuGrlL2Sqyzl+J+YJCemsBvPcO6as8ri8SKOU R9sBfAHk+vm2pU3Hgv8kZbWtPvyUf8+zGMrr3NrbKDZbzxFSlGD17tj18hqg6k+r WAe8zfOgtAbpwuAmpltXCFv/dVeAMWsrf4pW5Hp9pycB8/kAKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnb/o9dM4LnUfK4ppNeZyG+qEUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzNkYjJkOTUtMTA1NS0z NGJjLWJmNzQtNmI4MGVhOWI2YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ+DbcO3ys1moGPHmTqMKxoaYJLLdXHt4PemdY6axr8+fylx7HYyyxK OmnTivR3fDZqLrnTMJwMbwgnPeGSO355+XJMq2ZgiFX31PdKy/m46QJKFl/L+Iks 5ohEaXddNoUobhcocHDCenQdMHi2jhjBuYrjjupo2vxnv/vHeDj9Opwg2sEhlAzn S+mNIaaeuuhDMoreBehaej23KTOZgOJyZBkm/O4t2xjtzB+vHmbQk4oB6w30YDXq 0QNh3OD0/duZona11q/oFJeT9CzblcZHfYAE2UL4iXrOj+xe8dS2Y2S5CvEoU1km +byV9CVNDUHj+8QkXPT5apFKHZ++Utw= -----END CERTIFICATE-----Generated at Sat May 10 07:18:13 2025 by rpki-client