$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa File: abf67299-9e87-34a9-9b48-9475fd549597.roa (raw, json) Hash identifier: PtuBmE/jLJSNxdMdm3JfwyBc0ZFR36ltk++9cj7j7d4= Subject key identifier: 94:1F:66:F0:BD:8D:82:1B:BC:0F:D5:4D:4B:BA:87:2B:24:92:2E:C5 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F43285849B9A9FF2B5FF7EF9E3D25E780 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 398143 IP address blocks: 96.46.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:ff:2b:5f:f7:ef:9e:3d:25:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=8769a732-7449-429d-9f69-54c7b47fdce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:54:fa:98:5b:b6:22:4c:1f:ec:b7:5a:90: 4d:76:48:0e:92:1b:d1:f6:82:70:46:32:5a:44:04: 97:8c:34:00:b3:b3:58:49:b5:85:e7:b6:0d:47:27: dc:29:b3:3f:57:68:6b:bf:86:2b:64:0f:6e:b8:75: 64:55:09:10:96:ae:04:58:e1:85:8a:f6:58:4e:97: 93:1a:a8:13:12:59:47:4b:de:1c:50:87:3e:da:f3: 03:49:4d:73:c9:a9:50:d9:3f:6b:a5:e8:5c:15:7b: e2:86:e0:68:2d:b5:52:28:07:23:25:1e:ed:b4:b4: 68:06:d8:4d:16:5b:0b:f7:fd:a6:b9:01:14:d6:55: bd:f7:02:c4:c6:c8:ac:c3:a9:03:6a:c8:45:08:b6: f9:da:b8:62:70:b8:20:9d:d0:be:ae:ed:21:40:71: 82:1f:2f:6e:c2:7e:41:8b:e5:6c:d6:c3:f0:90:69: 79:7b:96:39:b2:3e:2e:2a:b5:03:9d:77:43:c9:25: 2c:92:04:72:f4:8a:c3:64:42:56:6d:ad:1a:e3:fb: 33:13:92:8a:3d:65:d2:af:50:b7:ba:5b:49:e7:c7: 27:d5:5f:7b:43:d7:1c:79:4e:c1:a0:52:1d:e1:3f: 65:f6:3c:64:92:ec:2c:58:24:aa:e6:f8:48:d9:13: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:66:F0:BD:8D:82:1B:BC:0F:D5:4D:4B:BA:87:2B:24:92:2E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 96.46.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:94:6c:c9:c2:56:fb:94:55:b5:58:82:f1:6d:20:66:bb:eb: 2c:47:db:99:63:7f:61:fa:ac:5b:06:16:99:ce:ba:fd:b4:62: 4a:10:50:ce:cd:62:04:21:63:96:44:b4:4e:a2:24:45:fd:f2: 60:72:3f:9d:49:58:f0:08:af:50:c4:e1:6f:8f:07:0b:61:d6: 99:6b:6e:fc:75:08:07:c0:d5:da:44:ee:3f:cd:1f:d5:67:ea: a3:2a:c1:40:27:82:88:12:1f:28:d4:5b:7a:eb:14:21:6b:31: 8b:ee:fb:e3:86:18:1e:ea:56:38:81:bc:40:f8:9e:c4:73:3b: 7c:71:c4:92:26:6c:ca:59:12:a6:19:fa:a9:85:e1:cb:83:53: f0:8d:73:52:c3:43:27:5b:5a:71:9d:e3:68:89:6b:f2:1e:a5: 05:db:2a:69:1e:ed:fb:7b:8e:e7:29:88:98:f8:20:86:d9:3d: 73:4c:a7:50:c4:ba:39:65:56:73:c7:72:22:af:fd:04:9d:e2: 9d:49:4d:d8:96:19:a8:9e:3b:54:f4:cb:26:93:de:38:08:cf: 14:f1:25:cf:9a:69:63:4e:7e:57:31:62:e3:3d:e1:00:4d:be: 5b:32:b2:e8:2d:fd:d2:9e:18:ba:a1:95:62:9e:13:96:7a:f7: e5:ab:df:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qf8rX/fvnj0l54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk ODc2OWE3MzItNzQ0OS00MjlkLTlmNjktNTRjN2I0N2ZkY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2BU+phbtiJMH+y3WpBNdkgOkhvR9oJwRjJa RASXjDQAs7NYSbWF57YNRyfcKbM/V2hrv4YrZA9uuHVkVQkQlq4EWOGFivZYTpeT GqgTEllHS94cUIc+2vMDSU1zyalQ2T9rpehcFXvihuBoLbVSKAcjJR7ttLRoBthN FlsL9/2muQEU1lW99wLExsisw6kDashFCLb52rhicLggndC+ru0hQHGCHy9uwn5B i+Vs1sPwkGl5e5Y5sj4uKrUDnXdDySUskgRy9IrDZEJWba0a4/szE5KKPWXSr1C3 ultJ58cn1V97Q9cceU7BoFId4T9l9jxkkuwsWCSq5vhI2ROc0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQfZvC9jYIbvA/VTUu6hyskki7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvYWJmNjcyOTktOWU4Ny0z NGE5LTliNDgtOTQ3NWZkNTQ5NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2UbMnCVvuUVbVYgvFtIGa76yxH25ljf2H6rFsGFpnOuv20YkoQUM7N YgQhY5ZEtE6iJEX98mByP51JWPAIr1DE4W+PBwth1plrbvx1CAfA1dpE7j/NH9Vn 6qMqwUAngogSHyjUW3rrFCFrMYvu++OGGB7qVjiBvED4nsRzO3xxxJImbMpZEqYZ +qmF4cuDU/CNc1LDQydbWnGd42iJa/IepQXbKmke7ft7jucpiJj4IIbZPXNMp1DE ujllVnPHciKv/QSd4p1JTdiWGaieO1T0yyaT3jgIzxTxJc+aaWNOflcxYuM94QBN vlsysugt/dKeGLqhlWKeE5Z69+Wr38I= -----END CERTIFICATE-----Generated at Sun May 11 22:22:49 2025 by rpki-client