$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa File: bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa (raw, json) Hash identifier: O+5vrkj70JxAVWxu+KD3lhBkR6hpQAuveY+P6BuHYK4= Subject key identifier: 2B:89:57:D4:1B:04:F1:62:9C:50:AB:EA:78:C9:91:30:84:13:F6:F9 Certificate issuer: /CN=d6ea8a2a-963c-4cb3-be4b-30ef91b52807 Certificate serial: 010D0C9F4328584AADF126631E86DB04AE4D0D00 Authority key identifier: 6A:78:91:DB:FF:D4:D8:E2:17:FD:7E:82:29:22:78:75:F3:2E:78:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13765 IP address blocks: 96.46.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:26:63:1e:86:db:04:ae:4d:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6ea8a2a-963c-4cb3-be4b-30ef91b52807 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=934440ac-7dab-41e9-83de-497b229a56df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:bf:57:f1:df:d8:1c:d7:df:22:52:e3:a8: fc:89:4b:b2:a9:de:c1:a6:28:40:54:bf:b9:4f:9a: 78:0d:cd:80:2d:c2:43:24:5b:56:49:71:5e:28:19: 6d:1e:8d:fb:3b:bc:1f:2f:67:ca:2c:b0:e9:21:e7: 3c:6c:af:c6:2d:b6:b6:57:70:bd:08:56:c3:49:7b: 64:05:75:3d:94:ad:8c:39:b7:ce:3c:18:fe:93:4b: 87:8b:e6:1c:87:d9:68:3b:67:1e:e9:b5:3a:22:c7: 03:fb:ca:4b:9f:16:4c:1a:8d:e4:c2:42:94:fb:6e: 34:25:92:7b:fa:09:02:cf:b7:87:8e:c2:e3:96:fa: bd:ba:cc:a7:5d:00:34:36:88:3a:ba:b6:0e:64:04: af:1f:2b:98:d8:cc:1d:6a:f6:29:a1:a3:92:c5:70: 05:f4:88:67:20:b8:e7:9c:b2:05:d7:ac:0b:8e:5d: 6b:d1:27:55:fb:b9:66:f5:b8:e5:9e:07:56:09:f3: 7e:39:80:68:54:7d:d9:02:d9:a9:b0:ef:13:7f:63: 45:71:cc:be:4a:da:18:a6:b0:d6:08:73:53:3e:43: 4c:93:8a:81:c7:71:28:05:3e:9a:7a:7e:63:f2:1b: 5b:6d:6d:0a:11:35:9d:ad:cb:37:c2:73:e9:60:b9: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:89:57:D4:1B:04:F1:62:9C:50:AB:EA:78:C9:91:30:84:13:F6:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/bf7217dd-4d3e-3190-8cd7-28d3a00b6493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.crl X509v3 Authority Key Identifier: keyid:6A:78:91:DB:FF:D4:D8:E2:17:FD:7E:82:29:22:78:75:F3:2E:78:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d6ea8a2a-963c-4cb3-be4b-30ef91b52807.cer sbgp-ipAddrBlock: critical IPv4: 96.46.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4d:dc:5b:4f:f1:60:b0:56:2e:7d:e8:3c:e2:3d:55:cc:8b: 73:90:f0:e4:2b:97:32:26:80:45:f8:f6:f7:44:b6:44:fe:5b: 20:ad:5e:ff:6c:dc:8e:fd:33:90:03:ac:ca:87:2b:22:b7:78: 6b:88:2d:29:4a:e8:f0:61:e5:b0:12:0b:32:ef:c4:5e:ce:ac: 66:79:9f:4b:af:c6:24:e7:7d:b0:fb:39:56:d7:51:2f:01:d0: 1a:56:9e:3d:7e:81:9d:54:8b:ea:c8:97:59:98:5e:31:53:16: cd:8e:95:a9:da:0b:e6:33:65:32:37:aa:4c:6a:19:5b:60:a8: 4c:2f:13:66:96:e9:43:fd:50:6a:27:18:a0:c0:b9:c9:7c:cf: a7:60:a6:1d:3f:a6:55:30:60:7b:3d:a7:c7:1e:8d:18:2e:84: a0:05:62:24:82:af:dd:51:cd:d4:ec:c2:46:a3:78:4f:0a:c6: b0:e5:3e:b8:c4:0c:5b:b7:0d:81:95:82:79:a2:05:29:0f:fd: 87:83:e3:5d:f2:bd:eb:f2:5c:26:c7:8a:f8:2a:b1:dc:ec:9c: 21:d4:71:19:05:8e:80:19:6c:c6:3f:82:04:d8:c0:05:2f:b6: b8:56:fc:3b:da:be:18:fd:53:14:54:d6:57:6c:dd:e5:27:b3: a4:ca:e0:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SZjHobbBK5NDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZlYThhMmEtOTYzYy00Y2IzLWJlNGItMzBlZjkxYjUy ODA3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk OTM0NDQwYWMtN2RhYi00MWU5LTgzZGUtNDk3YjIyOWE1NmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7u/V/Hf2BzX3yJS46j8iUuyqd7BpihAVL+5 T5p4Dc2ALcJDJFtWSXFeKBltHo37O7wfL2fKLLDpIec8bK/GLba2V3C9CFbDSXtk BXU9lK2MObfOPBj+k0uHi+Ych9loO2ce6bU6IscD+8pLnxZMGo3kwkKU+240JZJ7 +gkCz7eHjsLjlvq9usynXQA0Nog6urYOZASvHyuY2MwdavYpoaOSxXAF9IhnILjn nLIF16wLjl1r0SdV+7lm9bjlngdWCfN+OYBoVH3ZAtmpsO8Tf2NFccy+StoYprDW CHNTPkNMk4qBx3EoBT6aen5j8htbbW0KETWdrcs3wnPpYLlAtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuJV9QbBPFinFCr6njJkTCEE/b5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNmVh OGEyYS05NjNjLTRjYjMtYmU0Yi0zMGVmOTFiNTI4MDcvYmY3MjE3ZGQtNGQzZS0z MTkwLThjZDctMjhkM2EwMGI2NDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDZlYThhMmEtOTYzYy00Y2IzLWJl NGItMzBlZjkxYjUyODA3L2Q2ZWE4YTJhLTk2M2MtNGNiMy1iZTRiLTMwZWY5MWI1 MjgwNy5jcmwwHwYDVR0jBBgwFoAUaniR2//U2OIX/X6CKSJ4dfMueGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kNmVhOGEyYS05NjNjLTRjYjMtYmU0Yi0zMGVm OTFiNTI4MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYC5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtN3FtP8WCwVi596DziPVXMi3OQ8OQrlzImgEX49vdEtkT+WyCtXv9s 3I79M5ADrMqHKyK3eGuILSlK6PBh5bASCzLvxF7OrGZ5n0uvxiTnfbD7OVbXUS8B 0BpWnj1+gZ1Ui+rIl1mYXjFTFs2OlanaC+YzZTI3qkxqGVtgqEwvE2aW6UP9UGon GKDAucl8z6dgph0/plUwYHs9p8cejRguhKAFYiSCr91RzdTswkajeE8KxrDlPrjE DFu3DYGVgnmiBSkP/YeD413yvevyXCbHivgqsdzsnCHUcRkFjoAZbMY/ggTYwAUv trhW/Dvavhj9UxRU1lds3eUns6TK4OQ= -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:31 2025 by rpki-client