$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7dc5480-16a7-31a9-a1a9-13b2be0da263.roa File: f7dc5480-16a7-31a9-a1a9-13b2be0da263.roa (raw, json) Hash identifier: qoyhHKYrkKng6TtTmMiegZ8E6PLPCsjYfCGtp2GgiBc= Subject key identifier: 10:D9:CD:02:CF:15:60:28:75:05:C2:63:57:D6:2B:13:05:CD:BA:95 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E962AE3F5262FF01D617750 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7dc5480-16a7-31a9-a1a9-13b2be0da263.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 96.58.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:2a:e3:f5:26:2f:f0:1d:61:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=131d7314-4b09-46db-a183-513bd0a524c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0f:02:76:fe:45:2c:86:0d:ac:9b:ea:93:ed: 4a:e1:87:02:00:6f:5d:53:cd:31:a8:85:e5:1c:55: 14:a8:98:f0:21:c6:82:96:c0:57:64:5f:d2:be:87: e9:27:27:c5:13:0d:0d:24:0c:b4:29:9d:5a:59:c2: 28:63:f6:8a:9b:68:e4:5d:d5:bb:7a:0a:b5:73:98: b5:7c:5d:e3:a6:de:92:bd:46:36:6e:f1:c3:cd:24: 9f:ff:c1:2e:69:67:82:9e:4b:19:df:74:e8:dc:83: 64:2f:0c:25:ea:a2:a1:c1:69:c8:5d:a0:66:a8:ee: bf:37:f7:ff:73:30:9b:33:a7:d3:21:7b:09:f6:35: 8f:ea:38:ca:49:93:c4:9d:2e:d6:14:12:d8:1d:52: 33:eb:6a:4a:2b:8f:b7:de:23:ee:28:b6:40:5a:22: 53:91:76:46:b7:c2:23:cd:8b:5d:1e:66:f2:f6:33: 3d:03:43:e1:68:c6:a6:c1:78:ab:43:f2:71:a7:1c: 24:4f:4e:07:23:d2:3e:d8:bb:9f:2d:37:2c:5e:c2: 13:eb:8f:8a:f0:15:39:09:ac:67:71:21:a5:c2:85: d5:42:fa:84:dc:51:cf:e8:d9:51:39:06:ee:90:e6: 7c:a6:65:97:f3:dc:34:35:db:44:f8:87:7e:74:95: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D9:CD:02:CF:15:60:28:75:05:C2:63:57:D6:2B:13:05:CD:BA:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7dc5480-16a7-31a9-a1a9-13b2be0da263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 96.58.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:87:1e:69:f2:f1:30:7d:41:d1:fe:2c:8b:82:f4:a7:27:a2: 94:17:07:07:31:19:4c:7c:65:a1:e3:83:e5:37:21:96:82:65: 4c:cf:2e:dc:b5:e4:03:ac:0b:be:3a:04:b5:75:a3:09:1c:94: 27:3f:ae:70:d5:40:bc:1d:fc:6f:fa:4d:17:24:ff:d2:72:c1: a2:a9:83:4b:51:74:95:2a:a3:07:dd:73:d4:6f:3b:ea:59:3d: d0:f6:d9:98:73:cf:e3:12:ac:d3:11:da:21:54:94:92:50:da: e9:2a:09:75:cf:6f:ac:67:63:71:c1:1c:dc:38:1d:b1:ae:54: 6a:70:7c:35:1d:ed:b4:17:8d:12:fe:bc:fc:40:d4:22:79:3e: 09:b6:2c:e6:6b:e3:ba:05:e0:d8:0d:23:d9:73:66:5b:c6:6b: 8d:b0:8b:38:e5:8f:5c:34:37:e9:2d:b0:de:cb:51:cc:33:0b: f5:f9:bc:de:4f:b1:3d:15:19:84:95:70:c4:e8:7d:ac:57:69: 3d:83:08:87:ce:86:2d:39:86:f1:18:2d:1c:b2:57:02:59:f7: d9:2f:c4:d5:f5:ae:a4:09:2f:67:69:cb:bd:10:2d:e3:48:12: 5c:de:16:e6:55:cb:2e:5c:b6:9e:ee:c3:35:22:28:4b:27:75: 00:d5:c4:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelirj9SYv8B1hd1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTMxZDczMTQtNGIwOS00NmRiLWExODMtNTEzYmQwYTUyNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ8Cdv5FLIYNrJvqk+1K4YcCAG9dU80xqIXl HFUUqJjwIcaClsBXZF/SvofpJyfFEw0NJAy0KZ1aWcIoY/aKm2jkXdW7egq1c5i1 fF3jpt6SvUY2bvHDzSSf/8EuaWeCnksZ33To3INkLwwl6qKhwWnIXaBmqO6/N/f/ czCbM6fTIXsJ9jWP6jjKSZPEnS7WFBLYHVIz62pKK4+33iPuKLZAWiJTkXZGt8Ij zYtdHmby9jM9A0PhaMamwXirQ/JxpxwkT04HI9I+2LufLTcsXsIT64+K8BU5Caxn cSGlwoXVQvqE3FHP6NlROQbukOZ8pmWX89w0NdtE+Id+dJXzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDZzQLPFWAodQXCY1fWKxMFzbqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjdkYzU0ODAtMTZhNy0z MWE5LWExYTktMTNiMmJlMGRhMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYDrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmHHmny8TB9QdH+LIuC9KcnopQXBwcxGUx8ZaHjg+U3IZaCZUzPLty1 5AOsC746BLV1owkclCc/rnDVQLwd/G/6TRck/9JywaKpg0tRdJUqowfdc9RvO+pZ PdD22Zhzz+MSrNMR2iFUlJJQ2ukqCXXPb6xnY3HBHNw4HbGuVGpwfDUd7bQXjRL+ vPxA1CJ5Pgm2LOZr47oF4NgNI9lzZlvGa42wizjlj1w0N+ktsN7LUcwzC/X5vN5P sT0VGYSVcMTofaxXaT2DCIfOhi05hvEYLRyyVwJZ99kvxNX1rqQJL2dpy70QLeNI ElzeFuZVyy5ctp7uwzUiKEsndQDVxA0= -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:00 2025 by rpki-client