$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa File: 20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa (raw, json) Hash identifier: i2AO/51aYh5von1537vOmGICnOiNPa1Sf0OmukgA4lI= Subject key identifier: BE:0B:4A:B0:C6:D2:3C:15:82:99:D8:B0:7E:CA:AE:8F:E2:53:B7:C1 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F43285849E8B75D9B922BDA0DAAC9A370 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa Signing time: Mon 19 May 2025 21:30:49 +0000 ROA not before: Mon 19 May 2025 21:30:49 +0000 ROA not after: Sun 17 Aug 2025 21:30:49 +0000 asID: 20454 IP address blocks: 96.47.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e8:b7:5d:9b:92:2b:da:0d:aa:c9:a3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: May 19 21:30:49 2025 GMT Not After : Aug 17 21:30:49 2025 GMT Subject: CN=6b6d9daf-5466-4b87-b528-6683ef6cfd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:1a:a3:3a:59:9f:a5:fd:c0:44:32:65:e1: 96:51:5f:6b:c0:4c:a4:5a:11:4d:2d:38:bd:c8:01: 8f:be:91:d4:46:67:09:7e:ce:11:77:ac:75:ca:04: a2:ed:e6:b5:4a:cb:04:08:a0:59:5b:36:ce:85:1e: 25:77:15:e9:72:92:e4:b1:e1:b5:4d:d4:71:9c:da: b1:ba:f1:8a:ba:09:64:c9:71:59:ef:3b:f3:3d:79: 45:c5:2f:24:b8:b7:2b:98:3d:56:e4:7d:f2:f0:1d: ef:8e:1b:e6:c1:fd:fc:bb:7d:ec:46:1d:bf:07:91: 7c:4d:d5:6d:cf:01:f3:00:73:dd:97:da:b2:7f:00: 5a:20:34:fc:1e:37:d9:a6:c0:a3:d2:6d:ff:bd:3f: d9:30:da:db:12:36:d7:f3:d8:cb:b5:f0:bd:d0:85: b4:9b:a7:9d:5b:b9:e0:f5:b5:fe:79:d7:6c:3d:3c: 84:99:20:12:70:65:ec:18:f6:90:8b:72:8c:a0:a0: e9:54:d0:2d:6e:73:0e:e7:b5:cb:e9:04:dc:0c:4a: 1f:8c:ec:3d:1b:04:3e:e2:35:c5:c6:7b:2a:fe:5d: 8c:03:ff:38:e8:d5:a6:2f:dc:40:5f:c0:f0:c0:5a: d1:82:12:82:39:9a:84:a5:71:06:24:0e:51:59:f4: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0B:4A:B0:C6:D2:3C:15:82:99:D8:B0:7E:CA:AE:8F:E2:53:B7:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8c:3f:c0:b5:af:7d:8b:07:01:7f:09:1f:45:8a:39:1f:6d: 5e:82:a0:71:87:34:c0:d5:e2:cd:74:5b:c1:99:68:3c:16:a2: 5d:22:42:ba:23:df:2a:35:53:61:f1:54:d9:ec:5b:f0:8f:58: b8:85:22:cb:11:35:14:5b:08:16:f1:c5:09:3a:b3:5b:23:d2: 10:10:3f:a3:6d:08:31:df:36:68:17:f5:25:43:bf:f2:5e:88: 37:f8:ee:a7:ce:72:ed:66:c0:e0:2b:eb:4b:94:5a:a7:da:ad: a7:59:2c:37:e5:69:a1:7f:a7:45:fb:bb:67:18:c0:44:52:65: 3b:1e:63:1e:2c:90:78:22:1e:31:b1:c0:8e:83:cd:7a:12:ae: cc:ec:be:e3:12:23:64:ae:d6:78:f7:4c:3d:9a:00:30:37:8a: 5c:c4:8b:59:e3:07:7a:10:97:e1:df:7a:3d:4d:cb:81:04:42: 9f:27:43:16:59:c2:a0:46:d3:e5:77:99:4d:66:35:f1:e7:df: b8:42:41:6e:cd:13:e2:17:ea:15:27:3a:89:2b:2d:52:be:82: 8f:3b:b2:cd:64:91:29:90:01:f1:ee:bb:95:e6:dc:bb:50:c6: 0e:a6:1d:65:94:ac:e0:76:a8:33:15:5c:66:7e:7a:a8:6f:c5: 1a:de:4d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnot12bkivaDarJo3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI1MDUxOTIxMzA0OVoXDTI1MDgxNzIxMzA0OVowLzEtMCsGA1UEAxMk NmI2ZDlkYWYtNTQ2Ni00Yjg3LWI1MjgtNjY4M2VmNmNmZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyYaozpZn6X9wEQyZeGWUV9rwEykWhFNLTi9 yAGPvpHURmcJfs4Rd6x1ygSi7ea1SssECKBZWzbOhR4ldxXpcpLkseG1TdRxnNqx uvGKuglkyXFZ7zvzPXlFxS8kuLcrmD1W5H3y8B3vjhvmwf38u33sRh2/B5F8TdVt zwHzAHPdl9qyfwBaIDT8HjfZpsCj0m3/vT/ZMNrbEjbX89jLtfC90IW0m6edW7ng 9bX+eddsPTyEmSAScGXsGPaQi3KMoKDpVNAtbnMO57XL6QTcDEofjOw9GwQ+4jXF xnsq/l2MA/846NWmL9xAX8DwwFrRghKCOZqEpXEGJA5RWfRdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4LSrDG0jwVgpnYsH7Kro/iU7fBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvMjBkZDVjMjUtNWFiZi0z YWVkLWExM2EtYmU1YmU4N2IyYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiMP8C1r32LBwF/CR9FijkfbV6CoHGHNMDV4s10W8GZaDwWol0iQroj 3yo1U2HxVNnsW/CPWLiFIssRNRRbCBbxxQk6s1sj0hAQP6NtCDHfNmgX9SVDv/Je iDf47qfOcu1mwOAr60uUWqfaradZLDflaaF/p0X7u2cYwERSZTseYx4skHgiHjGx wI6DzXoSrszsvuMSI2Su1nj3TD2aADA3ilzEi1njB3oQl+Hfej1Ny4EEQp8nQxZZ wqBG0+V3mU1mNfHn37hCQW7NE+IX6hUnOokrLVK+go87ss1kkSmQAfHuu5Xm3LtQ xg6mHWWUrOB2qDMVXGZ+eqhvxRreTbQ= -----END CERTIFICATE-----Generated at Tue Jun 17 15:56:02 2025 by rpki-client