$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa File: bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa (raw, json) Hash identifier: Ny29G/E6oCsszlMuu1Tmq2BSn2o5hbFbjbIdbGCH7t8= Subject key identifier: 3B:E2:DE:23:23:A3:59:97:49:17:7A:AF:8B:78:E6:9A:59:11:55:83 Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584AB386217DF8B16133A1B66480 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 40232 IP address blocks: 204.48.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:21:7d:f8:b1:61:33:a1:b6:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=99bdf6c6-cf02-4dc4-8463-5f0a83cdc324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:41:54:64:5d:de:70:3d:49:5d:2a:5a:f1: d3:ab:59:e8:65:62:66:eb:5a:c3:00:46:ba:df:4b: a5:2a:b0:9f:c1:09:1e:73:72:72:56:01:95:bc:8d: ac:d7:f9:5d:b3:64:d0:8b:1b:50:45:ad:20:66:1d: 14:56:d1:4c:84:65:15:79:dd:f2:02:4a:9c:3b:56: 5f:78:cc:17:10:f5:73:56:16:e3:b9:c8:a4:89:ca: 92:6c:ed:8e:fe:c2:05:4e:ad:66:06:13:07:2c:ee: cc:47:dc:aa:43:51:e6:a4:5e:f8:9a:63:0f:a4:21: 3a:2b:ce:65:9f:0b:b6:d0:eb:ad:ba:40:ec:bd:08: 3d:d9:46:1e:0e:71:9f:53:47:ef:25:8a:ca:43:45: 27:26:2f:e5:0a:3b:58:3e:64:a9:46:94:bb:14:b7: bd:31:ff:25:75:c9:e7:34:22:c5:fb:bd:69:5c:21: 80:8f:de:46:31:79:13:70:50:f8:18:e3:17:94:ac: 9d:b0:e2:b4:2a:e2:be:f5:d1:c6:cf:a1:22:c0:aa: 27:76:e1:ef:2a:78:f7:67:9e:4b:41:53:39:34:74: 46:d1:34:32:94:4b:07:7c:39:d7:eb:14:0e:43:ff: ff:ee:1c:a7:27:8f:f1:f5:18:10:2f:ae:8e:10:f3: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:DE:23:23:A3:59:97:49:17:7A:AF:8B:78:E6:9A:59:11:55:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 204.48.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e5:8b:e1:0e:3d:b7:c5:13:85:bc:3b:fd:25:56:75:02:85: c0:8e:10:e0:9f:a9:a0:a2:2e:8f:62:fb:9b:2e:0d:18:5c:75: 02:bd:79:fd:0b:71:83:b7:87:36:5d:10:01:e3:c2:a7:91:0a: aa:10:56:43:33:1b:22:fa:1a:8f:57:93:d8:7f:e1:e2:e6:6d: 87:a6:38:b5:3a:18:99:87:84:39:a3:d2:09:0f:14:66:a4:e2: 6a:8a:c0:bf:17:e7:dc:88:30:35:85:bc:3f:0f:b5:53:09:11: 8e:e0:96:8a:00:f8:0a:30:62:df:ad:00:5e:4a:af:d4:57:63: 98:28:85:08:ab:34:fb:83:82:d1:0f:15:15:8a:f4:2d:2e:f6: 72:3c:26:89:8f:a5:2b:b6:23:84:0b:3d:a1:0d:d5:54:3b:d2: 00:a3:b1:0d:75:4f:42:18:30:a6:50:c1:ec:fd:e8:4f:0a:e9: f7:d7:fd:02:2b:58:9a:d2:28:6a:7d:80:2d:fc:08:67:9c:80: 22:27:8f:48:ed:c6:05:76:80:55:77:59:a8:0b:a3:c1:25:9b: cf:c8:cb:9e:87:0c:09:6c:48:fb:58:c8:7f:80:a2:48:a1:b4: 74:2b:28:a9:d7:cb:6f:54:d7:d2:79:13:a7:5b:85:5d:12:74: 6a:4b:d8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiF9+LFhM6G2ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk OTliZGY2YzYtY2YwMi00ZGM0LTg0NjMtNWYwYTgzY2RjMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpFBVGRd3nA9SV0qWvHTq1noZWJm61rDAEa6 30ulKrCfwQkec3JyVgGVvI2s1/lds2TQixtQRa0gZh0UVtFMhGUVed3yAkqcO1Zf eMwXEPVzVhbjucikicqSbO2O/sIFTq1mBhMHLO7MR9yqQ1HmpF74mmMPpCE6K85l nwu20OutukDsvQg92UYeDnGfU0fvJYrKQ0UnJi/lCjtYPmSpRpS7FLe9Mf8ldcnn NCLF+71pXCGAj95GMXkTcFD4GOMXlKydsOK0KuK+9dHGz6EiwKonduHvKnj3Z55L QVM5NHRG0TQylEsHfDnX6xQOQ///7hynJ4/x9RgQL66OEPPw8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvi3iMjo1mXSRd6r4t45ppZEVWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvYmM1ZTg0Y2YtNzA1NC0z M2RlLWE2ZWUtOTBjMzMzMThkOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzDBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTli+EOPbfFE4W8O/0lVnUChcCOEOCfqaCiLo9i+5suDRhcdQK9ef0L cYO3hzZdEAHjwqeRCqoQVkMzGyL6Go9Xk9h/4eLmbYemOLU6GJmHhDmj0gkPFGak 4mqKwL8X59yIMDWFvD8PtVMJEY7glooA+AowYt+tAF5Kr9RXY5gohQirNPuDgtEP FRWK9C0u9nI8JomPpSu2I4QLPaEN1VQ70gCjsQ11T0IYMKZQwez96E8K6ffX/QIr WJrSKGp9gC38CGecgCInj0jtxgV2gFV3WagLo8Elm8/Iy56HDAlsSPtYyH+Aokih tHQrKKnXy29U19J5E6dbhV0SdGpL2Kc= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:00 2025 by rpki-client