$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/402a2ade-d9e6-30e1-bc13-d2932720005d.roa File: 402a2ade-d9e6-30e1-bc13-d2932720005d.roa (raw, json) Hash identifier: 51lGgiMVjZKVp1PRurR8tFnmBUGZzCrvug2AXuiHb1A= Subject key identifier: E1:A9:9F:AB:08:49:C3:CF:45:EC:82:E1:95:48:F5:ED:56:53:33:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E2254AD6E1BDC0DDB83DF900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/402a2ade-d9e6-30e1-bc13-d2932720005d.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 16625 IP address blocks: 96.7.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:4a:d6:e1:bd:c0:dd:b8:3d:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=ae3196cf-ab89-44bc-a95d-c7e4c4b742c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:c6:20:a0:ef:ee:fc:c6:0a:04:4c:1f:81: 0d:53:4f:99:2c:21:93:f8:a3:94:4c:ab:79:46:7b: 96:c9:10:18:ec:fb:03:14:df:f2:8d:07:6e:2d:2d: de:94:c2:15:9d:6a:31:a9:89:b0:0c:d2:75:95:ce: d2:e5:87:4b:6e:b3:9e:0b:09:1d:75:1a:0e:b6:ff: 31:97:01:36:ab:df:e5:90:1b:df:00:c2:9d:1b:37: f3:4a:0a:f5:df:e1:ee:72:b0:f0:0a:f8:56:37:d2: 14:dc:b4:64:29:9c:31:0f:79:b4:09:55:81:cd:f6: 1d:ad:6c:a1:59:b3:d6:9d:f2:e9:da:19:7c:bb:a8: e7:bc:2b:c8:20:bb:8b:d5:57:34:4a:e7:04:06:d1: f7:a1:f6:8c:83:9d:5b:33:05:73:0c:59:f9:61:82: d4:1b:c6:d8:3f:b9:58:df:4d:43:b9:76:03:78:16: f5:fb:a0:fd:d0:df:59:fe:b0:e8:d6:12:04:82:ec: 84:78:a4:69:1e:12:08:65:ef:07:cd:56:92:b9:a2: 88:c2:3f:b2:6b:ea:ed:4b:8a:39:54:29:a9:bb:5c: d8:34:3e:0d:19:e2:06:65:8f:1e:8c:5b:ea:58:e2: 90:d4:a5:aa:dc:2c:77:19:81:28:49:4d:65:34:6d: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:9F:AB:08:49:C3:CF:45:EC:82:E1:95:48:F5:ED:56:53:33:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/402a2ade-d9e6-30e1-bc13-d2932720005d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2b:a2:b4:a5:c2:e3:70:0f:0d:1d:fe:09:6a:6b:c3:d9:a4: 5a:1d:b4:ce:fd:51:a1:93:da:bd:24:57:54:05:1e:b9:d3:49: cc:b5:74:6b:0f:c5:d0:62:86:16:26:1e:52:b9:a8:cc:74:27: be:74:c1:94:46:3b:23:b3:1c:f0:84:6d:b9:23:92:e6:41:ae: 5d:e1:24:df:95:31:e8:0f:64:0c:73:01:cd:ab:d2:9b:34:54: d6:84:67:c1:c1:d8:f9:1d:41:a7:98:ae:81:df:03:de:36:77: 5c:e6:3a:c9:80:98:c0:55:f9:ad:a2:80:01:ad:dc:c1:a7:45: b7:a3:f9:60:5c:a5:3d:80:8d:4d:c1:17:c2:2a:59:36:4d:82: c2:2e:2e:bc:87:a5:ef:6e:c3:9d:86:20:88:f4:8a:6d:ce:69: 9a:16:9b:b7:e1:e7:e5:de:1e:40:c5:b5:25:54:ea:31:2e:94: e6:87:73:f2:e3:20:d2:12:79:8f:36:6c:25:6c:68:95:0e:ae: 85:22:1f:40:85:c1:ef:75:fd:37:57:61:da:31:b2:c2:27:b6: 1b:83:52:5f:c1:eb:fd:3d:ef:ff:62:cb:0b:d6:fc:a1:be:b0: 70:5a:8d:38:ac:76:ee:67:0d:73:86:09:c0:2b:35:98:1e:a7: c7:3b:d3:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUrW4b3A3bg9+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YWUzMTk2Y2YtYWI4OS00NGJjLWE5NWQtYzdlNGM0Yjc0MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbLGIKDv7vzGCgRMH4ENU0+ZLCGT+KOUTKt5 RnuWyRAY7PsDFN/yjQduLS3elMIVnWoxqYmwDNJ1lc7S5YdLbrOeCwkddRoOtv8x lwE2q9/lkBvfAMKdGzfzSgr13+HucrDwCvhWN9IU3LRkKZwxD3m0CVWBzfYdrWyh WbPWnfLp2hl8u6jnvCvIILuL1Vc0SucEBtH3ofaMg51bMwVzDFn5YYLUG8bYP7lY 301DuXYDeBb1+6D90N9Z/rDo1hIEguyEeKRpHhIIZe8HzVaSuaKIwj+ya+rtS4o5 VCmpu1zYND4NGeIGZY8ejFvqWOKQ1KWq3Cx3GYEoSU1lNG3XiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGpn6sIScPPReyC4ZVI9e1WUzOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDAyYTJhZGUtZDllNi0z MGUxLWJjMTMtZDI5MzI3MjAwMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJArorSlwuNwDw0d/glqa8PZpFodtM79UaGT2r0kV1QFHrnTScy1dGsP xdBihhYmHlK5qMx0J750wZRGOyOzHPCEbbkjkuZBrl3hJN+VMegPZAxzAc2r0ps0 VNaEZ8HB2PkdQaeYroHfA942d1zmOsmAmMBV+a2igAGt3MGnRbej+WBcpT2AjU3B F8IqWTZNgsIuLryHpe9uw52GIIj0im3OaZoWm7fh5+XeHkDFtSVU6jEulOaHc/Lj INISeY82bCVsaJUOroUiH0CFwe91/TdXYdoxssInthuDUl/B6/097/9iywvW/KG+ sHBajTisdu5nDXOGCcArNZgep8c701o= -----END CERTIFICATE-----Generated at Sun Jun 15 18:53:17 2025 by rpki-client