$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa File: 0e4b0048-b197-364d-82a5-3127b9f92159.roa (raw, json) Hash identifier: 6BcFowDFxeKQfx8qq3Nwvn6BKuzmzpD8m4PpwBEtSZQ= Subject key identifier: E5:63:7E:4A:EB:A4:D5:CA:4C:EB:7E:4C:98:07:9E:75:E6:8A:E2:EA Certificate issuer: /CN=9e36a683-142b-41cd-932c-e115603de431 Certificate serial: 010D0C9F4328584AA42B7FE5C4EC8B40DD8E5C80 Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 209.163.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7f:e5:c4:ec:8b:40:dd:8e:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e36a683-142b-41cd-932c-e115603de431 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=65442bfd-607f-4d22-bb92-0b2d576198d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:ab:bf:99:4b:11:6b:36:7a:1d:c0:f4:6f: 2e:9f:6b:2a:21:0f:e6:e1:53:f2:aa:55:55:d4:75: e3:5d:1b:7e:ce:02:17:b3:76:49:59:aa:c4:5d:df: 0d:a3:79:ef:fa:ec:a8:d3:1d:bf:34:fa:b9:9a:80: 19:bd:ee:80:c2:55:88:51:11:12:4b:09:2e:96:57: 3e:4a:91:30:f0:69:66:dc:ba:04:a3:94:9b:84:ca: c2:9c:b8:15:71:84:ad:3b:0a:15:57:fb:66:93:88: be:8f:2c:9b:a3:9b:86:32:22:14:bd:ce:70:5b:e3: cc:2a:85:93:5b:66:25:5c:69:d5:b6:81:2f:37:1c: 6a:00:1e:64:e0:f3:72:f0:0e:72:6e:a3:9b:d4:ac: 3c:3f:f4:5b:78:03:e5:67:2a:28:0b:2e:d8:36:e4: e3:80:d7:a0:19:24:56:42:98:2e:b0:5d:1b:90:76: 9a:f6:33:8f:28:64:c8:08:af:86:e0:86:a9:a1:fd: 8c:de:5c:5e:c6:ee:63:a0:ba:d8:31:d2:e5:67:08: 50:c4:8b:a1:f1:41:da:f7:99:f0:2b:e3:f0:30:3c: 1c:2b:7a:24:ff:61:66:78:c4:a8:48:99:36:de:92: a1:ab:92:ee:43:58:1b:25:25:5d:13:6a:b2:7f:7f: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:63:7E:4A:EB:A4:D5:CA:4C:EB:7E:4C:98:07:9E:75:E6:8A:E2:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/0e4b0048-b197-364d-82a5-3127b9f92159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl X509v3 Authority Key Identifier: keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer sbgp-ipAddrBlock: critical IPv4: 209.163.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b6:2f:b5:5e:42:3e:a0:64:c8:fa:ce:09:af:57:ce:bb:3a: 76:7e:a1:ce:81:14:94:ce:a9:10:d3:d2:65:cc:75:14:31:15: 84:2d:d7:3f:f9:a9:18:94:fb:16:70:06:23:26:36:f3:84:f4: f5:cf:88:41:a2:c6:fe:08:7d:66:7b:23:87:c5:84:50:f1:38: a5:5a:76:eb:5f:10:d2:00:5f:05:e4:08:7d:4b:df:3e:5c:59: 71:83:f2:0a:67:16:dc:e8:1a:b2:74:62:20:31:24:43:ba:73: 99:7e:72:4f:26:26:55:68:30:4d:2a:9b:9a:f8:a1:91:d7:d8: d6:56:4c:8f:a4:e3:04:6f:90:a9:87:e8:cb:28:35:3b:72:c0: 0d:e2:18:d2:d5:d5:36:bb:05:3e:9a:dd:54:92:ba:08:ef:39: c4:7e:88:ab:54:18:9d:9c:85:60:ff:6e:b0:af:c9:91:28:13: 66:11:09:fc:37:bc:4c:08:e1:1e:4d:49:ef:ac:f1:db:5b:fb: b8:b0:eb:a2:9d:cb:eb:1f:7d:a9:20:5f:c4:04:ce:6c:52:48: 25:0f:00:d6:c8:2b:10:d3:13:5f:27:57:64:b0:09:10:15:5e: 26:84:c9:cb:d2:82:b9:35:b0:ba:2f:f9:60:80:0d:51:87:04: 0e:7f:88:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3/lxOyLQN2OXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUzNmE2ODMtMTQyYi00MWNkLTkzMmMtZTExNTYwM2Rl NDMxMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NjU0NDJiZmQtNjA3Zi00ZDIyLWJiOTItMGIyZDU3NjE5OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZqrv5lLEWs2eh3A9G8un2sqIQ/m4VPyqlVV 1HXjXRt+zgIXs3ZJWarEXd8No3nv+uyo0x2/NPq5moAZve6AwlWIURESSwkullc+ SpEw8Glm3LoEo5SbhMrCnLgVcYStOwoVV/tmk4i+jyybo5uGMiIUvc5wW+PMKoWT W2YlXGnVtoEvNxxqAB5k4PNy8A5ybqOb1Kw8P/RbeAPlZyooCy7YNuTjgNegGSRW QpgusF0bkHaa9jOPKGTICK+G4Iapof2M3lxexu5joLrYMdLlZwhQxIuh8UHa95nw K+PwMDwcK3ok/2FmeMSoSJk23pKhq5LuQ1gbJSVdE2qyf3+oWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVjfkrrpNXKTOt+TJgHnnXmiuLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTM2 YTY4My0xNDJiLTQxY2QtOTMyYy1lMTE1NjAzZGU0MzEvMGU0YjAwNDgtYjE5Ny0z NjRkLTgyYTUtMzEyN2I5ZjkyMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWUzNmE2ODMtMTQyYi00MWNkLTkz MmMtZTExNTYwM2RlNDMxLzllMzZhNjgzLTE0MmItNDFjZC05MzJjLWUxMTU2MDNk ZTQzMS5jcmwwHwYDVR0jBBgwFoAUW4DisaWhUzLsi2Hy+ZldZuPQAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTM2YTY4My0xNDJiLTQxY2QtOTMyYy1lMTE1 NjAzZGU0MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD22L7VeQj6gZMj6zgmvV867OnZ+oc6BFJTOqRDT0mXMdRQxFYQt1z/5 qRiU+xZwBiMmNvOE9PXPiEGixv4IfWZ7I4fFhFDxOKVadutfENIAXwXkCH1L3z5c WXGD8gpnFtzoGrJ0YiAxJEO6c5l+ck8mJlVoME0qm5r4oZHX2NZWTI+k4wRvkKmH 6MsoNTtywA3iGNLV1Ta7BT6a3VSSugjvOcR+iKtUGJ2chWD/brCvyZEoE2YRCfw3 vEwI4R5NSe+s8dtb+7iw66Kdy+sffakgX8QEzmxSSCUPANbIKxDTE18nV2SwCRAV XiaEycvSgrk1sLov+WCADVGHBA5/iA0= -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:18 2025 by rpki-client