$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc97a893-b34f-3e24-91ac-9ea0ff8f495d.roa File: bc97a893-b34f-3e24-91ac-9ea0ff8f495d.roa (raw, json) Hash identifier: Fjc8oRcuXbOTRo/mFmDJXlNtvC86eXp+hdpzZM4S4QI= Subject key identifier: 51:4F:9A:D5:2F:37:58:F4:89:D3:0C:F8:DF:CC:62:D2:DD:08:E4:41 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A39655217BA8E0ADAA47D2A80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc97a893-b34f-3e24-91ac-9ea0ff8f495d.roa Signing time: Tue 17 Jun 2025 19:05:59 +0000 ROA not before: Tue 17 Jun 2025 19:05:59 +0000 ROA not after: Mon 15 Sep 2025 19:05:59 +0000 asID: 401152 IP address blocks: 96.126.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:65:52:17:ba:8e:0a:da:a4:7d:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 17 19:05:59 2025 GMT Not After : Sep 15 19:05:59 2025 GMT Subject: CN=7e8e7c14-526f-4d62-8f30-a0fe1ebcf8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:0e:09:bf:39:3e:54:23:b6:ed:e5:05:86: 51:9b:a5:33:01:6b:d9:7c:5e:70:e8:0e:d1:b8:a7: 6b:0e:50:e1:fe:d5:cd:71:6a:c8:8c:b4:8e:19:ef: a5:9d:f9:8d:1d:f6:8a:79:b8:46:e3:15:df:3f:f3: 63:95:d2:2f:9a:fd:a9:52:ef:b8:ba:17:45:d1:2f: 0d:ee:75:5c:a3:52:b1:2d:49:89:76:91:60:c6:5a: a6:75:82:7d:cf:79:04:8a:ab:19:6c:5a:e8:7d:fa: 63:75:81:81:f6:ec:75:20:75:82:ea:9f:95:ce:40: 8c:23:58:db:77:4a:2e:2d:02:af:2b:13:80:19:a9: 1d:08:8b:30:a0:00:ab:22:fd:cc:c6:07:26:ed:ca: 65:c1:7e:f9:0f:79:ab:2f:3e:d6:ad:99:84:48:c2: 74:0c:2f:d9:f1:90:24:bf:70:3e:95:a1:a0:88:50: 85:86:ef:5d:bc:ca:43:d4:84:f9:ce:ab:d4:f0:0c: ba:cb:47:00:7d:b1:18:f1:e9:ca:14:8b:cc:6e:97: ec:b0:59:a5:41:35:ae:6e:da:9c:b9:36:10:5c:91: ba:cc:38:8d:5e:53:3e:85:33:e0:e9:2f:00:e1:ab: f8:7a:d3:14:0a:42:56:5a:02:4f:73:b0:ee:7e:cc: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4F:9A:D5:2F:37:58:F4:89:D3:0C:F8:DF:CC:62:D2:DD:08:E4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc97a893-b34f-3e24-91ac-9ea0ff8f495d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 96.126.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:37:7c:44:06:47:ea:08:17:7c:4a:02:f6:9c:21:da:f6:03: 28:07:7c:e0:e1:a6:e9:6f:2f:b9:08:a6:4f:b3:b1:95:9f:89: 06:a9:48:20:b0:99:3a:66:22:cd:2d:9a:02:d0:f2:27:b0:74: 45:d5:c7:3a:75:94:22:a6:c0:a9:9d:b1:c0:73:a5:c9:40:10: 5d:61:74:3b:e3:a1:36:c2:37:15:83:72:58:1f:3e:0d:36:07: 72:46:b1:1e:ff:47:79:5c:df:ff:eb:2c:c9:d5:5a:1c:05:05: 73:d2:bb:18:13:3c:6e:2c:7d:d0:ba:6c:7f:46:91:fd:ce:01: 60:d2:7b:fb:a9:af:a2:a0:6f:4e:f4:cf:4e:83:2b:09:99:9f: 0d:1f:84:40:6e:3c:ee:4a:23:2f:fd:96:5f:5a:e3:e2:a7:da: d0:56:d2:04:21:ab:89:41:40:dd:5e:e9:6b:77:5c:21:3e:36: 71:02:e9:09:a7:0b:5e:94:d6:5c:8d:82:a1:ea:d8:13:f3:fc: 79:20:72:da:3c:29:84:5e:92:22:19:e0:19:74:ab:ba:b5:fd: a3:82:8b:a5:54:3e:98:de:bf:7c:f4:b8:51:1e:32:23:65:cb: da:73:de:83:be:3f:a6:24:79:e0:2d:01:29:bf:31:b3:37:ca: f6:91:e9:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5ZVIXuo4K2qR9KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxNzE5MDU1OVoXDTI1MDkxNTE5MDU1OVowLzEtMCsGA1UEAxMk N2U4ZTdjMTQtNTI2Zi00ZDYyLThmMzAtYTBmZTFlYmNmOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzgOCb85PlQjtu3lBYZRm6UzAWvZfF5w6A7R uKdrDlDh/tXNcWrIjLSOGe+lnfmNHfaKebhG4xXfP/NjldIvmv2pUu+4uhdF0S8N 7nVco1KxLUmJdpFgxlqmdYJ9z3kEiqsZbFroffpjdYGB9ux1IHWC6p+VzkCMI1jb d0ouLQKvKxOAGakdCIswoACrIv3Mxgcm7cplwX75D3mrLz7WrZmESMJ0DC/Z8ZAk v3A+laGgiFCFhu9dvMpD1IT5zqvU8Ay6y0cAfbEY8enKFIvMbpfssFmlQTWubtqc uTYQXJG6zDiNXlM+hTPg6S8A4av4etMUCkJWWgJPc7DufsyznwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFPmtUvN1j0idMM+N/MYtLdCORBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmM5N2E4OTMtYjM0Zi0z ZTI0LTkxYWMtOWVhMGZmOGY0OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYH69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA3fEQGR+oIF3xKAvacIdr2AygHfODhpulvL7kIpk+zsZWfiQapSCCw mTpmIs0tmgLQ8iewdEXVxzp1lCKmwKmdscBzpclAEF1hdDvjoTbCNxWDclgfPg02 B3JGsR7/R3lc3//rLMnVWhwFBXPSuxgTPG4sfdC6bH9Gkf3OAWDSe/upr6Kgb070 z06DKwmZnw0fhEBuPO5KIy/9ll9a4+Kn2tBW0gQhq4lBQN1e6Wt3XCE+NnEC6Qmn C16U1lyNgqHq2BPz/Hkgcto8KYRekiIZ4Bl0q7q1/aOCi6VUPpjev3z0uFEeMiNl y9pz3oO+P6YkeeAtASm/MbM3yvaR6bM= -----END CERTIFICATE-----Generated at Sun Jun 29 16:37:56 2025 by rpki-client