$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa File: 7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa (raw, json) Hash identifier: Wm8s0SqErCIYaQrgAc7jZhgxeH4LUmtlmY4ODzADzfU= Subject key identifier: 63:B5:B6:55:B0:A3:F6:71:4A:3C:EB:AF:3B:8B:D0:E4:00:5F:82:34 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A3CE02EE41819FE6D20859CE0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 266400 IP address blocks: 96.43.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:2e:e4:18:19:fe:6d:20:85:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=37e05a62-ada5-4215-9c18-9b9fb9090432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:3c:3a:c3:87:ca:3c:82:9c:62:73:83:c5: 81:3c:1f:9f:95:5d:87:55:dd:4d:a7:1a:7b:8c:28: 85:b4:3e:70:6d:d9:90:50:1c:b6:50:8b:de:fa:1c: 40:70:1b:33:2b:5c:49:86:5c:cf:a2:d9:2e:cf:12: c2:db:21:46:bb:7d:11:80:5a:b7:f1:19:91:11:5f: 25:fa:81:32:0d:92:1a:3b:95:95:17:27:44:30:b1: 8a:69:f6:a3:f7:93:7b:e9:36:75:e2:82:ca:f8:9d: 72:b8:07:a6:54:88:84:0d:f6:4e:f2:9e:ea:a4:4c: 9f:18:46:47:73:94:52:ac:49:de:2e:4d:fc:d4:2d: bc:c7:d8:38:39:07:81:e2:e8:59:f2:32:64:50:ec: dd:3c:f0:00:e0:62:86:7b:d2:83:f4:51:4f:be:a4: 20:b6:e6:9f:40:e3:e0:25:1e:9d:8a:c5:5b:b8:89: 3b:31:ea:ea:b6:c8:54:4e:f6:f8:d0:de:cb:f5:ba: 7f:b3:03:f6:dc:79:6f:66:f9:c1:f6:9e:9b:a0:e0: 90:01:d3:a9:1f:4f:46:a3:d1:07:63:91:77:5d:c4: f1:a3:d2:30:6c:c4:7a:97:9b:1e:94:2d:bc:aa:49: 58:db:4d:40:79:dd:ec:61:47:87:f0:cb:3f:12:c0: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B5:B6:55:B0:A3:F6:71:4A:3C:EB:AF:3B:8B:D0:E4:00:5F:82:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7e95e7a3-009c-37a4-a7ea-e45aa7a163ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ab:75:1a:7b:36:0b:db:db:60:d0:1e:f3:04:53:a0:b8:5c: 70:b4:13:5c:0b:d3:b2:0a:a1:da:19:ec:66:70:02:81:a8:83: 64:cb:c9:56:c3:f3:09:4c:1f:fa:17:0f:12:4c:65:6d:ee:08: 5a:3e:de:1b:1a:7f:34:f4:85:40:46:ed:b6:51:94:1f:a4:e1: f6:a6:ec:f1:16:9e:61:0a:0e:89:0a:a4:55:69:0e:f5:84:b3: e3:f4:e4:29:e5:54:bb:2e:1c:46:b0:7a:a8:46:99:87:9e:57: 4d:1b:ac:24:ca:22:79:fc:12:c0:0a:af:c2:82:12:c6:f6:9b: 77:3d:07:96:75:d2:5f:b9:e0:30:41:64:ed:8b:36:c8:60:3f: bd:e9:4d:3c:a7:a8:5f:18:8e:26:0c:57:c1:d9:bf:df:db:c3: 41:01:2e:f8:11:2f:3e:44:00:9d:11:6e:68:15:44:23:fb:7c: 90:04:e6:88:3c:00:f9:49:5d:34:0e:c7:0c:36:94:0d:a6:94: 61:ac:b6:83:8f:9b:ee:3d:9f:6b:e7:ba:a2:e8:f3:91:d9:83: 4d:6b:fc:42:20:6a:61:b7:82:08:d4:fc:cd:a6:7a:13:e7:31: 92:6f:8d:ac:c7:8d:b5:7c:ef:67:5e:74:32:88:ef:cb:02:dc: a5:5c:27:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84C7kGBn+bSCFnOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk MzdlMDVhNjItYWRhNS00MjE1LTljMTgtOWI5ZmI5MDkwNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJk8OsOHyjyCnGJzg8WBPB+flV2HVd1Npxp7 jCiFtD5wbdmQUBy2UIve+hxAcBszK1xJhlzPotkuzxLC2yFGu30RgFq38RmREV8l +oEyDZIaO5WVFydEMLGKafaj95N76TZ14oLK+J1yuAemVIiEDfZO8p7qpEyfGEZH c5RSrEneLk381C28x9g4OQeB4uhZ8jJkUOzdPPAA4GKGe9KD9FFPvqQgtuafQOPg JR6disVbuIk7MerqtshUTvb40N7L9bp/swP23HlvZvnB9p6boOCQAdOpH09Go9EH Y5F3XcTxo9IwbMR6l5selC28qklY201Aed3sYUeH8Ms/EsBKGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGO1tlWwo/ZxSjzrrzuL0OQAX4I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvN2U5NWU3YTMtMDA5Yy0z N2E0LWE3ZWEtZTQ1YWE3YTE2M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCrdRp7Ngvb22DQHvMEU6C4XHC0E1wL07IKodoZ7GZwAoGog2TLyVbD 8wlMH/oXDxJMZW3uCFo+3hsafzT0hUBG7bZRlB+k4fam7PEWnmEKDokKpFVpDvWE s+P05CnlVLsuHEaweqhGmYeeV00brCTKInn8EsAKr8KCEsb2m3c9B5Z10l+54DBB ZO2LNshgP73pTTynqF8YjiYMV8HZv9/bw0EBLvgRLz5EAJ0RbmgVRCP7fJAE5og8 APlJXTQOxww2lA2mlGGstoOPm+49n2vnuqLo85HZg01r/EIgamG3ggjU/M2mehPn MZJvjazHjbV872dedDKI78sC3KVcJwA= -----END CERTIFICATE-----Generated at Sun Jun 29 01:39:28 2025 by rpki-client