$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa File: 28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa (raw, json) Hash identifier: nf4kYAL2Faf8ZWU4GUQr/3c7Ds+kCWjRkOov5az7PsM= Subject key identifier: EA:3D:2D:C5:3C:50:8B:F2:9F:F7:F7:F4:F6:F7:1E:D0:91:28:7D:02 Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584A268ABD1120147E733554A3C0 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 53869 IP address blocks: 199.47.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:bd:11:20:14:7e:73:35:54:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=0fc6260d-e438-49a2-9754-5a87ae595754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:b5:e6:36:a5:a8:ed:cb:19:fb:8a:a0:70: 45:59:07:19:52:d1:41:6e:ac:3c:66:ec:a5:21:a5: c0:fd:0b:41:44:98:bf:46:b3:50:5e:7c:7f:f1:b5: 6a:84:cc:9d:66:d5:56:a9:6b:55:0d:8c:e9:93:c5: b0:ee:ad:40:fb:e5:ca:6f:72:9c:80:af:c5:1f:9f: 80:6f:5b:92:8b:ae:30:3a:1b:2f:7d:7d:63:da:30: 97:15:16:dd:b0:5f:44:5c:c2:e5:b3:ce:c4:b4:18: 08:a7:54:85:e2:1c:b1:1e:5a:d1:17:90:b4:f0:24: c7:47:77:be:49:ed:15:39:65:a5:64:17:db:96:6b: 2d:3f:54:4c:a9:0c:41:1e:9d:0b:81:9d:01:ef:01: 43:d4:5f:5b:f3:80:bc:33:4b:f7:84:37:c1:07:d5: 3e:3f:3f:76:c8:58:9e:98:8e:03:13:01:cc:45:4c: 7b:47:7f:ee:f7:4b:93:d7:cf:00:ed:c8:da:a7:cb: 2d:a3:ed:26:c7:ff:10:ba:91:c3:49:25:9e:3c:a8: c4:db:e4:ea:c0:84:8f:05:99:21:e3:7b:92:8c:c8: 06:37:83:45:c1:02:92:3a:8f:25:c3:de:37:ff:d2: ed:51:4c:8c:4f:da:f9:42:bb:b9:73:4e:b0:38:4d: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3D:2D:C5:3C:50:8B:F2:9F:F7:F7:F4:F6:F7:1E:D0:91:28:7D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/28fa8d74-0da4-3fe2-baff-33edf683c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:be:97:d1:26:24:fb:96:f6:d3:09:7a:ce:40:60:36:dd:8d: 93:9e:86:23:14:9f:70:9f:f9:68:30:12:93:76:2b:c3:d5:e0: d3:76:03:b3:5c:22:7c:86:e1:1f:3a:13:34:bf:b1:f3:e7:f1: 7f:b3:7e:87:d5:a5:5e:55:77:ce:e2:ac:34:28:d5:e5:a1:41: 56:4e:4b:80:74:26:6e:fd:9f:0f:a2:c0:b4:30:07:93:f1:8d: fa:5d:bb:a7:ce:8a:4d:f2:40:f3:51:61:2f:8f:0a:8e:bd:c9: 6a:7d:f7:9d:2e:20:f0:a5:10:98:54:ba:33:a4:35:91:10:54: aa:09:16:cd:4d:e5:df:02:03:67:6a:a4:26:5f:4a:97:10:ab: d0:b2:ae:b7:5a:a2:d2:56:7c:49:d2:fc:85:c8:da:2a:aa:ea: 8a:e6:a7:31:24:c5:2b:42:df:c0:bf:04:d4:71:80:46:ac:09: 3b:fc:83:9f:06:be:a4:19:0e:d4:8b:25:75:0b:b8:ec:d1:0c: 4a:aa:5d:49:ca:50:3e:64:85:f9:22:a7:b7:77:a9:85:6c:4f: 70:54:8b:87:6c:70:f3:1c:42:a8:7d:19:b0:b0:ef:b3:1a:ae: 76:9b:e4:7d:81:52:c2:cc:d6:ea:f8:6e:f4:d2:bc:b7:a4:32: 91:ff:e8:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomir0RIBR+czVUo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MGZjNjI2MGQtZTQzOC00OWEyLTk3NTQtNWE4N2FlNTk1NzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthu15jalqO3LGfuKoHBFWQcZUtFBbqw8Zuyl IaXA/QtBRJi/RrNQXnx/8bVqhMydZtVWqWtVDYzpk8Ww7q1A++XKb3KcgK/FH5+A b1uSi64wOhsvfX1j2jCXFRbdsF9EXMLls87EtBgIp1SF4hyxHlrRF5C08CTHR3e+ Se0VOWWlZBfblmstP1RMqQxBHp0LgZ0B7wFD1F9b84C8M0v3hDfBB9U+Pz92yFie mI4DEwHMRUx7R3/u90uT188A7cjap8sto+0mx/8QupHDSSWePKjE2+TqwISPBZkh 43uSjMgGN4NFwQKSOo8lw943/9LtUUyMT9r5Qru5c06wOE2+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOo9LcU8UIvyn/f39Pb3HtCRKH0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvMjhmYThkNzQtMGRhNC0z ZmUyLWJhZmYtMzNlZGY2ODNjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa+l9EmJPuW9tMJes5AYDbdjZOehiMUn3Cf+WgwEpN2K8PV4NN2A7Nc InyG4R86EzS/sfPn8X+zfofVpV5Vd87irDQo1eWhQVZOS4B0Jm79nw+iwLQwB5Px jfpdu6fOik3yQPNRYS+PCo69yWp9950uIPClEJhUujOkNZEQVKoJFs1N5d8CA2dq pCZfSpcQq9CyrrdaotJWfEnS/IXI2iqq6ormpzEkxStC38C/BNRxgEasCTv8g58G vqQZDtSLJXULuOzRDEqqXUnKUD5khfkip7d3qYVsT3BUi4dscPMcQqh9GbCw77Ma rnab5H2BUsLM1ur4bvTSvLekMpH/6OA= -----END CERTIFICATE-----Generated at Sun Jun 29 22:27:55 2025 by rpki-client