$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa File: 2d9d3321-db9f-306c-9228-ae06be4dece8.roa (raw, json) Hash identifier: mirtmcLcmAT7dESpbsZ2IpVzenHK83emINRrCYIHcRI= Subject key identifier: 02:1C:47:BB:97:CA:86:68:96:7B:A0:13:BC:64:E5:11:5F:3D:CB:01 Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584A58CB04859BF8AD107A482F00 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 396982 IP address blocks: 199.47.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:04:85:9b:f8:ad:10:7a:48:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=2a299a8e-908b-417c-ba31-b1919a99f463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:69:f6:c0:65:53:83:1c:1a:84:80:4f:a8: bb:95:da:cf:1f:0f:b1:ef:9c:65:01:63:83:2f:4b: a7:17:2a:21:62:47:a6:df:c3:78:ef:49:f2:84:76: 38:0c:02:e6:28:95:d5:1e:c3:d8:5e:29:c4:cd:34: 97:45:15:54:06:f0:a9:59:84:94:96:43:12:9f:ce: fd:5c:20:af:0c:5e:96:78:cd:88:55:e1:80:1d:a7: be:91:b7:57:0f:d8:21:0f:fb:85:f0:23:d6:c9:19: ec:a3:36:b4:9a:0c:a1:45:ba:d4:cc:56:eb:7e:0f: 71:36:d0:a2:0a:1e:3f:cb:3d:a5:0e:5f:c9:16:d6: 12:8f:5d:c7:cd:36:d2:6a:46:ec:37:bd:09:84:1a: c9:60:f3:ce:8b:4b:a9:46:16:94:2d:42:51:88:b9: de:d4:c1:4a:66:12:e9:a2:98:14:e8:7d:99:cf:c2: 50:a2:be:d1:29:15:69:52:6c:15:ea:da:6f:39:d1: a8:a3:bc:4d:46:91:e1:2a:84:01:09:0a:f6:79:d4: f9:8b:e5:29:8b:88:02:6e:e2:4e:82:c8:72:12:f7: 31:fd:1a:fb:f1:93:83:39:2b:02:d0:48:77:f6:39: 60:5c:90:79:a2:7c:12:f4:77:01:04:99:ce:07:c6: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1C:47:BB:97:CA:86:68:96:7B:A0:13:BC:64:E5:11:5F:3D:CB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/2d9d3321-db9f-306c-9228-ae06be4dece8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:df:6e:76:e3:58:3e:e5:07:0d:46:d5:db:b4:b3:44:31:7e: f9:81:a4:35:d3:bd:21:12:0e:a0:84:65:ae:de:04:b6:47:fc: b4:e4:f1:fc:76:14:19:34:0b:ed:2d:45:67:85:67:8a:67:77: e4:be:94:1d:25:81:24:a2:66:ca:d6:13:9c:3e:26:65:a4:c2: 5a:8c:b6:e8:11:d9:95:35:e2:7a:34:2b:12:c9:7c:d9:12:21: 50:48:ef:58:36:c4:2c:f3:28:1c:5b:86:a6:39:92:e2:87:72: 02:93:91:e8:22:14:28:c5:b0:09:12:f1:bc:5c:20:6e:2a:b7: df:19:5b:7b:d6:f0:85:dc:05:b8:4f:15:1d:55:d5:86:72:16: f0:da:da:71:b9:71:f8:4e:13:cc:75:12:4a:84:18:30:6f:b0: db:1c:34:99:c8:39:21:f2:59:b2:8c:34:41:d4:18:38:ad:03: 40:df:c9:84:c5:6a:de:6c:29:8e:d3:23:db:f5:8f:ea:c3:96: 5f:e9:ff:89:40:6b:ac:c7:91:19:17:d8:1e:11:ad:ef:35:b7: 64:db:44:7e:45:fd:7e:90:85:26:eb:13:13:06:5d:80:dd:62: 92:e8:24:09:e4:ff:1c:c0:63:ff:5e:de:69:43:44:bb:72:5f: 65:f4:d4:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywSFm/itEHpILwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk MmEyOTlhOGUtOTA4Yi00MTdjLWJhMzEtYjE5MTlhOTlmNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEdp9sBlU4McGoSAT6i7ldrPHw+x75xlAWOD L0unFyohYkem38N470nyhHY4DALmKJXVHsPYXinEzTSXRRVUBvCpWYSUlkMSn879 XCCvDF6WeM2IVeGAHae+kbdXD9ghD/uF8CPWyRnsoza0mgyhRbrUzFbrfg9xNtCi Ch4/yz2lDl/JFtYSj13HzTbSakbsN70JhBrJYPPOi0upRhaULUJRiLne1MFKZhLp opgU6H2Zz8JQor7RKRVpUmwV6tpvOdGoo7xNRpHhKoQBCQr2edT5i+Upi4gCbuJO gshyEvcx/Rr78ZODOSsC0Eh39jlgXJB5onwS9HcBBJnOB8ZOtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIcR7uXyoZolnugE7xk5RFfPcsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvMmQ5ZDMzMjEtZGI5Zi0z MDZjLTkyMjgtYWUwNmJlNGRlY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzfbnbjWD7lBw1G1du0s0QxfvmBpDXTvSESDqCEZa7eBLZH/LTk8fx2 FBk0C+0tRWeFZ4pnd+S+lB0lgSSiZsrWE5w+JmWkwlqMtugR2ZU14no0KxLJfNkS IVBI71g2xCzzKBxbhqY5kuKHcgKTkegiFCjFsAkS8bxcIG4qt98ZW3vW8IXcBbhP FR1V1YZyFvDa2nG5cfhOE8x1EkqEGDBvsNscNJnIOSHyWbKMNEHUGDitA0DfyYTF at5sKY7TI9v1j+rDll/p/4lAa6zHkRkX2B4Rre81t2TbRH5F/X6QhSbrExMGXYDd YpLoJAnk/xzAY/9e3mlDRLtyX2X01Bc= -----END CERTIFICATE-----Generated at Sun Jun 29 22:04:12 2025 by rpki-client