$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa File: bcc973e1-9d01-3d4e-85af-27d694043429.roa (raw, json) Hash identifier: IGzcnpctydSGAMsBbTNe6JGt/qq70Zzld7nutcTSsB8= Subject key identifier: D1:DD:40:F4:FA:62:6A:1F:7D:B9:CE:A9:EB:40:4F:91:69:61:85:7B Certificate issuer: /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Certificate serial: 010D0C9F4328584A268ABD204CF06B5EBCD73100 Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 396982 IP address blocks: 199.47.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:bd:20:4c:f0:6b:5e:bc:d7:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=2ee099d2-b9e9-40a7-b493-f6129df94334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:1c:20:13:cd:f3:4e:77:45:9d:88:7c:01: 39:d9:48:95:e1:35:be:2a:45:f1:ae:5a:15:3d:9f: d2:ca:37:79:5d:e0:c4:97:82:e9:45:b6:30:84:a7: f7:88:87:a3:55:12:7e:05:7d:1e:d0:dc:62:46:43: 1c:71:79:9e:54:4f:2a:ae:c7:13:31:a6:69:0d:62: fa:b5:34:d9:1b:d8:89:b3:0e:2e:55:ea:a6:e5:c1: 5e:e9:41:0c:a6:6f:bf:dd:14:8f:6f:e2:29:55:fe: d8:e2:0c:e2:2b:11:f1:47:5d:2d:d8:0b:64:16:1d: 03:f4:29:96:d2:00:a5:76:cd:e7:62:b1:e6:b2:8a: a7:2c:30:8b:9b:69:97:41:c5:63:b2:90:1e:c7:bc: 03:e8:bc:d3:2e:9b:5f:a6:8b:e2:4e:c0:c5:4e:fe: 36:91:d8:f5:5f:5a:d1:5f:0f:6e:b9:d2:8d:4c:cf: 0c:84:12:ac:11:2b:20:3c:00:17:48:67:e0:54:4e: 3f:d6:4e:11:04:36:ec:06:c5:5b:52:65:32:bf:6f: 83:09:87:d9:68:9b:79:5d:8f:3b:3d:f5:fe:5c:a1: fc:ad:98:f8:a7:ba:b1:0c:ee:86:69:8b:06:73:f1: 13:a3:5b:6b:70:0c:74:82:1b:c1:4c:f4:b2:4a:51: 3a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:40:F4:FA:62:6A:1F:7D:B9:CE:A9:EB:40:4F:91:69:61:85:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/bcc973e1-9d01-3d4e-85af-27d694043429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl X509v3 Authority Key Identifier: keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer sbgp-ipAddrBlock: critical IPv4: 199.47.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1e:9f:34:6a:96:65:be:b2:a1:4c:85:d2:98:97:2d:70:c0: 38:ec:73:72:8d:8f:de:0b:6e:37:2a:e1:b5:77:4a:c0:8e:30: 49:6e:d4:bb:5d:41:de:0b:b3:b9:7c:69:41:bf:f3:7e:e4:50: 84:2d:e8:ef:cb:29:b5:28:85:92:4e:8f:52:e1:32:b6:99:dd: 9b:8b:a2:a5:34:ef:3d:11:56:15:73:9d:e7:b0:d7:25:f4:8f: cf:ef:eb:db:b5:80:05:03:f5:fa:08:be:ac:7d:4a:63:e9:3e: e8:4b:a5:d4:f6:67:0e:6d:49:16:9e:6a:92:62:c0:1c:a8:81: 51:42:cc:9d:d6:30:ab:b5:25:cf:80:ee:a0:ba:c0:f8:43:ee: 52:30:59:2e:b1:e8:4c:b5:99:df:50:ff:a4:71:ee:d0:a3:a6: de:a3:91:39:c5:9d:0d:0d:05:c7:78:07:87:ea:87:87:1f:5a: cf:b1:96:22:aa:0e:06:af:38:68:64:81:78:a3:77:23:86:18: 68:b0:3d:2a:67:b2:0d:9d:da:5a:d7:a5:eb:5a:88:a9:d2:9f: 45:63:b5:95:86:f3:fb:9d:45:64:e5:98:54:9d:bb:ca:55:62: f1:91:f2:82:05:8a:4c:73:03:15:0c:74:63:da:95:7d:f8:bf: e3:92:e4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomir0gTPBrXrzXMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw OTZlMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MmVlMDk5ZDItYjllOS00MGE3LWI0OTMtZjYxMjlkZjk0MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7ocIBPN8053RZ2IfAE52UiV4TW+KkXxrloV PZ/Syjd5XeDEl4LpRbYwhKf3iIejVRJ+BX0e0NxiRkMccXmeVE8qrscTMaZpDWL6 tTTZG9iJsw4uVeqm5cFe6UEMpm+/3RSPb+IpVf7Y4gziKxHxR10t2AtkFh0D9CmW 0gClds3nYrHmsoqnLDCLm2mXQcVjspAex7wD6LzTLptfpoviTsDFTv42kdj1X1rR Xw9uudKNTM8MhBKsESsgPAAXSGfgVE4/1k4RBDbsBsVbUmUyv2+DCYfZaJt5XY87 PfX+XKH8rZj4p7qxDO6GaYsGc/ETo1trcAx0ghvBTPSySlE6/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHdQPT6YmoffbnOqetAT5FpYYV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvYmNjOTczZTEtOWQwMS0z ZDRlLTg1YWYtMjdkNjk0MDQzNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgenzRqlmW+sqFMhdKYly1wwDjsc3KNj94Lbjcq4bV3SsCOMElu1Ltd Qd4Ls7l8aUG/837kUIQt6O/LKbUohZJOj1LhMraZ3ZuLoqU07z0RVhVzneew1yX0 j8/v69u1gAUD9foIvqx9SmPpPuhLpdT2Zw5tSRaeapJiwByogVFCzJ3WMKu1Jc+A 7qC6wPhD7lIwWS6x6Ey1md9Q/6Rx7tCjpt6jkTnFnQ0NBcd4B4fqh4cfWs+xliKq DgavOGhkgXijdyOGGGiwPSpnsg2d2lrXpetaiKnSn0VjtZWG8/udRWTlmFSdu8pV YvGR8oIFikxzAxUMdGPalX34v+OS5Hs= -----END CERTIFICATE-----Generated at Sun Jun 29 23:07:07 2025 by rpki-client