$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa File: 20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa (raw, json) Hash identifier: uhPN3g3A1hr+ktaITY4e5G84BYlZQl8rjSidx1lozfQ= Subject key identifier: A8:76:A7:DD:A3:0A:A5:E0:2F:F2:65:74:96:E6:0E:19:34:3E:AF:30 Certificate issuer: /CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Certificate serial: 010D0C9F4328584AC8767C04A05138666CFFF280 Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 20454 IP address blocks: 96.47.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:7c:04:a0:51:38:66:6c:ff:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=2199721d-16d9-449f-925b-e5770518c7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:f9:c8:49:f6:c1:03:7c:b9:ba:2f:d9:25: 3c:69:39:4f:89:fa:2d:35:7d:fe:10:74:87:3c:97: 15:1b:4d:fe:6b:bb:9f:4a:b8:e4:a1:2d:cd:00:c5: 42:60:91:2e:29:50:ba:95:22:71:e2:8d:ad:c0:3e: ea:a5:62:9e:8f:73:5d:83:03:ab:3e:b5:2e:cf:37: 46:bc:54:34:91:a1:02:05:20:99:28:7e:46:a3:cc: 95:27:aa:1f:59:ad:e8:35:3d:6f:57:99:b9:e2:e6: fa:dd:87:5f:ca:bc:a7:00:60:5e:98:f3:92:72:bb: e6:8c:01:1a:ec:fe:b6:e0:dc:c1:5c:69:ad:cf:82: 14:f7:6f:c0:02:58:2a:49:06:ef:01:48:36:6b:b5: c2:27:c1:43:8f:12:bd:bf:03:c3:0d:a0:d3:c3:f4: 77:e4:71:f7:a3:49:c9:6e:8c:7e:cf:4f:ea:38:dc: 73:bb:e5:b7:ee:c5:da:64:4b:a0:f1:bc:66:cf:a5: 9e:5c:25:33:8d:d6:f0:57:49:4d:09:a6:8b:3b:de: 0e:b9:df:44:2b:41:5a:97:27:85:d4:46:23:c9:11: ef:09:7c:c9:ad:5f:75:4b:37:b5:29:be:ca:2d:cb: 53:5f:ce:fd:d8:1b:24:b4:e6:45:23:fe:6c:91:9b: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:76:A7:DD:A3:0A:A5:E0:2F:F2:65:74:96:E6:0E:19:34:3E:AF:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/20dd5c25-5abf-3aed-a13a-be5be87b2a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl X509v3 Authority Key Identifier: keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer sbgp-ipAddrBlock: critical IPv4: 96.47.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:03:4a:68:ac:a1:83:e4:89:de:af:91:f8:0e:32:1e:dd:f7: 76:ac:49:83:16:20:c3:26:dc:d0:7b:f4:7e:35:8e:64:f5:13: 44:be:c7:4c:04:4a:17:7c:ab:eb:ff:8e:f2:c2:84:50:e2:24: 7d:4a:d5:38:93:f2:ba:3b:ce:91:05:36:8a:92:13:75:ab:cd: 69:b8:b5:1c:47:77:f9:55:55:41:70:d5:0c:27:ee:8e:16:c5: e2:c1:0c:5b:5b:fc:bb:33:fc:38:23:3d:8d:f9:b3:0d:72:16: a7:d8:e9:f8:59:a6:a0:73:db:53:19:e5:f4:0a:96:55:e0:62: f8:96:6e:fc:12:4d:c1:4f:f7:04:5f:53:81:72:3e:a9:b8:10: f3:33:95:21:41:66:6a:51:b8:26:74:6f:ab:f2:75:34:1b:20: 75:fc:30:ed:94:15:ba:b8:8e:9e:e8:cf:b7:b1:16:61:f7:4d: d1:15:23:5b:6b:d4:0e:77:f0:1b:48:94:23:db:1e:6c:19:d1: 61:ae:51:3d:96:b2:b7:ad:93:79:3e:d1:31:cd:30:2e:f1:e8: 31:74:9c:57:29:38:f1:b7:9e:d9:25:9f:cb:17:3f:9e:74:7d: ea:f8:4b:dc:c2:70:70:f2:90:66:7e:b2:68:c3:ea:0a:51:77: be:66:9a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdnwEoFE4Zmz/8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz ZmU0MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjE5OTcyMWQtMTZkOS00NDlmLTkyNWItZTU3NzA1MThjN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoT5yEn2wQN8ubov2SU8aTlPifotNX3+EHSH PJcVG03+a7ufSrjkoS3NAMVCYJEuKVC6lSJx4o2twD7qpWKej3NdgwOrPrUuzzdG vFQ0kaECBSCZKH5Go8yVJ6ofWa3oNT1vV5m54ub63YdfyrynAGBemPOScrvmjAEa 7P624NzBXGmtz4IU92/AAlgqSQbvAUg2a7XCJ8FDjxK9vwPDDaDTw/R35HH3o0nJ box+z0/qONxzu+W37sXaZEug8bxmz6WeXCUzjdbwV0lNCaaLO94Oud9EK0FalyeF 1EYjyRHvCXzJrV91Sze1Kb7KLctTX8792BsktOZFI/5skZtpKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh2p92jCqXgL/JldJbmDhk0Pq8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3 OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvMjBkZDVjMjUtNWFiZi0z YWVkLWExM2EtYmU1YmU4N2IyYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0 M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGADSmisoYPkid6vkfgOMh7d93asSYMWIMMm3NB79H41jmT1E0S+x0wE Shd8q+v/jvLChFDiJH1K1TiT8ro7zpEFNoqSE3WrzWm4tRxHd/lVVUFw1Qwn7o4W xeLBDFtb/Lsz/DgjPY35sw1yFqfY6fhZpqBz21MZ5fQKllXgYviWbvwSTcFP9wRf U4FyPqm4EPMzlSFBZmpRuCZ0b6vydTQbIHX8MO2UFbq4jp7oz7exFmH3TdEVI1tr 1A538BtIlCPbHmwZ0WGuUT2Wsretk3k+0THNMC7x6DF0nFcpOPG3ntkln8sXP550 fer4S9zCcHDykGZ+smjD6gpRd75mmnQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:52:30 2025 by rpki-client