$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa File: bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa (raw, json) Hash identifier: jX5L7oluFo75qF3WboCDTfD3qZ+K4r1oODpkLuYFHGs= Subject key identifier: 19:70:8E:73:F5:7F:66:18:22:FE:81:6A:AB:33:33:1A:F5:4A:3A:43 Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F43285849D2CA251F57B1BCFF23728580 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 40232 IP address blocks: 204.48.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:25:1f:57:b1:bc:ff:23:72:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=89ba8fa1-25ab-49d5-b8ff-362a563ea1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:c6:37:5d:7b:a1:28:5e:d9:0c:7d:96:36: 49:3a:cb:a1:d0:7c:51:77:e4:bf:ab:f0:b2:c0:6f: 61:00:64:54:a9:30:f5:76:95:2f:76:38:30:91:5f: 36:99:f8:9c:c4:be:e5:8e:a8:61:48:8f:23:27:83: a8:08:3c:76:f2:b5:18:39:81:08:8d:b5:3f:d6:4f: 31:81:56:5d:8f:89:32:20:10:d1:fb:09:18:57:44: 7f:a9:b4:22:20:d4:fd:15:8c:56:e9:c1:06:66:8f: f5:7f:48:62:36:63:4d:87:a9:5d:1b:41:8d:87:6f: e6:3b:60:5c:08:24:fe:54:ed:0e:8d:79:e9:8c:6e: 31:a3:2d:86:0b:c2:59:73:09:92:4d:d9:4f:97:44: 01:22:60:b5:ab:17:2c:e5:3d:8c:73:3f:d0:16:28: 60:bf:05:6a:37:f6:00:db:01:34:4a:50:79:7a:61: 9d:dd:15:af:6d:3c:50:1c:2e:44:54:2b:e9:79:ab: 26:74:47:70:19:18:a9:34:16:1d:8a:27:8f:b0:70: 5c:c4:d1:49:09:4a:6b:b1:e5:0f:94:8d:1f:59:57: 38:ba:01:2b:e9:3a:2e:8a:f9:e4:1e:50:ed:b5:1b: e5:b3:af:29:9d:48:57:52:5b:34:84:80:d7:3e:e0: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:70:8E:73:F5:7F:66:18:22:FE:81:6A:AB:33:33:1A:F5:4A:3A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/bc5e84cf-7054-33de-a6ee-90c33318d8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 204.48.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e7:df:62:fc:f3:b1:59:39:0a:47:bc:2d:90:19:f4:9f:81: 8a:3d:94:af:42:af:a9:c1:31:30:ba:ce:e3:1f:a3:9e:f4:96: 25:21:da:c3:6b:4b:e1:b2:2e:94:74:30:57:5e:3d:ee:de:14: 85:ff:48:d5:94:a4:30:2b:3b:d1:b4:c1:6e:64:a0:ad:f5:d7: a7:4b:bc:6d:47:a1:00:1f:d4:66:85:57:f5:b1:9d:f3:4b:c7: f7:cf:f0:e5:f3:8d:8b:31:a3:f4:6f:05:b4:40:f1:ea:90:dd: bf:54:fa:a5:cc:af:bf:ad:9d:a5:ff:c8:e9:e6:0d:8d:97:8e: be:59:9b:c9:ba:5e:0e:a7:cf:2c:ff:94:aa:68:0d:e3:14:78: 56:28:d0:46:36:65:6a:c3:d6:fd:d0:b6:11:7b:af:a3:33:7a: 46:98:c1:e2:1e:0b:c5:12:49:6b:53:a6:07:83:a9:7b:bb:3f: 40:b6:fe:8a:75:b1:e7:76:25:6d:e4:5e:ef:fe:86:e4:91:be: 49:36:0c:5c:a7:de:90:15:5b:7b:37:44:d1:18:9a:f1:33:2d: 06:0e:ae:8f:73:ac:ac:79:26:e0:bc:45:3d:b4:54:0f:19:51: 08:88:e5:56:f5:8b:09:a0:d2:b9:d5:e6:11:60:44:54:05:d7: dd:54:05:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiUfV7G8/yNyhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ODliYThmYTEtMjVhYi00OWQ1LWI4ZmYtMzYyYTU2M2VhMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkevGN117oShe2Qx9ljZJOsuh0HxRd+S/q/Cy wG9hAGRUqTD1dpUvdjgwkV82mficxL7ljqhhSI8jJ4OoCDx28rUYOYEIjbU/1k8x gVZdj4kyIBDR+wkYV0R/qbQiINT9FYxW6cEGZo/1f0hiNmNNh6ldG0GNh2/mO2Bc CCT+VO0OjXnpjG4xoy2GC8JZcwmSTdlPl0QBImC1qxcs5T2Mcz/QFihgvwVqN/YA 2wE0SlB5emGd3RWvbTxQHC5EVCvpeasmdEdwGRipNBYdiiePsHBcxNFJCUprseUP lI0fWVc4ugEr6TouivnkHlDttRvls68pnUhXUls0hIDXPuAbwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlwjnP1f2YYIv6BaqszMxr1SjpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvYmM1ZTg0Y2YtNzA1NC0z M2RlLWE2ZWUtOTBjMzMzMThkOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzDBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnn32L887FZOQpHvC2QGfSfgYo9lK9Cr6nBMTC6zuMfo570liUh2sNr S+GyLpR0MFdePe7eFIX/SNWUpDArO9G0wW5koK3116dLvG1HoQAf1GaFV/WxnfNL x/fP8OXzjYsxo/RvBbRA8eqQ3b9U+qXMr7+tnaX/yOnmDY2Xjr5Zm8m6Xg6nzyz/ lKpoDeMUeFYo0EY2ZWrD1v3QthF7r6MzekaYweIeC8USSWtTpgeDqXu7P0C2/op1 sed2JW3kXu/+huSRvkk2DFyn3pAVW3s3RNEYmvEzLQYOro9zrKx5JuC8RT20VA8Z UQiI5Vb1iwmg0rnV5hFgRFQF191UBac= -----END CERTIFICATE-----Generated at Tue Jul 1 08:54:01 2025 by rpki-client