$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa File: 0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa (raw, json) Hash identifier: FiFS+rVKebfWGNQxdpmPpD3onbFwk4tXxnOLt9F1aUs= Subject key identifier: 42:76:64:C9:28:17:8E:8C:9D:C8:5C:FC:DC:D1:53:14:65:66:93:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E1136783D7E6A6041F6A60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 96.7.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:13:67:83:d7:e6:a6:04:1f:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=42d6824d-5c79-4460-ab30-66c6dfd6f722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1b:a5:2c:0a:8f:a6:7f:89:2c:8d:8f:e6:9c: 32:4f:cc:15:f0:fd:f0:d6:c7:c1:88:0a:e4:31:81: 85:24:73:d3:8d:0f:2b:3e:dc:b6:55:8a:7e:e8:5a: 6a:ca:f6:f3:6b:38:77:fc:ba:d5:0c:43:e6:d6:21: 22:2d:41:56:71:80:f7:7d:25:aa:75:98:83:6c:99: 91:a8:18:6d:7b:05:cf:f2:ed:ad:06:54:44:f1:f4: 5c:99:2f:31:0e:7b:0c:7d:dc:b7:62:b5:4a:71:f1: 1f:8f:ef:e5:73:cc:71:1c:71:10:da:f7:d0:5c:4c: c3:94:1d:dd:f8:e3:e6:fd:4d:cb:35:c8:58:90:8f: d6:db:be:72:67:24:a9:2d:e7:be:c4:b4:57:41:9d: 8a:3b:6c:a7:8a:aa:89:3d:39:18:43:3d:ea:4d:cd: e9:94:65:88:23:6e:e4:6e:8e:25:7a:c1:50:45:7d: a2:30:b3:89:de:b2:bc:73:9d:dd:c0:9b:91:73:a7: e6:7b:9c:8b:8f:a4:75:53:bc:47:77:ad:da:6f:8b: 60:81:b6:b8:c7:19:cb:bf:45:3d:55:c8:90:b0:80: 83:b4:fa:f7:05:d4:da:db:94:70:1b:84:7d:97:a0: f8:bf:d5:c5:2e:c5:99:dd:67:b4:40:63:2c:e6:49: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:76:64:C9:28:17:8E:8C:9D:C8:5C:FC:DC:D1:53:14:65:66:93:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ce:45:da:f8:d8:87:c4:6b:11:7e:3e:0f:cd:0d:30:1a:cc: 10:cf:92:42:3d:64:95:c8:23:1e:8a:47:a1:3c:9a:9f:69:85: ee:9c:20:51:18:56:07:d1:84:e4:ab:3d:bc:86:90:7f:f0:52: ed:fd:2f:c6:28:c7:6f:b9:20:8b:27:fa:c6:bf:ef:a6:40:7d: dd:90:96:5f:19:b1:1c:b6:1c:21:95:be:43:44:bc:6d:72:6e: d3:8c:04:ea:d6:fe:59:5c:41:80:d8:9c:9c:95:d7:03:66:0f: 20:45:88:4a:15:1e:0e:fb:dd:22:42:d6:b0:24:5a:43:ce:bf: 8f:66:5a:9b:7a:bf:3c:42:3d:ce:87:5a:81:cd:cc:d6:8e:f9: c4:9c:87:9c:56:e9:02:e1:9e:22:1c:6c:76:c6:0d:6f:ab:34: 64:a0:8c:a1:1c:f5:6c:fe:75:96:7b:9b:ee:3f:19:d3:37:bc: ac:12:78:54:e6:c2:9d:9e:ea:8b:24:e5:f1:86:f5:29:c8:c7: af:44:a8:a7:48:22:ab:2b:3b:ce:0f:c7:6b:d6:39:44:cc:ed: 7c:4c:20:c7:29:8f:53:56:67:65:90:46:96:6e:9f:1e:eb:4b: 03:38:5e:d1:d8:18:27:c1:50:54:44:4d:8a:17:a4:b4:8c:05: ab:09:42:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RNng9fmpgQfamAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDJkNjgyNGQtNWM3OS00NDYwLWFiMzAtNjZjNmRmZDZmNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRulLAqPpn+JLI2P5pwyT8wV8P3w1sfBiArk MYGFJHPTjQ8rPty2VYp+6Fpqyvbzazh3/LrVDEPm1iEiLUFWcYD3fSWqdZiDbJmR qBhtewXP8u2tBlRE8fRcmS8xDnsMfdy3YrVKcfEfj+/lc8xxHHEQ2vfQXEzDlB3d +OPm/U3LNchYkI/W275yZySpLee+xLRXQZ2KO2yniqqJPTkYQz3qTc3plGWII27k bo4lesFQRX2iMLOJ3rK8c53dwJuRc6fme5yLj6R1U7xHd63ab4tggba4xxnLv0U9 VciQsICDtPr3BdTa25RwG4R9l6D4v9XFLsWZ3We0QGMs5knUFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ2ZMkoF46Mnchc/NzRUxRlZpMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNhMzBiNzgtZmU4MS0z ZjVjLThiYTgtMGE1NjBlMzBlNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvORdr42IfEaxF+Pg/NDTAazBDPkkI9ZJXIIx6KR6E8mp9phe6cIFEY VgfRhOSrPbyGkH/wUu39L8Yox2+5IIsn+sa/76ZAfd2Qll8ZsRy2HCGVvkNEvG1y btOMBOrW/llcQYDYnJyV1wNmDyBFiEoVHg773SJC1rAkWkPOv49mWpt6vzxCPc6H WoHNzNaO+cSch5xW6QLhniIcbHbGDW+rNGSgjKEc9Wz+dZZ7m+4/GdM3vKwSeFTm wp2e6osk5fGG9SnIx69EqKdIIqsrO84Px2vWOUTM7XxMIMcpj1NWZ2WQRpZunx7r SwM4XtHYGCfBUFRETYoXpLSMBasJQn0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:40:04 2025 by rpki-client