$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa File: 4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa (raw, json) Hash identifier: eGaSmifaLy7uBdYa30+8lMd3QgBUpmBH0x9wq+mRDWk= Subject key identifier: 02:31:42:27:25:FC:E8:88:6E:9D:05:49:F2:C7:F3:0E:76:5B:A2:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E11AA57F1510724FE4AC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 96.7.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1a:a5:7f:15:10:72:4f:e4:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=bae4025c-def4-47e6-a8ff-f9ac7c40297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:cb:35:02:90:17:67:fc:ed:48:42:7f:35: 7b:b9:ab:54:28:bd:ee:8b:40:0c:f9:a0:d8:1b:c2: d0:88:71:1f:1f:a8:86:21:cb:3e:9d:42:fd:37:e3: 3a:f1:14:4a:80:20:8e:ce:80:f1:0b:a7:3d:09:22: c4:fc:fa:4d:ff:c6:c9:76:cc:a7:9f:bb:52:a1:4e: 9a:b0:ff:ca:38:f2:e5:1b:00:8b:50:5b:97:fc:23: c1:18:1f:09:fd:34:1c:5d:6f:c6:f2:1b:e7:c4:49: 08:6b:32:ce:d6:8b:56:45:b0:f5:40:26:85:67:d6: 1d:86:70:0f:53:9a:2f:7b:b5:26:50:17:df:5f:ca: 10:b8:9a:1d:75:62:1d:81:43:1f:39:ed:8b:06:7b: 0a:93:6f:56:d6:b6:91:30:40:a9:06:26:70:c4:80: 83:95:73:9e:91:24:b9:ca:c7:18:29:6a:78:55:f5: ab:fb:f1:b0:97:40:1a:90:29:ea:fa:9d:56:e5:fa: 77:da:99:de:91:e4:69:4f:f3:0c:24:ae:59:cb:20: 0f:70:fd:29:98:1f:d2:62:6f:a6:96:28:7c:79:a1: 5d:1b:b7:67:4c:79:c7:47:0a:3b:56:3f:68:09:e7: e7:30:4e:53:d2:2e:fb:92:e3:e7:0c:42:14:49:0d: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:31:42:27:25:FC:E8:88:6E:9D:05:49:F2:C7:F3:0E:76:5B:A2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4faa5fe8-4a5c-3c4e-8b97-b8ae09e1b162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ff:41:b4:c7:d1:f8:0b:31:35:15:6b:b3:fe:f4:c5:6e:3b: 73:c3:46:ef:b8:7d:dc:54:09:8c:7d:f5:11:ea:d1:8f:ee:a8: fe:da:1d:f7:8c:98:8c:9e:d0:e7:d7:7a:02:a8:fa:6f:17:9e: b3:39:6e:47:3a:51:b4:39:14:ee:63:91:d1:45:5d:ae:d1:98: ce:be:5c:2e:ca:85:02:1e:4f:46:d3:8c:c3:cf:b0:12:ef:75: 05:e8:c0:39:fa:f7:ac:a5:31:5e:3d:f3:cc:2b:ab:5d:85:36: 73:7d:ca:5b:da:01:6f:df:17:c2:2f:40:9a:43:03:f8:5a:d5: 58:bf:12:b3:53:38:94:77:d2:7f:aa:8f:0a:71:73:f0:93:46: 2b:bc:19:1a:bd:f9:c4:91:07:2d:48:10:36:23:06:b8:44:a0: 23:94:7f:76:59:73:43:e1:d8:8f:66:38:a3:4f:59:2d:5e:09: 4f:08:ff:8b:4c:be:49:8b:e8:12:4e:70:58:2a:56:9b:ec:05: bf:63:60:6d:3d:20:43:02:b4:b4:ea:70:d2:e1:2c:15:47:9f: 30:7b:0c:f4:c3:3b:21:23:a9:66:9c:4e:65:d9:08:c8:ba:76: 47:ef:f4:53:a3:78:b9:bd:26:d4:60:29:ee:70:b2:01:cc:5c: e0:64:dd:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RqlfxUQck/krEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YmFlNDAyNWMtZGVmNC00N2U2LWE4ZmYtZjlhYzdjNDAyOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1nLNQKQF2f87UhCfzV7uatUKL3ui0AM+aDY G8LQiHEfH6iGIcs+nUL9N+M68RRKgCCOzoDxC6c9CSLE/PpN/8bJdsynn7tSoU6a sP/KOPLlGwCLUFuX/CPBGB8J/TQcXW/G8hvnxEkIazLO1otWRbD1QCaFZ9YdhnAP U5ove7UmUBffX8oQuJoddWIdgUMfOe2LBnsKk29W1raRMECpBiZwxICDlXOekSS5 yscYKWp4VfWr+/Gwl0AakCnq+p1W5fp32pnekeRpT/MMJK5ZyyAPcP0pmB/SYm+m lih8eaFdG7dnTHnHRwo7Vj9oCefnME5T0i77kuPnDEIUSQ1LZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIxQicl/OiIbp0FSfLH8w52W6KpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGZhYTVmZTgtNGE1Yy0z YzRlLThiOTctYjhhZTA5ZTFiMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7/QbTH0fgLMTUVa7P+9MVuO3PDRu+4fdxUCYx99RHq0Y/uqP7aHfeM mIye0OfXegKo+m8XnrM5bkc6UbQ5FO5jkdFFXa7RmM6+XC7KhQIeT0bTjMPPsBLv dQXowDn696ylMV4988wrq12FNnN9ylvaAW/fF8IvQJpDA/ha1Vi/ErNTOJR30n+q jwpxc/CTRiu8GRq9+cSRBy1IEDYjBrhEoCOUf3ZZc0Ph2I9mOKNPWS1eCU8I/4tM vkmL6BJOcFgqVpvsBb9jYG09IEMCtLTqcNLhLBVHnzB7DPTDOyEjqWacTmXZCMi6 dkfv9FOjeLm9JtRgKe5wsgHMXOBk3eI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:44:27 2025 by rpki-client