$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa File: 65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa (raw, json) Hash identifier: UMWiY4Q+ppgZ+FpiKYnsxE64D0EQ7IE9j3ctCOtXQAo= Subject key identifier: ED:3E:31:48:EF:43:EE:3B:DF:76:37:DD:6C:88:CB:BA:40:46:3C:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB40F8E7D1FC86F918F8AA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 96.16.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f8:e7:d1:fc:86:f9:18:f8:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=629f50d9-93ba-458b-a901-b7bf8b0d59f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:00:e9:f9:45:0c:16:4d:47:6c:e4:99:44: 92:80:95:70:9a:c6:47:12:c1:c7:d6:f8:fe:11:e0: ae:24:ed:c9:69:75:fd:18:dc:fd:4b:c5:88:15:46: 3d:01:0e:7c:af:29:8b:95:96:c9:70:ce:ad:f8:c4: dc:5b:42:b0:71:4e:f9:00:e1:5d:4d:8a:97:88:f3: 68:00:cf:b0:54:d4:ea:df:b2:f6:39:82:61:cf:10: 5c:a1:a3:c6:f3:b3:45:fe:80:05:5c:50:0e:a3:db: 9e:5f:9d:be:62:96:04:12:da:ff:f8:a4:fb:a8:2b: c2:05:3b:a8:c2:2e:85:11:d7:4f:48:e5:d3:1f:b3: 19:29:64:98:e4:6f:61:f3:ab:2a:16:f5:f6:b3:e5: 7a:5b:e4:c3:37:37:0c:7e:fe:ea:79:13:ac:4c:b5: 5a:b9:9f:e0:56:04:fa:a6:4c:7f:96:77:2b:e0:78: a6:d7:5b:22:b8:5a:66:51:39:84:ae:62:d0:c7:9d: b2:78:48:24:c7:b6:d4:a0:50:88:8b:e2:0c:ab:7b: ad:27:53:f7:74:91:f8:0c:5b:db:25:48:09:fc:ba: f8:51:96:b2:d2:82:8d:1f:98:37:1b:a9:9f:5b:0c: f4:c2:e3:6d:b1:41:44:ef:be:ae:21:9e:04:3d:63: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3E:31:48:EF:43:EE:3B:DF:76:37:DD:6C:88:CB:BA:40:46:3C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65d40c1c-f86f-3edf-8f6a-aa703857be7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:74:7e:26:c1:7b:c1:b9:9c:78:ed:99:55:7f:fd:ca:80:5e: fd:fc:0b:74:10:a0:d2:1f:18:d6:2a:02:cb:53:4a:7d:eb:72: bd:bb:46:52:e0:c5:90:5b:ec:d1:38:59:ab:8b:8b:d6:bd:4a: 84:2a:52:c7:5a:0e:f4:19:e2:cc:d8:78:bf:f8:56:50:73:e4: e7:bd:4b:4a:4a:e2:31:22:45:b1:dc:6c:79:26:c2:70:1c:6f: 65:c5:19:31:66:d5:4d:bb:21:00:ea:5a:48:b3:d8:8a:31:a6: f6:eb:35:f2:27:7d:d7:7c:59:0e:fb:7d:93:07:4e:b6:5d:47: 2f:b7:c2:90:8c:de:a3:27:39:ee:76:14:ed:d3:26:83:41:9a: 7f:83:53:e5:e9:36:63:8f:1a:69:9c:c5:a7:5c:1c:85:2f:8f: 6a:88:c3:e4:5d:e9:48:e4:46:77:21:de:a3:44:f3:b4:c4:d7: b0:d5:a2:a3:6c:53:1c:61:a5:75:f8:3b:bd:27:dc:1d:f6:fa: 9f:2b:81:0f:b5:d7:5c:cc:4d:3a:d1:0d:e6:73:31:42:2a:ec: 72:0a:2d:ff:4f:a4:c5:5d:c3:12:94:96:6e:37:b4:c7:cb:24: 61:1d:3d:9c:8d:f4:20:f8:20:b1:ad:3b:78:dd:e3:ed:8c:6d: ef:68:a5:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPjn0fyG+Rj4qgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NjI5ZjUwZDktOTNiYS00NThiLWE5MDEtYjdiZjhiMGQ1OWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1UA6flFDBZNR2zkmUSSgJVwmsZHEsHH1vj+ EeCuJO3JaXX9GNz9S8WIFUY9AQ58rymLlZbJcM6t+MTcW0KwcU75AOFdTYqXiPNo AM+wVNTq37L2OYJhzxBcoaPG87NF/oAFXFAOo9ueX52+YpYEEtr/+KT7qCvCBTuo wi6FEddPSOXTH7MZKWSY5G9h86sqFvX2s+V6W+TDNzcMfv7qeROsTLVauZ/gVgT6 pkx/lncr4Him11siuFpmUTmErmLQx52yeEgkx7bUoFCIi+IMq3utJ1P3dJH4DFvb JUgJ/Lr4UZay0oKNH5g3G6mfWwz0wuNtsUFE776uIZ4EPWMtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0+MUjvQ+4733Y33WyIy7pARjwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVkNDBjMWMtZjg2Zi0z ZWRmLThmNmEtYWE3MDM4NTdiZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd0fibBe8G5nHjtmVV//cqAXv38C3QQoNIfGNYqAstTSn3rcr27RlLg xZBb7NE4WauLi9a9SoQqUsdaDvQZ4szYeL/4VlBz5Oe9S0pK4jEiRbHcbHkmwnAc b2XFGTFm1U27IQDqWkiz2IoxpvbrNfInfdd8WQ77fZMHTrZdRy+3wpCM3qMnOe52 FO3TJoNBmn+DU+XpNmOPGmmcxadcHIUvj2qIw+Rd6UjkRnch3qNE87TE17DVoqNs UxxhpXX4O70n3B32+p8rgQ+111zMTTrRDeZzMUIq7HIKLf9PpMVdwxKUlm43tMfL JGEdPZyN9CD4ILGtO3jd4+2Mbe9opZ8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:42 2025 by rpki-client