$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9aa020-6dd2-3a2b-ac2d-8744c80db159.roa File: 8b9aa020-6dd2-3a2b-ac2d-8744c80db159.roa (raw, json) Hash identifier: pSojozKpnuafTd9Tww3+vHob5IjDmAdnTY556tSGfbg= Subject key identifier: 4F:3A:72:6D:7A:23:4F:3C:F4:EA:E0:DB:19:9C:D2:49:67:14:0E:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB40F8FA49255ED88A85C100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9aa020-6dd2-3a2b-ac2d-8744c80db159.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 96.16.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f8:fa:49:25:5e:d8:8a:85:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=aeb2f46d-ffb9-4f49-b21a-70681e9abb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:83:2e:dc:1f:30:79:45:c7:ae:cd:b7:31: 6d:f6:98:c2:6c:23:52:6e:d7:73:25:04:d8:5d:e8: 79:0c:63:fd:76:f9:04:a6:99:c8:af:ec:8c:9f:6e: c8:bc:2d:2b:10:4a:d0:5f:d8:16:ba:5c:f0:c6:98: 0c:37:77:df:e7:31:78:80:09:4c:3b:61:c8:ee:ba: ad:b7:66:a3:a5:7f:ca:7f:3c:05:db:c8:2d:b9:27: bd:eb:63:c7:22:3d:67:49:04:62:56:d7:6f:55:a0: 8c:a0:65:8b:63:d7:bd:e4:9d:b0:f8:1e:16:a4:4e: b1:98:c5:f4:28:26:28:1a:e2:8d:b7:0d:9c:ca:a2: d3:eb:c3:16:1c:05:19:8a:53:81:99:73:d5:a2:48: d6:18:62:d8:85:c7:6b:f8:61:30:1b:24:df:70:35: 73:f1:7e:21:3e:1c:01:86:73:9a:bc:0f:ca:04:2c: d2:44:af:e8:52:f3:1e:28:6b:6b:dd:36:c2:5f:d6: 6b:da:b2:a3:c7:09:17:ec:3c:05:f7:8b:8d:5e:9d: f0:85:a0:89:61:c2:d7:cf:a9:9f:d8:50:af:ba:9b: ec:6c:75:c9:22:7d:9f:86:ad:d9:82:34:bd:9e:07: 9e:d6:fd:9c:f8:20:3f:ee:cb:c5:57:39:26:7d:17: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3A:72:6D:7A:23:4F:3C:F4:EA:E0:DB:19:9C:D2:49:67:14:0E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b9aa020-6dd2-3a2b-ac2d-8744c80db159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ac:6f:28:73:e7:11:48:02:db:75:ef:ee:f1:c6:f8:e1:9a: 38:ff:d8:39:55:b3:03:e2:d7:55:96:5d:dc:df:92:e9:8d:d9: 17:15:b6:2b:f2:c7:fd:70:30:68:99:7a:a7:c9:83:be:cc:f4: bc:4d:8a:20:1e:94:36:3c:16:a6:e9:0e:7b:05:ff:5c:41:8a: 73:b3:67:ad:6b:a5:1c:28:d1:5d:72:d3:f3:b8:1a:36:d7:fb: cd:8f:c0:de:09:c6:90:22:de:83:00:5a:f3:25:96:70:b2:13: 6f:f1:e5:fd:9f:43:fd:cc:70:f3:76:3e:d6:3b:45:12:57:ec: 3a:cc:4a:aa:0a:25:a7:ae:94:f7:6a:03:4b:89:92:50:11:65: cb:88:3c:60:72:05:1c:f7:be:89:64:62:1d:ec:e7:9b:cc:e9: 73:c2:7b:c2:9c:48:38:02:ba:22:9d:3c:92:af:89:17:41:cb: 04:f5:1b:d7:c9:62:a9:e9:c4:13:74:ef:dd:fa:66:5b:7f:26: a4:51:d8:74:6a:49:d4:32:ba:9e:f7:7c:ab:c4:b7:d1:bf:5b: 12:a5:17:0c:11:6e:6b:9f:a7:ce:14:88:8b:24:c7:c4:f9:4b: fd:3f:50:c2:0a:8a:69:2b:4d:40:40:ff:2e:71:99:49:ea:80: 4a:78:a5:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPj6SSVe2IqFwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YWViMmY0NmQtZmZiOS00ZjQ5LWIyMWEtNzA2ODFlOWFiYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBSDLtwfMHlFx67NtzFt9pjCbCNSbtdzJQTY Xeh5DGP9dvkEppnIr+yMn27IvC0rEErQX9gWulzwxpgMN3ff5zF4gAlMO2HI7rqt t2ajpX/KfzwF28gtuSe962PHIj1nSQRiVtdvVaCMoGWLY9e95J2w+B4WpE6xmMX0 KCYoGuKNtw2cyqLT68MWHAUZilOBmXPVokjWGGLYhcdr+GEwGyTfcDVz8X4hPhwB hnOavA/KBCzSRK/oUvMeKGtr3TbCX9Zr2rKjxwkX7DwF94uNXp3whaCJYcLXz6mf 2FCvupvsbHXJIn2fhq3ZgjS9ngee1v2c+CA/7svFVzkmfRdB6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE86cm16I0889Org2xmc0klnFA6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI5YWEwMjAtNmRkMi0z YTJiLWFjMmQtODc0NGM4MGRiMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBA1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACusbyhz5xFIAtt17+7xxvjhmjj/2DlVswPi11WWXdzfkumN2RcVtivy x/1wMGiZeqfJg77M9LxNiiAelDY8FqbpDnsF/1xBinOzZ61rpRwo0V1y0/O4GjbX +82PwN4JxpAi3oMAWvMllnCyE2/x5f2fQ/3McPN2PtY7RRJX7DrMSqoKJaeulPdq A0uJklARZcuIPGByBRz3volkYh3s55vM6XPCe8KcSDgCuiKdPJKviRdBywT1G9fJ YqnpxBN07936Zlt/JqRR2HRqSdQyup73fKvEt9G/WxKlFwwRbmufp84UiIskx8T5 S/0/UMIKimkrTUBA/y5xmUnqgEp4pTA= -----END CERTIFICATE-----Generated at Sat Aug 23 13:06:26 2025 by rpki-client