$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa File: 9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa (raw, json) Hash identifier: gGPcthsaV/tnRpL0lfI/iLPPGqdi1f94x/f68suqJL8= Subject key identifier: 37:94:91:BE:A1:88:81:03:3F:AE:4F:05:E2:0E:D8:CF:4E:F1:38:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E119C3FA6CB9F522252898 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 96.7.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:19:c3:fa:6c:b9:f5:22:25:28:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=019eca72-2114-419a-adbb-18d05e5f3092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c3:a8:60:13:0b:40:c7:49:8d:63:15:6a:c4: ab:f9:fb:a8:69:3e:51:0b:e5:f2:fe:34:8e:f3:5a: 70:9a:ac:7b:51:f8:b1:f1:d2:19:35:ce:49:42:0a: a4:cd:29:d8:af:04:f7:57:32:55:2c:de:4d:87:bc: cf:bb:b3:62:78:fd:b7:11:ea:93:ac:e7:af:7f:e5: b4:b3:22:57:1a:98:45:ca:92:ad:74:ef:1e:2b:0a: 1a:04:fd:98:d3:49:88:1a:50:35:45:15:7d:1f:d5: b1:36:25:70:f4:f3:50:bb:ba:d6:64:1e:1e:5a:30: 4e:78:6c:93:8a:24:35:16:43:63:45:8e:84:b3:1f: 83:3d:50:bf:27:f7:d1:e3:f1:82:2f:d7:e0:f6:54: 29:47:8a:67:7f:2b:6c:3d:ab:98:51:75:a2:8e:28: 03:8a:84:dd:bb:55:94:14:aa:06:bf:50:2a:63:dc: 94:a7:d9:49:be:e3:49:7e:06:3f:12:3f:a5:e3:2e: 02:01:d7:b0:f0:c8:54:2d:3f:c8:c1:80:ca:00:83: 59:b6:6f:df:d6:cc:53:44:8c:c4:bb:d0:0e:bf:02: 6e:5c:d2:d5:24:4a:90:f6:ca:f1:96:61:ce:51:ea: 0b:36:79:dc:fb:29:5d:ea:da:29:fe:72:a8:07:fc: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:94:91:BE:A1:88:81:03:3F:AE:4F:05:E2:0E:D8:CF:4E:F1:38:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af2c346-5e85-36ec-a4ee-6c0acf45b81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1a:9e:5b:1d:cb:cc:c7:6b:7d:24:f4:92:01:2b:58:e0:94: d8:5d:64:02:3d:fc:92:19:19:cf:b0:ec:66:af:b5:20:73:80: a0:b0:1a:fb:a0:58:ac:1c:c5:09:35:e0:a1:7f:6c:6b:03:9b: c4:39:ec:df:2a:47:fd:19:dc:32:cf:63:a3:4e:3d:d6:3d:99: 0c:a9:e2:b4:a4:c2:3c:16:4c:28:8a:96:63:04:a5:83:85:5d: 87:62:41:c8:d9:fa:cd:85:0d:91:48:f7:7b:85:ca:33:c1:bf: 92:7d:c9:0b:a9:8e:65:17:52:65:04:9e:3b:5c:95:d6:db:e9: 00:1f:6a:b9:7c:2b:b0:30:b0:24:01:2d:e4:6f:1d:3d:98:4f: 81:5b:c1:1c:7d:9a:d4:25:68:cf:6a:d0:22:56:6b:23:2f:ef: 14:f0:42:6c:d2:9d:b1:7c:32:ad:fd:3c:77:3d:6b:e3:f5:73: 61:55:10:8e:34:99:f6:cf:cb:67:d0:69:91:db:a4:9c:50:8d: 5c:fd:b6:39:ed:42:55:59:23:84:63:d7:9c:ef:5b:d8:2d:7c: ee:90:15:dd:81:f7:7d:7e:56:1d:36:e9:c6:93:53:2c:3a:dd: a3:d9:de:4c:fa:5d:61:42:d2:06:c4:c3:36:84:02:64:c5:10: d3:8b:1b:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RnD+my59SIlKJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MDE5ZWNhNzItMjExNC00MTlhLWFkYmItMThkMDVlNWYzMDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMOoYBMLQMdJjWMVasSr+fuoaT5RC+Xy/jSO 81pwmqx7Ufix8dIZNc5JQgqkzSnYrwT3VzJVLN5Nh7zPu7NieP23EeqTrOevf+W0 syJXGphFypKtdO8eKwoaBP2Y00mIGlA1RRV9H9WxNiVw9PNQu7rWZB4eWjBOeGyT iiQ1FkNjRY6Esx+DPVC/J/fR4/GCL9fg9lQpR4pnfytsPauYUXWijigDioTdu1WU FKoGv1AqY9yUp9lJvuNJfgY/Ej+l4y4CAdew8MhULT/IwYDKAINZtm/f1sxTRIzE u9AOvwJuXNLVJEqQ9srxlmHOUeoLNnnc+yld6top/nKoB/xjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeUkb6hiIEDP65PBeIO2M9O8TgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFmMmMzNDYtNWU4NS0z NmVjLWE0ZWUtNmMwYWNmNDViODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAanlsdy8zHa30k9JIBK1jglNhdZAI9/JIZGc+w7GavtSBzgKCwGvug WKwcxQk14KF/bGsDm8Q57N8qR/0Z3DLPY6NOPdY9mQyp4rSkwjwWTCiKlmMEpYOF XYdiQcjZ+s2FDZFI93uFyjPBv5J9yQupjmUXUmUEnjtcldbb6QAfarl8K7AwsCQB LeRvHT2YT4FbwRx9mtQlaM9q0CJWayMv7xTwQmzSnbF8Mq39PHc9a+P1c2FVEI40 mfbPy2fQaZHbpJxQjVz9tjntQlVZI4Rj15zvW9gtfO6QFd2B931+Vh026caTUyw6 3aPZ3kz6XWFC0gbEwzaEAmTFENOLGyA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:32 2025 by rpki-client