$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa File: caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa (raw, json) Hash identifier: lt1k4e40LXoTbfWOitL+pPY05kz00Mytdet3Z7ot/EU= Subject key identifier: 41:C7:F0:99:A3:5D:71:CE:EC:91:A0:DC:29:E1:19:CE:A6:B6:B5:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC2E1194B23D143EDB93CE600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 96.7.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:19:4b:23:d1:43:ed:b9:3c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=3b9db31d-73cb-41eb-9142-22d8860bb379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:5a:14:c3:e6:2a:e2:f0:48:b2:c3:93:84: 5f:00:34:67:8f:6e:03:2b:22:29:ff:90:8c:7f:9b: 97:2a:6e:25:6a:9f:b6:6c:39:37:b3:91:62:b5:3a: 37:02:97:50:8e:b9:9d:97:bb:5d:35:fb:67:95:1d: cb:be:81:2e:81:8b:8c:95:c4:b9:45:84:22:78:09: 03:5b:51:b1:57:f2:1c:49:e8:28:b6:1d:02:4d:5d: e4:18:17:0c:a0:aa:bd:ea:9c:61:01:5d:fc:ca:3a: 6e:1b:50:af:15:b9:43:00:4d:62:13:00:d1:fc:2f: 94:3f:fd:eb:9b:9d:9a:fb:4c:48:fa:33:83:81:e3: 29:56:c6:11:dd:d1:aa:8e:17:ee:64:d2:e8:cd:59: 48:c8:30:f9:7e:3a:e8:4d:0c:ed:04:0f:60:22:79: 8f:81:2f:47:dc:74:3c:75:ed:85:d0:15:23:6a:23: 4f:c2:69:c8:79:03:52:b6:05:f4:4a:c9:93:a2:a2: 9a:6b:3b:60:fc:73:48:b0:80:6c:06:91:b8:f3:f1: f2:f2:1b:37:34:30:eb:11:fe:86:12:85:82:f1:a2: 30:cc:59:45:18:25:aa:5b:28:75:f4:32:a5:33:4c: cf:f0:ee:ed:e2:b8:6a:db:67:a9:7e:d8:3f:2f:6b: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C7:F0:99:A3:5D:71:CE:EC:91:A0:DC:29:E1:19:CE:A6:B6:B5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caaf7ec4-4b17-3f15-aa12-f559dd18d17c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.7.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:74:58:9b:ad:a4:f5:04:f6:1b:ac:e0:d5:1e:87:63:4a:84: 0b:32:df:5f:38:02:b8:a6:34:42:70:de:95:6a:93:e4:2d:37: f8:10:e1:3c:0c:f7:04:6d:13:f4:a6:33:58:3c:fa:d4:05:18: ca:fd:ce:74:ea:bd:af:01:a6:a3:12:40:06:21:b4:cb:27:27: 93:21:a9:d9:25:56:4f:48:16:56:20:ad:9b:b9:5e:94:00:f3: 5a:60:27:f8:a2:9e:2d:df:89:ee:f5:3c:26:2a:3a:4d:cb:cc: 53:40:b7:6d:80:dc:a6:6b:21:ed:11:31:20:4d:00:38:89:5d: 14:dc:1e:7c:2e:df:72:9e:b7:9c:4a:ef:a2:b5:44:d0:07:66: 82:41:ee:9b:4b:5b:98:d5:35:47:fe:42:9c:a4:e7:b3:8a:b9: aa:96:36:aa:07:e7:0a:9b:66:db:33:48:70:91:15:10:21:fb: dc:9c:b4:76:ef:72:79:c4:6b:a5:82:0e:b2:8f:e1:07:1c:e4: 74:20:a4:13:68:b7:9d:c5:00:1c:c9:3c:f8:4c:49:34:68:80: b0:7d:06:ea:97:88:de:fd:f6:fb:e0:4b:8d:2b:e5:15:03:a3: 48:fb:87:ef:e5:8c:95:b4:7a:30:8d:d6:36:64:8a:88:ee:96: f7:46:b3:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RlLI9FD7bk85gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2I5ZGIzMWQtNzNjYi00MWViLTkxNDItMjJkODg2MGJiMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDVaFMPmKuLwSLLDk4RfADRnj24DKyIp/5CM f5uXKm4lap+2bDk3s5FitTo3ApdQjrmdl7tdNftnlR3LvoEugYuMlcS5RYQieAkD W1GxV/IcSegoth0CTV3kGBcMoKq96pxhAV38yjpuG1CvFblDAE1iEwDR/C+UP/3r m52a+0xI+jODgeMpVsYR3dGqjhfuZNLozVlIyDD5fjroTQztBA9gInmPgS9H3HQ8 de2F0BUjaiNPwmnIeQNStgX0SsmToqKaaztg/HNIsIBsBpG48/Hy8hs3NDDrEf6G EoWC8aIwzFlFGCWqWyh19DKlM0zP8O7t4rhq22epftg/L2t8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHH8JmjXXHO7JGg3CnhGc6mtrWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FhZjdlYzQtNGIxNy0z ZjE1LWFhMTItZjU1OWRkMThkMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV0WJutpPUE9hus4NUeh2NKhAsy3184ArimNEJw3pVqk+QtN/gQ4TwM 9wRtE/SmM1g8+tQFGMr9znTqva8BpqMSQAYhtMsnJ5MhqdklVk9IFlYgrZu5XpQA 81pgJ/iini3fie71PCYqOk3LzFNAt22A3KZrIe0RMSBNADiJXRTcHnwu33Ket5xK 76K1RNAHZoJB7ptLW5jVNUf+Qpyk57OKuaqWNqoH5wqbZtszSHCRFRAh+9yctHbv cnnEa6WCDrKP4Qcc5HQgpBNot53FABzJPPhMSTRogLB9BuqXiN799vvgS40r5RUD o0j7h+/ljJW0ejCN1jZkiojulvdGs8U= -----END CERTIFICATE-----Generated at Sat Aug 23 16:48:34 2025 by rpki-client