$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daf2984e-8d27-3568-87a6-93096592e972.roa File: daf2984e-8d27-3568-87a6-93096592e972.roa (raw, json) Hash identifier: FXUgjZEYvpXmta+oyxS2DP7UfmCR5DXEWmzdLHCYdPU= Subject key identifier: 64:AA:37:32:BA:D3:C3:86:9E:D2:19:29:A5:46:48:3F:66:7E:AD:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACB4110CA324D84F560B6F400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daf2984e-8d27-3568-87a6-93096592e972.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 35994 IP address blocks: 96.17.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:10:ca:32:4d:84:f5:60:b6:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=77e67317-1ae0-46b6-9dce-21cdf695dc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c7:90:70:74:0e:e0:e4:42:8e:b3:1a:a0:cd: 86:74:6a:4f:38:b1:83:cd:d1:af:b9:9f:1f:20:6b: de:17:ad:b2:d7:0b:77:ad:7a:c4:5c:a8:25:21:fd: 65:de:2a:37:cc:aa:66:a5:03:7c:15:b2:de:fb:4d: c0:8e:b0:55:4b:cf:bc:d5:cb:41:bf:52:22:7d:09: c0:80:08:c8:9c:8c:11:a1:99:95:c0:b8:c7:c0:df: aa:77:9d:6c:67:f0:eb:8d:f2:6a:a1:21:58:ca:10: 12:46:24:99:df:21:83:69:3d:5f:34:fd:82:98:60: 0f:b6:ea:d8:df:bb:a5:e4:c6:8b:79:47:92:88:da: da:f9:b7:43:32:4d:cf:81:30:81:a9:6b:94:be:b6: 32:9d:38:74:66:b5:7f:f3:a0:8c:92:a6:5c:fe:41: b6:0d:4d:38:dd:60:c2:39:b1:b8:f7:fe:1f:a0:66: f3:28:5f:b4:30:65:1d:08:ed:44:72:57:16:fc:f0: ee:59:35:a6:53:08:40:99:c9:09:fd:76:ac:6c:9c: 7f:e7:b3:d2:ed:6d:c2:b5:e0:ff:de:18:e0:52:8c: c0:8e:24:08:22:87:a6:22:a4:e9:82:cf:09:b0:8e: 12:9c:8b:69:c6:ba:8a:60:7b:f0:07:f7:8d:f1:d8: fb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AA:37:32:BA:D3:C3:86:9E:D2:19:29:A5:46:48:3F:66:7E:AD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/daf2984e-8d27-3568-87a6-93096592e972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b9:7f:cc:19:5c:80:3e:60:6a:a2:be:7a:78:da:c9:b1:78: d7:cb:d5:ec:18:1e:d0:d0:1d:19:c0:5a:83:33:76:5f:40:f5: 98:ec:db:4f:55:7b:b3:5a:2f:29:28:a0:25:ef:09:99:6e:cf: af:52:fe:d7:72:44:84:45:4d:1c:f9:9c:36:23:b4:24:54:d0: de:c9:c5:e8:69:c2:af:3d:18:40:85:de:f5:8f:23:d8:3a:fa: 6b:97:a7:9d:b2:7f:95:1f:0f:b0:a6:9c:c3:f7:25:b2:19:33: 75:5a:07:64:43:2f:2a:9b:90:3c:7a:56:b7:5e:75:0e:07:3b: 1f:76:6f:ca:da:1c:a7:62:b5:5a:02:f4:8c:cd:50:4e:ff:04: e7:1f:3d:85:42:43:fc:fd:54:d5:5a:d0:8e:54:bb:52:5e:3a: e5:59:ee:d8:82:2f:e1:4f:11:de:cc:c9:5d:4d:3d:ed:ac:74: 80:eb:84:4b:b4:7d:cd:a9:3f:fb:c5:e3:e1:a4:f2:ab:59:45: fd:bf:1a:6f:28:ed:97:16:0e:bd:8f:01:49:f4:60:5a:76:52: 82:a0:d7:e5:26:5c:93:27:c6:59:30:b6:86:88:90:f6:e4:9c: 53:da:5c:d4:ec:68:90:15:63:ed:c1:cf:6a:64:7f:ee:6d:d8: 4e:85:ee:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQRDKMk2E9WC29AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk NzdlNjczMTctMWFlMC00NmI2LTlkY2UtMjFjZGY2OTVkYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8eQcHQO4ORCjrMaoM2GdGpPOLGDzdGvuZ8f IGveF62y1wt3rXrEXKglIf1l3io3zKpmpQN8FbLe+03AjrBVS8+81ctBv1IifQnA gAjInIwRoZmVwLjHwN+qd51sZ/DrjfJqoSFYyhASRiSZ3yGDaT1fNP2CmGAPturY 37ul5MaLeUeSiNra+bdDMk3PgTCBqWuUvrYynTh0ZrV/86CMkqZc/kG2DU043WDC ObG49/4foGbzKF+0MGUdCO1EclcW/PDuWTWmUwhAmckJ/XasbJx/57PS7W3CteD/ 3hjgUozAjiQIIoemIqTpgs8JsI4SnItpxrqKYHvwB/eN8dj7wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSqNzK608OGntIZKaVGSD9mfq3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFmMjk4NGUtOGQyNy0z NTY4LTg3YTYtOTMwOTY1OTJlOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO5f8wZXIA+YGqivnp42smxeNfL1ewYHtDQHRnAWoMzdl9A9Zjs209V e7NaLykooCXvCZluz69S/tdyRIRFTRz5nDYjtCRU0N7Jxehpwq89GECF3vWPI9g6 +muXp52yf5UfD7CmnMP3JbIZM3VaB2RDLyqbkDx6VrdedQ4HOx92b8raHKditVoC 9IzNUE7/BOcfPYVCQ/z9VNVa0I5Uu1JeOuVZ7tiCL+FPEd7MyV1NPe2sdIDrhEu0 fc2pP/vF4+Gk8qtZRf2/Gm8o7ZcWDr2PAUn0YFp2UoKg1+UmXJMnxlkwtoaIkPbk nFPaXNTsaJAVY+3Bz2pkf+5t2E6F7pQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:19 2025 by rpki-client