$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa File: 0bca3e92-daaf-3256-84aa-2ade85e7a084.roa (raw, json) Hash identifier: GQJ1AtYXXlfcjwOAjdJq/y8FMJ+8uDsT5n2SXlmBXg8= Subject key identifier: 30:3A:DD:70:E9:A2:D7:C8:5F:B8:CE:CB:E2:8A:C0:01:7F:49:98:87 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A7E7B553E1137104DEFD034C0 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 211440 IP address blocks: 96.43.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:55:3e:11:37:10:4d:ef:d0:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=19e6fd20-4132-4c8e-b3cd-88c46784ebc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:28:61:61:71:83:59:2b:d6:6e:52:ba:8a:ab: 9f:3a:8a:22:17:51:9e:2d:19:f3:81:bc:e8:22:98: 93:b0:65:85:8a:77:5b:5d:55:fa:5c:78:84:0c:0e: 3f:32:44:50:ed:38:26:62:9d:11:dd:72:77:69:84: 9e:27:0d:83:f0:25:54:e2:ac:e3:43:29:9d:f1:08: a4:fa:04:37:b2:31:29:bf:69:41:07:33:08:44:c8: 36:d6:d4:37:6e:8b:56:d9:dd:30:8f:20:30:ab:0d: d1:d4:66:61:0a:03:19:c2:ab:c4:bf:3f:ad:72:fd: 9b:0b:56:33:8c:b6:19:0c:57:19:52:f6:cd:b6:f9: 7b:23:37:c0:af:d3:cf:5f:e5:8c:37:58:85:5a:6c: 32:bc:3d:e1:17:da:ec:0c:8d:a9:a7:17:b8:48:17: bf:31:e2:90:d0:e1:be:b3:94:bf:e6:2a:6f:a8:db: c3:eb:cf:57:b3:f9:a4:32:71:ef:18:0e:d3:14:cb: 98:6d:f7:4a:d9:d6:60:fe:38:a7:40:6a:5c:7d:de: ca:1e:a5:03:c4:fa:e3:5b:49:81:26:e4:5e:29:36: de:be:cb:99:cb:80:5e:45:e0:22:e5:05:6d:49:16: 9a:ea:1e:d9:72:ce:30:bf:cc:8c:27:4d:0a:e5:b9: 32:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3A:DD:70:E9:A2:D7:C8:5F:B8:CE:CB:E2:8A:C0:01:7F:49:98:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/0bca3e92-daaf-3256-84aa-2ade85e7a084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:74:1f:32:a6:1d:59:a4:2c:e6:71:e4:99:5b:ab:98:da:ce: a2:bf:97:2c:97:fd:3d:6b:13:bd:ea:c3:3d:5f:fa:19:6e:e0: c5:b5:8d:4a:f6:35:57:ae:ee:b0:60:3c:00:80:d6:0a:15:e6: b8:68:ff:cf:9b:e0:ee:b3:28:37:81:79:f3:32:cd:37:b2:bd: 4f:00:9f:0e:bc:67:24:10:36:a3:0f:90:9d:89:ae:09:42:06: 16:0f:62:4d:8a:8c:1d:72:05:5c:14:16:0c:f2:27:6f:44:2b: c3:52:18:af:70:9b:03:56:e3:07:1d:40:df:6d:cc:40:0c:95: f3:3f:89:eb:db:67:26:07:42:3d:b1:1c:f9:c8:73:4b:d7:52: 44:47:76:a7:6c:c9:66:26:36:2c:8b:ce:98:c6:ff:bc:3b:8c: 40:b1:67:b3:fd:16:a0:1f:4c:8e:a0:15:99:00:78:59:ea:4c: 17:9e:b3:4c:b6:4b:2f:eb:33:f3:9e:04:b2:2f:7c:a4:0f:e0: 80:b8:b6:98:2a:bf:fa:37:bc:aa:79:4c:41:88:96:4f:fb:25: 81:af:ea:74:38:fe:44:a1:3f:8d:3c:fd:66:2a:2a:5b:73:a6: 16:04:90:3f:5a:f2:5f:9b:5f:df:f0:80:21:2a:cd:dc:d3:db: d9:c9:74:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e1U+ETcQTe/QNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTllNmZkMjAtNDEzMi00YzhlLWIzY2QtODhjNDY3ODRlYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjihhYXGDWSvWblK6iqufOooiF1GeLRnzgbzo IpiTsGWFindbXVX6XHiEDA4/MkRQ7TgmYp0R3XJ3aYSeJw2D8CVU4qzjQymd8Qik +gQ3sjEpv2lBBzMIRMg21tQ3botW2d0wjyAwqw3R1GZhCgMZwqvEvz+tcv2bC1Yz jLYZDFcZUvbNtvl7IzfAr9PPX+WMN1iFWmwyvD3hF9rsDI2ppxe4SBe/MeKQ0OG+ s5S/5ipvqNvD689Xs/mkMnHvGA7TFMuYbfdK2dZg/jinQGpcfd7KHqUDxPrjW0mB JuReKTbevsuZy4BeReAi5QVtSRaa6h7Zcs4wv8yMJ00K5bkyaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA63XDpotfIX7jOy+KKwAF/SZiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMGJjYTNlOTItZGFhZi0z MjU2LTg0YWEtMmFkZTg1ZTdhMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYCtqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB0HzKmHVmkLOZx5Jlbq5jazqK/lyyX/T1rE73qwz1f+hlu4MW1jUr2 NVeu7rBgPACA1goV5rho/8+b4O6zKDeBefMyzTeyvU8Anw68ZyQQNqMPkJ2JrglC BhYPYk2KjB1yBVwUFgzyJ29EK8NSGK9wmwNW4wcdQN9tzEAMlfM/ievbZyYHQj2x HPnIc0vXUkRHdqdsyWYmNiyLzpjG/7w7jECxZ7P9FqAfTI6gFZkAeFnqTBees0y2 Sy/rM/OeBLIvfKQP4IC4tpgqv/o3vKp5TEGIlk/7JYGv6nQ4/kShP408/WYqKltz phYEkD9a8l+bX9/wgCEqzdzT29nJdMo= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:00 2025 by rpki-client