$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa File: dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa (raw, json) Hash identifier: xkr0nboAp5e5TL9sAj0cID8oq42IKIZ/e96QYPkyE2g= Subject key identifier: 58:DD:B7:25:EB:10:8A:EE:98:DB:31:84:D3:46:31:E1:B0:F3:04:4A Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584A86DBFC6E32595463B495DA00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 13335 IP address blocks: 96.43.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:fc:6e:32:59:54:63:b4:95:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=78a16b60-7580-4dc6-82a7-0cfaa4050829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:68:ed:62:fc:4d:92:11:94:04:d5:7c:ad: 22:c8:67:42:cb:1d:d1:6c:00:b1:6a:12:c5:cd:2e: bd:07:1a:29:39:0c:dc:9d:03:13:02:d3:2d:d8:29: 89:65:2c:f3:63:8c:ea:7e:97:3b:f3:6e:b9:95:1a: 64:b4:27:1b:89:e9:28:de:25:cb:a4:1b:be:78:b8: 49:01:69:66:6b:5f:95:d6:3f:96:fd:a7:65:5b:0d: 8c:69:d3:40:f7:71:78:0d:6e:3d:86:ee:8b:77:28: 30:dd:7f:a2:16:c7:77:c3:53:d2:78:75:8c:c6:d4: 36:ad:bf:4d:cc:de:7d:4a:96:1c:90:d7:f6:1a:b0: f6:85:1f:d8:c2:69:ac:31:19:45:bd:c3:7f:5d:f7: f4:dc:54:79:65:24:ce:d7:ae:2f:3b:65:42:a8:a5: e6:15:bb:75:6a:99:74:a3:d4:18:24:cc:e1:8a:63: 21:8a:f2:70:cf:0e:3d:77:94:21:50:3e:0b:a1:81: 47:3f:b4:ca:66:55:eb:56:71:28:10:3c:ac:1a:e3: 65:48:e3:16:26:45:2e:32:b7:50:0a:ad:0b:7c:e6: c5:91:b3:76:2b:de:d8:d6:a6:81:0e:6f:f7:5d:f5: 52:e6:30:81:21:f9:81:1a:f2:7a:9e:cf:fd:19:63: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DD:B7:25:EB:10:8A:EE:98:DB:31:84:D3:46:31:E1:B0:F3:04:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/dc0653fb-6eee-3256-bcf0-59c63de72f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:de:fb:d5:9b:cb:03:56:fc:2c:15:82:c0:f3:a4:b6:ba:ad: 27:27:a6:b1:73:f2:23:95:bb:a9:ba:1d:41:d6:55:08:bf:57: ba:98:2a:d7:a6:b2:71:9a:a6:9e:3d:5e:a9:14:42:98:11:54: 95:9b:be:ed:f2:b1:2b:92:f3:45:03:6f:02:6c:5a:41:1d:b8: 41:79:d1:c7:bc:53:de:d1:6b:1f:19:e4:3c:ba:dc:a6:2c:49: ff:a3:2c:c9:c9:86:20:68:c4:c7:f1:d0:a3:03:f0:31:db:cb: 8f:9b:76:75:00:62:71:20:72:3e:94:d7:79:cd:46:94:c5:a0: 42:e9:f0:7b:96:1d:14:21:c7:67:88:29:04:09:fe:7a:0c:24: 8e:0d:4e:38:74:96:11:ae:11:32:39:05:39:6c:e9:24:0e:1c: 8e:ba:43:65:42:8f:ba:b5:4b:be:a1:3e:6e:85:f4:c1:8c:0c: f7:5e:71:c0:ed:d7:4f:36:30:52:83:5c:06:3a:e2:d0:31:1e: 4e:98:67:34:21:73:1e:fa:22:08:4b:5f:df:4d:f3:68:9c:d5: 85:87:47:36:fd:6e:eb:23:c2:31:2a:cf:f3:d9:05:b6:2a:db: be:5d:48:7d:e9:ac:56:69:6c:4f:85:24:d3:0e:9e:47:f6:c8: 76:3f:0a:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/xuMllUY7SV2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzhhMTZiNjAtNzU4MC00ZGM2LTgyYTctMGNmYWE0MDUwODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzZo7WL8TZIRlATVfK0iyGdCyx3RbACxahLF zS69BxopOQzcnQMTAtMt2CmJZSzzY4zqfpc78265lRpktCcbieko3iXLpBu+eLhJ AWlma1+V1j+W/adlWw2MadNA93F4DW49hu6Ldygw3X+iFsd3w1PSeHWMxtQ2rb9N zN59SpYckNf2GrD2hR/YwmmsMRlFvcN/Xff03FR5ZSTO164vO2VCqKXmFbt1apl0 o9QYJMzhimMhivJwzw49d5QhUD4LoYFHP7TKZlXrVnEoEDysGuNlSOMWJkUuMrdQ Cq0LfObFkbN2K97Y1qaBDm/3XfVS5jCBIfmBGvJ6ns/9GWOcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjdtyXrEIrumNsxhNNGMeGw8wRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGMwNjUzZmItNmVlZS0z MjU2LWJjZjAtNTljNjNkZTcyZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTe+9WbywNW/CwVgsDzpLa6rScnprFz8iOVu6m6HUHWVQi/V7qYKtem snGapp49XqkUQpgRVJWbvu3ysSuS80UDbwJsWkEduEF50ce8U97Rax8Z5Dy63KYs Sf+jLMnJhiBoxMfx0KMD8DHby4+bdnUAYnEgcj6U13nNRpTFoELp8HuWHRQhx2eI KQQJ/noMJI4NTjh0lhGuETI5BTls6SQOHI66Q2VCj7q1S76hPm6F9MGMDPdeccDt 1082MFKDXAY64tAxHk6YZzQhcx76IghLX99N82ic1YWHRzb9busjwjEqz/PZBbYq 275dSH3prFZpbE+FJNMOnkf2yHY/CvI= -----END CERTIFICATE-----Generated at Tue Jul 22 11:49:02 2025 by rpki-client