$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa File: 8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa (raw, json) Hash identifier: /hGqfZhMkeZ9k5pVF3B681sNaWWQwtoddRbdDgxqytI= Subject key identifier: 53:AB:14:62:51:4C:38:6C:83:72:06:B5:C3:01:CC:F7:CF:A7:06:62 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B3A158742FE15B216D09A Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 96.1.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:3a:15:87:42:fe:15:b2:16:d0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=d891d2e7-0c97-4508-a2b0-4a79d7bfa382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:b4:14:00:5e:0a:17:5d:11:d6:52:8f:e5: 87:e2:2a:7d:83:e4:d5:85:1f:20:68:64:37:fa:eb: 9e:0c:77:47:6f:88:b2:0c:6b:99:c8:2f:e2:0e:2a: 6e:08:d5:5e:ec:f5:2b:0b:bc:03:e2:13:8e:9d:b4: fd:1b:0d:ca:56:20:af:30:8c:fd:98:fc:b4:4a:1b: 96:85:e9:be:ad:82:e0:60:da:4c:52:5e:62:b3:69: 8c:13:26:37:1b:8f:0f:2e:eb:a3:d3:03:18:d2:85: b5:b9:43:12:55:40:4c:16:31:d0:8a:29:c6:cb:c9: dc:ce:b8:51:85:d3:9c:56:9e:8d:a4:47:66:42:6a: 1e:50:84:15:ed:94:2c:13:94:ac:b0:75:52:52:6e: c1:bd:f0:3f:7e:42:26:71:4c:af:1b:a3:2b:33:63: 07:e3:38:2b:6a:80:95:65:c8:3b:ee:8a:15:2a:02: de:d2:ac:91:d8:b3:90:40:90:0a:7c:69:dc:b1:96: 3e:05:81:47:a0:d7:04:0f:39:cf:f5:71:1a:8c:38: 4b:f9:a2:f1:03:0f:38:23:d0:4e:0a:24:c5:ee:dd: c0:74:54:50:c7:5d:f5:b1:c4:f5:96:2a:4e:a9:e2: 14:96:18:f4:04:37:d4:4c:59:65:74:1f:1f:12:eb: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AB:14:62:51:4C:38:6C:83:72:06:B5:C3:01:CC:F7:CF:A7:06:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a9a7c62-7c9d-302c-9c2b-6ad419f0c12b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 96.1.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:22:34:68:8e:50:da:5f:5f:ee:70:e9:9b:70:63:26:3c:67: 56:5b:f1:06:a9:38:7a:c5:1f:33:7b:02:12:32:7b:1a:14:eb: ab:85:ac:24:aa:5e:6a:2e:fa:ef:59:1f:aa:93:72:63:97:b5: 90:6c:0b:03:ec:0b:f5:70:db:7c:86:08:12:2b:8c:a8:72:d2: 0e:2a:58:a5:50:3a:5b:b5:12:c1:f5:a5:11:48:5d:5a:e0:83: 4d:83:82:b3:71:ad:68:9f:95:09:b5:83:fd:cc:bf:20:da:b8: 90:6c:36:65:47:30:e0:c7:bc:6c:4e:8c:13:02:77:18:3b:a8: 7c:7b:08:ef:c5:0d:a1:eb:92:33:f3:83:ab:14:24:fb:0e:af: b1:df:15:94:21:b8:a3:fc:ce:e9:69:dd:26:e4:10:bb:46:d7: ff:7b:be:4e:db:2a:58:fc:28:e0:7a:c9:bd:9c:e1:1b:6c:82: 93:01:1d:5f:d9:32:3a:e8:1a:1b:1b:0d:a8:c7:11:05:c1:03: 22:c8:fb:f4:8b:43:c6:ea:b8:f5:19:dc:4d:45:d4:ce:a3:6c: 2b:39:e0:ed:09:6c:8f:f9:91:8e:0a:22:e7:34:b4:37:19:47: 08:9a:f8:fa:65:7e:da:61:85:0a:5b:ea:ab:10:e1:d6:96:c3: ec:fe:37:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzoVh0L+FbIW0JowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZDg5MWQyZTctMGM5Ny00NTA4LWEyYjAtNGE3OWQ3YmZhMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDm0FABeChddEdZSj+WH4ip9g+TVhR8gaGQ3 +uueDHdHb4iyDGuZyC/iDipuCNVe7PUrC7wD4hOOnbT9Gw3KViCvMIz9mPy0ShuW hem+rYLgYNpMUl5is2mMEyY3G48PLuuj0wMY0oW1uUMSVUBMFjHQiinGy8nczrhR hdOcVp6NpEdmQmoeUIQV7ZQsE5SssHVSUm7BvfA/fkImcUyvG6MrM2MH4zgraoCV Zcg77ooVKgLe0qyR2LOQQJAKfGncsZY+BYFHoNcEDznP9XEajDhL+aLxAw84I9BO CiTF7t3AdFRQx131scT1lipOqeIUlhj0BDfUTFlldB8fEutTEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOrFGJRTDhsg3IGtcMBzPfPpwZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGE5YTdjNjItN2M5ZC0z MDJjLTljMmItNmFkNDE5ZjBjMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIiNGiOUNpfX+5w6ZtwYyY8Z1Zb8QapOHrFHzN7AhIyexoU66uFrCSq Xmou+u9ZH6qTcmOXtZBsCwPsC/Vw23yGCBIrjKhy0g4qWKVQOlu1EsH1pRFIXVrg g02DgrNxrWiflQm1g/3MvyDauJBsNmVHMODHvGxOjBMCdxg7qHx7CO/FDaHrkjPz g6sUJPsOr7HfFZQhuKP8zulp3SbkELtG1/97vk7bKlj8KOB6yb2c4RtsgpMBHV/Z MjroGhsbDajHEQXBAyLI+/SLQ8bquPUZ3E1F1M6jbCs54O0JbI/5kY4KIuc0tDcZ Rwia+PplftphhQpb6qsQ4daWw+z+N0s= -----END CERTIFICATE-----Generated at Fri Jul 25 19:28:46 2025 by rpki-client