$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa File: 06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa (raw, json) Hash identifier: XkCbur359DG309aLI4G8jrUQrYKxBDwhlzZ9GeJRut8= Subject key identifier: 32:49:11:46:8F:B0:42:BB:2E:80:0B:58:55:54:3E:48:9D:BC:DC:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A6AF097BA28003A4152404F20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 16625 IP address blocks: 96.17.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:97:ba:28:00:3a:41:52:40:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=2afb9751-2c52-4466-a105-94096469afa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:bb:91:30:97:e2:30:a1:eb:87:8e:11:ad: a0:94:ff:07:1b:46:c2:ea:8e:fa:f1:8b:d3:48:38: 3b:5f:d0:e7:6a:d8:73:1c:5e:6e:61:36:d0:6d:07: 9e:b5:cd:92:0b:1a:fe:26:f2:ee:29:4c:fa:6c:be: 0f:80:e8:02:6e:6c:a3:42:1c:ad:1c:b3:b4:c6:e2: af:83:61:54:29:d8:bc:ed:77:24:32:05:21:21:e7: 7f:fb:57:9f:6b:28:e6:da:f6:3c:dc:f7:e7:8a:49: 7c:84:de:52:8f:b9:6f:ae:3f:85:5d:5b:df:25:09: 6a:d8:1d:fc:a5:16:a8:b3:4a:fc:84:b3:9d:2e:05: 50:87:7a:1d:5e:3a:67:90:03:cb:98:7d:75:3a:e1: 5d:29:d9:33:db:f6:d2:ff:41:58:09:79:30:a5:cc: 17:79:9e:10:9f:a4:17:a4:2e:b3:d3:b7:19:cd:52: 5d:78:8e:73:0a:12:84:53:50:cf:94:4f:cc:7d:da: d1:43:1f:e1:85:33:62:5a:ce:e7:ab:01:f2:83:ad: 60:b8:1f:69:5a:5e:e4:59:13:fd:ff:72:fc:24:d2: 87:23:f6:43:8f:b1:86:53:d8:96:9a:d6:19:35:95: 5b:cc:94:00:75:12:62:5a:e5:6e:51:e3:9f:98:0d: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:49:11:46:8F:B0:42:BB:2E:80:0B:58:55:54:3E:48:9D:BC:DC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d0:06:b4:9e:60:4c:f1:ae:47:d1:f9:6a:9c:1e:8e:b3:fa: 1d:a4:47:f2:dd:d8:be:60:8a:18:c8:1b:d2:41:31:12:5d:1d: 1d:91:a8:0b:2c:bd:50:6d:a7:29:50:3b:c6:29:fd:1a:69:bc: 04:9c:98:cb:e2:34:70:fe:60:21:18:46:da:91:1e:a2:30:52: fa:7a:6f:6e:ec:08:46:36:af:3b:69:61:d7:6b:9c:b0:3a:ab: 4c:32:22:31:3e:0d:59:a1:14:b6:45:c0:36:15:a2:ce:6f:48: 5b:6f:8d:7c:1c:03:86:33:13:bf:88:3d:32:7b:66:c7:82:48: 11:6c:79:5c:66:69:d0:5b:5a:96:40:96:78:3f:6f:af:c6:e0: 7f:7a:74:3b:64:a5:e0:81:c4:05:f0:23:b2:5f:5a:2c:3e:ba: ef:8f:cc:b4:23:5f:8c:2c:61:8b:38:67:a2:d3:74:a8:f4:2a: 3d:a4:8d:1b:0d:fb:da:ee:f8:03:53:e6:1a:98:76:71:f2:d9: 66:be:09:12:71:aa:34:e6:93:79:68:09:75:f0:10:85:97:80: 2d:b1:39:24:4c:0a:f0:4e:86:84:a6:b7:6c:97:3d:7b:10:bf: 7e:f3:c1:35:b6:f0:7b:5a:3d:c1:d3:73:f1:2c:e6:be:0c:7d: bd:86:b0:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpq8Je6KAA6QVJATyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk MmFmYjk3NTEtMmM1Mi00NDY2LWExMDUtOTQwOTY0NjlhZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnG7kTCX4jCh64eOEa2glP8HG0bC6o768YvT SDg7X9DnathzHF5uYTbQbQeetc2SCxr+JvLuKUz6bL4PgOgCbmyjQhytHLO0xuKv g2FUKdi87XckMgUhIed/+1efayjm2vY83Pfnikl8hN5Sj7lvrj+FXVvfJQlq2B38 pRaos0r8hLOdLgVQh3odXjpnkAPLmH11OuFdKdkz2/bS/0FYCXkwpcwXeZ4Qn6QX pC6z07cZzVJdeI5zChKEU1DPlE/MfdrRQx/hhTNiWs7nqwHyg61guB9pWl7kWRP9 /3L8JNKHI/ZDj7GGU9iWmtYZNZVbzJQAdRJiWuVuUeOfmA3y2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJJEUaPsEK7LoALWFVUPkidvNwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDZkMjdjZTMtZDYzMS0z OGZkLThmMWYtMGJiM2I1YThiNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzQBrSeYEzxrkfR+WqcHo6z+h2kR/Ld2L5gihjIG9JBMRJdHR2RqAss vVBtpylQO8Yp/RppvAScmMviNHD+YCEYRtqRHqIwUvp6b27sCEY2rztpYddrnLA6 q0wyIjE+DVmhFLZFwDYVos5vSFtvjXwcA4YzE7+IPTJ7ZseCSBFseVxmadBbWpZA lng/b6/G4H96dDtkpeCBxAXwI7JfWiw+uu+PzLQjX4wsYYs4Z6LTdKj0Kj2kjRsN +9ru+ANT5hqYdnHy2Wa+CRJxqjTmk3loCXXwEIWXgC2xOSRMCvBOhoSmt2yXPXsQ v37zwTW28HtaPcHTc/Es5r4Mfb2GsJQ= -----END CERTIFICATE-----Generated at Thu Jul 24 00:05:47 2025 by rpki-client