$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5679334f-63b0-3537-9ca3-a854ce11e60c.roa File: 5679334f-63b0-3537-9ca3-a854ce11e60c.roa (raw, json) Hash identifier: xz2YjkI3dbpWQ4Ka+7tzYcvZuLf1uGcY9S7SzOGWjo4= Subject key identifier: 3B:8C:33:E5:34:85:FC:73:A5:81:0F:EE:4D:CF:A5:71:9B:D0:04:0D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A8C669520728D46FE23C61980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5679334f-63b0-3537-9ca3-a854ce11e60c.roa Signing time: Thu 17 Jul 2025 12:40:37 +0000 ROA not before: Thu 17 Jul 2025 12:40:37 +0000 ROA not after: Wed 15 Oct 2025 12:40:37 +0000 asID: 28423 IP address blocks: 96.126.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:66:95:20:72:8d:46:fe:23:c6:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 17 12:40:37 2025 GMT Not After : Oct 15 12:40:37 2025 GMT Subject: CN=d2dbfcd5-0dd1-4601-b2a0-64881f8a21c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:6a:45:3d:9b:ef:c9:f0:aa:7e:d8:9c:89: cc:39:08:51:ee:28:be:e0:71:dc:55:d8:57:9b:ea: 4a:d3:10:5a:8a:b5:d1:90:eb:09:67:29:6f:b7:32: 37:21:2a:61:b0:09:3b:ac:24:db:3a:92:e8:9a:b3: 30:40:9b:84:b6:00:a2:56:61:f8:56:f3:c0:96:e5: ca:61:13:e3:aa:c4:2c:e4:a1:eb:68:6c:93:52:f4: 45:c4:bb:5d:21:25:a2:f6:70:fb:08:f0:cc:9e:e2: 0e:0d:46:0e:9b:e6:b8:87:a8:55:c1:8e:a9:3d:66: 1f:3f:34:12:ce:3c:9b:97:d7:bf:d8:36:c3:56:d3: a4:3b:86:aa:14:80:33:30:01:92:a6:3a:c7:4e:81: cc:d8:87:93:47:c8:90:76:72:e4:c0:1e:c4:cd:22: 58:96:8c:1e:e4:d6:d1:30:4e:16:45:e1:58:ef:19: 79:62:83:45:4e:f2:ef:61:ca:24:73:45:83:9c:d2: 1d:e4:be:cf:f4:96:c6:28:78:d5:b6:df:be:cb:4c: 24:cd:50:7e:2e:d0:7a:26:c6:c9:03:55:44:e7:bf: 07:81:28:12:ff:5b:87:50:70:c5:3f:90:74:aa:51: 13:5e:7f:d6:b6:ac:8e:24:c7:63:08:92:cc:19:52: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8C:33:E5:34:85:FC:73:A5:81:0F:EE:4D:CF:A5:71:9B:D0:04:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5679334f-63b0-3537-9ca3-a854ce11e60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 96.126.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ed:b9:54:46:00:49:b9:84:38:c3:08:24:2f:ca:0d:2a:47: 1e:fa:9b:d5:93:df:d4:90:ce:e7:f7:2e:98:fc:0e:c7:59:2a: f2:fc:b6:d9:ea:34:a4:85:2d:f9:9e:90:2b:c7:7f:a0:33:80: b2:1b:13:32:f5:8d:41:02:66:f4:40:7f:d6:1f:4e:69:aa:8d: db:43:55:69:b6:10:41:ea:fb:39:a8:1c:52:fa:5a:16:dc:b6: 53:ac:f1:41:2c:0e:61:d4:ff:1d:48:65:fe:de:df:79:6f:25: 8d:c3:42:39:d9:75:9e:b7:a4:0c:d7:c4:b2:22:87:9b:48:bf: dd:da:07:2e:74:d8:e6:2e:73:c2:99:43:16:e8:56:44:97:75: af:0f:48:ce:c4:18:e6:d9:a5:95:02:3e:b5:3e:f7:d2:8a:a3: ef:3b:7f:d5:ab:53:a5:90:b6:db:04:b7:a1:8c:f4:fa:2c:30: 59:15:70:3c:4f:62:cd:4c:a5:2c:76:09:4e:f8:1c:08:28:49: 4a:70:c2:89:20:94:4d:8f:1f:6c:6f:5a:ba:dc:3a:86:01:a3: b1:c7:c3:dd:2e:7d:b8:07:cf:84:66:68:83:7d:a6:43:0b:f1: 67:70:d1:7d:c0:c8:ae:db:fe:a2:1c:66:ef:eb:b5:42:e7:28: fd:f4:22:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMZpUgco1G/iPGGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcxNzEyNDAzN1oXDTI1MTAxNTEyNDAzN1owLzEtMCsGA1UEAxMk ZDJkYmZjZDUtMGRkMS00NjAxLWIyYTAtNjQ4ODFmOGEyMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNJqRT2b78nwqn7YnInMOQhR7ii+4HHcVdhX m+pK0xBairXRkOsJZylvtzI3ISphsAk7rCTbOpLomrMwQJuEtgCiVmH4VvPAluXK YRPjqsQs5KHraGyTUvRFxLtdISWi9nD7CPDMnuIODUYOm+a4h6hVwY6pPWYfPzQS zjybl9e/2DbDVtOkO4aqFIAzMAGSpjrHToHM2IeTR8iQdnLkwB7EzSJYlowe5NbR ME4WReFY7xl5YoNFTvLvYcokc0WDnNId5L7P9JbGKHjVtt++y0wkzVB+LtB6JsbJ A1VE578HgSgS/1uHUHDFP5B0qlETXn/WtqyOJMdjCJLMGVJpPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuMM+U0hfxzpYEP7k3PpXGb0AQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTY3OTMzNGYtNjNiMC0z NTM3LTljYTMtYTg1NGNlMTFlNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYH6SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTtuVRGAEm5hDjDCCQvyg0qRx76m9WT39SQzuf3Lpj8DsdZKvL8ttnq NKSFLfmekCvHf6AzgLIbEzL1jUECZvRAf9YfTmmqjdtDVWm2EEHq+zmoHFL6Whbc tlOs8UEsDmHU/x1IZf7e33lvJY3DQjnZdZ63pAzXxLIih5tIv93aBy502OYuc8KZ QxboVkSXda8PSM7EGObZpZUCPrU+99KKo+87f9WrU6WQttsEt6GM9PosMFkVcDxP Ys1MpSx2CU74HAgoSUpwwokglE2PH2xvWrrcOoYBo7HHw90ufbgHz4RmaIN9pkML 8Wdw0X3AyK7b/qIcZu/rtULnKP30Ikc= -----END CERTIFICATE-----Generated at Sat Jul 26 19:02:46 2025 by rpki-client