$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa File: ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa (raw, json) Hash identifier: 9bjxsT9FtyBbUV/UXwBsyoAOZiXBnxZgt0TWMbHJvg8= Subject key identifier: 2A:C5:C8:65:C4:2B:06:DC:E5:13:93:E0:18:45:EB:2D:7F:13:F8:54 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F43285849FF7518BA0DC0F8E6139A1D00 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 834 IP address blocks: 96.43.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:18:ba:0d:c0:f8:e6:13:9a:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=ed915bda-88fd-4b57-b269-0c11abfc791c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:e3:20:da:7d:d7:f0:b3:0e:00:be:0d:de: fd:ab:eb:95:96:c5:d1:74:94:dc:64:9f:d6:05:02: 76:f6:28:91:a1:0d:81:4c:77:aa:9d:76:f0:01:0e: f4:37:4e:9a:3f:10:86:c0:a0:ad:14:a4:c9:f7:07: d2:45:e5:a5:11:22:99:0b:53:f8:4c:7e:f2:e3:16: bd:03:5e:e3:41:97:0d:77:6c:f6:a5:83:22:1c:6a: 5c:a5:ae:60:28:02:06:b2:d4:ce:87:ff:30:b0:9f: 90:02:7c:04:39:8c:bb:d8:dd:7b:00:b3:b7:b1:66: 5e:06:b8:72:c5:f1:24:a7:33:5e:9b:4c:8b:55:bf: ff:b3:3b:a5:0e:0b:32:9b:d2:f3:7e:ec:f3:d5:f6: d7:30:10:84:05:2a:46:b2:75:7b:60:79:7e:3f:e0: 89:9d:87:d4:e2:ba:8d:f7:91:37:e6:f8:f5:75:5d: d9:93:bc:01:bc:68:14:da:95:a8:93:7b:21:f0:d6: b5:1a:e3:1f:e9:92:4c:6c:67:49:14:f9:25:07:66: a1:9d:7c:bc:3b:10:f4:eb:bc:de:e0:09:38:9a:fa: 0d:66:99:bb:02:4a:57:79:ca:78:ed:6a:25:6d:bb: d8:1b:5b:28:48:88:64:99:6c:f6:62:8b:04:74:b7: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:C8:65:C4:2B:06:DC:E5:13:93:E0:18:45:EB:2D:7F:13:F8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ed91c6a2-092f-3b7e-87cf-e87bbbed4018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 96.43.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:99:1a:7c:45:8d:7f:9c:88:26:7c:63:23:86:41:fd:39:f2: 39:94:a2:24:1d:81:e6:8a:f9:10:bf:e2:85:db:af:bb:fb:7a: a1:7c:70:32:9f:7d:c5:1a:dc:72:30:7d:b2:ad:00:84:1e:a4: 88:94:fe:55:d7:82:f7:91:6d:f0:d2:01:07:64:bf:c5:c6:5b: 6f:db:af:32:95:4b:ed:72:a7:c4:35:d6:3b:96:01:43:fd:c8: 95:6f:92:73:76:83:e2:0f:f1:e6:db:ce:6f:08:2b:e2:2d:6b: aa:50:5a:aa:e2:62:20:c4:8d:ff:d0:cc:0c:02:dc:13:61:83: 33:6c:36:fc:f3:d3:e8:85:67:2e:1c:7a:4c:47:1d:b7:36:c5: 0d:18:e9:bd:ee:fe:cb:dd:8d:4f:3e:69:30:a4:f6:e0:65:5f: f5:ca:79:a0:2d:1b:a8:dc:fe:6d:18:f3:63:5e:09:b1:a6:ab: 92:9e:8d:70:6f:ef:7d:43:9f:9d:46:3d:9e:54:4d:99:23:64: 8c:d4:a7:c3:f0:bf:90:8f:56:3c:28:8e:85:11:3c:dc:75:84: 5c:04:03:43:5f:f8:aa:f3:f5:35:01:8d:50:78:a4:36:74:27: 63:89:7e:d9:4c:f5:5d:f4:dd:c0:41:48:32:32:37:9c:2c:a0: c9:1d:fd:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRi6DcD45hOaHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZWQ5MTViZGEtODhmZC00YjU3LWIyNjktMGMxMWFiZmM3OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfDjINp91/CzDgC+Dd79q+uVlsXRdJTcZJ/W BQJ29iiRoQ2BTHeqnXbwAQ70N06aPxCGwKCtFKTJ9wfSReWlESKZC1P4TH7y4xa9 A17jQZcNd2z2pYMiHGpcpa5gKAIGstTOh/8wsJ+QAnwEOYy72N17ALO3sWZeBrhy xfEkpzNem0yLVb//szulDgsym9Lzfuzz1fbXMBCEBSpGsnV7YHl+P+CJnYfU4rqN 95E35vj1dV3Zk7wBvGgU2pWok3sh8Na1GuMf6ZJMbGdJFPklB2ahnXy8OxD067ze 4Ak4mvoNZpm7AkpXecp47WolbbvYG1soSIhkmWz2YosEdLc6oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrFyGXEKwbc5ROT4BhF6y1/E/hUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZWQ5MWM2YTItMDkyZi0z YjdlLTg3Y2YtZTg3YmJiZWQ0MDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyZGnxFjX+ciCZ8YyOGQf058jmUoiQdgeaK+RC/4oXbr7v7eqF8cDKf fcUa3HIwfbKtAIQepIiU/lXXgveRbfDSAQdkv8XGW2/brzKVS+1yp8Q11juWAUP9 yJVvknN2g+IP8ebbzm8IK+Ita6pQWqriYiDEjf/QzAwC3BNhgzNsNvzz0+iFZy4c ekxHHbc2xQ0Y6b3u/svdjU8+aTCk9uBlX/XKeaAtG6jc/m0Y82NeCbGmq5KejXBv 731Dn51GPZ5UTZkjZIzUp8Pwv5CPVjwojoURPNx1hFwEA0Nf+Krz9TUBjVB4pDZ0 J2OJftlM9V303cBBSDIyN5wsoMkd/ZY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:48 2025 by rpki-client