$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2245f2c4-76a3-3802-9ca3-7c2ee5f60656.roa File: 2245f2c4-76a3-3802-9ca3-7c2ee5f60656.roa (raw, json) Hash identifier: XNSzGXTX8XLmlEav+e6yxW1yCvWA8WGsOG0ywNeTWMQ= Subject key identifier: 8C:DD:E0:E8:93:F9:61:A9:1D:52:A7:0B:80:F6:54:2C:E5:17:6A:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E22548643B862A4110D90F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2245f2c4-76a3-3802-9ca3-7c2ee5f60656.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 16625 IP address blocks: 96.6.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:48:64:3b:86:2a:41:10:d9:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=767f08dd-ffb3-4e0e-880e-2f61e6130cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:1b:8e:d9:cb:9b:fb:b6:40:60:d4:b8:ea: 57:eb:c1:81:ae:45:8d:ed:1d:04:af:0b:db:e0:48: 36:04:38:d1:e7:60:ea:8f:e5:7d:fd:3f:ac:55:12: 47:76:df:56:cc:e2:6d:f9:49:3c:d4:fc:f9:58:29: bd:c1:e2:a5:90:45:d1:8d:51:aa:97:a7:76:a6:78: 26:5b:9d:2b:8e:83:86:89:f0:17:73:7a:11:d4:6c: c3:29:20:12:85:e4:02:69:e6:78:85:41:86:ad:78: 06:a9:51:4b:82:84:77:9c:9e:63:ab:86:1a:6c:76: 75:fd:41:b4:90:89:ce:63:f5:b2:58:4c:72:aa:28: bd:fe:74:b5:a8:80:14:a2:a0:60:b9:07:85:79:bf: 86:c1:4f:7f:39:b0:b4:5c:4c:11:f2:21:b8:1b:37: 54:ee:97:0d:04:f9:10:f4:ec:7f:e0:c6:21:59:92: 74:59:14:d8:dc:0e:02:ea:e3:a4:93:a7:fb:0a:88: e6:39:b9:21:87:bc:44:6e:37:d2:25:89:ef:6d:98: 0f:39:7b:5a:77:3f:2f:62:79:4e:b5:4d:02:19:de: 21:af:91:b5:3d:05:06:ca:09:b3:d2:35:a0:98:59: 8c:2c:98:98:d5:fe:39:ee:47:5e:4e:55:b6:31:b8: 4b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DD:E0:E8:93:F9:61:A9:1D:52:A7:0B:80:F6:54:2C:E5:17:6A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2245f2c4-76a3-3802-9ca3-7c2ee5f60656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.6.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:93:01:94:63:49:6e:c3:0b:5b:9a:f6:0c:55:56:b5:95:b9: 57:7d:e3:e2:f4:f4:ca:3c:9e:d6:40:a0:5e:f5:67:f3:6c:86: 1d:8a:82:88:c7:5b:ff:44:01:da:15:02:9f:1e:47:cd:7f:ac: 98:9d:22:2a:c7:12:ca:ae:50:99:13:71:ac:69:14:b0:06:ba: 9e:bb:1c:bd:5d:06:bb:b1:81:cd:e6:7a:c2:76:93:16:0e:31: 21:7b:3b:73:c1:60:69:75:54:b8:fe:7b:ff:9f:4c:ea:85:e3: 66:ce:3f:3b:ee:90:47:b0:c6:b5:ef:0e:20:df:ae:98:ae:d0: c7:0f:65:c7:b2:09:aa:90:fb:66:e9:9a:23:01:b9:97:b3:e7: 4e:38:f8:83:47:6a:33:0e:c7:d9:38:95:67:6a:82:09:10:4f: 98:16:a4:91:f4:55:0a:21:d6:ed:80:aa:d2:c0:04:1e:2c:32: 31:c2:52:86:07:20:2c:7a:38:e2:74:2d:ac:f4:f3:d7:a3:b9: 56:2b:6e:ff:1d:89:0d:ab:e9:56:2e:a9:1d:cd:3f:e5:75:43: bf:58:18:b5:9b:2f:b8:87:13:80:93:59:2b:88:2e:5b:80:f2: e0:4e:aa:04:17:59:55:a7:b3:48:89:c3:39:1d:66:80:b0:ab: 22:52:55:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUhkO4YqQRDZD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NzY3ZjA4ZGQtZmZiMy00ZTBlLTg4MGUtMmY2MWU2MTMwY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYwbjtnLm/u2QGDUuOpX68GBrkWN7R0Erwvb 4Eg2BDjR52Dqj+V9/T+sVRJHdt9WzOJt+Uk81Pz5WCm9weKlkEXRjVGql6d2pngm W50rjoOGifAXc3oR1GzDKSASheQCaeZ4hUGGrXgGqVFLgoR3nJ5jq4YabHZ1/UG0 kInOY/WyWExyqii9/nS1qIAUoqBguQeFeb+GwU9/ObC0XEwR8iG4GzdU7pcNBPkQ 9Ox/4MYhWZJ0WRTY3A4C6uOkk6f7CojmObkhh7xEbjfSJYnvbZgPOXtadz8vYnlO tU0CGd4hr5G1PQUGygmz0jWgmFmMLJiY1f457kdeTlW2MbhL7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzd4OiT+WGpHVKnC4D2VCzlF2qAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI0NWYyYzQtNzZhMy0z ODAyLTljYTMtN2MyZWU1ZjYwNjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYAYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2TAZRjSW7DC1ua9gxVVrWVuVd94+L09Mo8ntZAoF71Z/Nshh2KgojH W/9EAdoVAp8eR81/rJidIirHEsquUJkTcaxpFLAGup67HL1dBruxgc3mesJ2kxYO MSF7O3PBYGl1VLj+e/+fTOqF42bOPzvukEewxrXvDiDfrpiu0McPZceyCaqQ+2bp miMBuZez5044+INHajMOx9k4lWdqggkQT5gWpJH0VQoh1u2AqtLABB4sMjHCUoYH ICx6OOJ0Laz089ejuVYrbv8diQ2r6VYuqR3NP+V1Q79YGLWbL7iHE4CTWSuILluA 8uBOqgQXWVWns0iJwzkdZoCwqyJSVRs= -----END CERTIFICATE-----Generated at Sat Jun 7 14:35:00 2025 by rpki-client