$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa File: 2c256c98-a43c-3061-80b5-8c349c47380b.roa (raw, json) Hash identifier: TGKCDNib0foFYWYmHlXQs7zaWb9I7NLqn/BcXzyNr7w= Subject key identifier: DF:D2:41:FE:16:1E:4E:16:0A:47:70:A7:A5:C2:70:72:1D:A5:FD:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA8540A2A0DA18D85D962DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 96.17.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:40:a2:a0:da:18:d8:5d:96:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=95ca8db5-9760-4357-acb1-98b2e75b3498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:b3:94:25:bb:0b:15:9c:a9:c5:34:7a:38: f6:aa:63:73:9b:78:8f:47:9c:cb:de:81:c0:89:3a: 10:a2:f6:bc:f8:fa:b0:f3:a1:a8:e6:de:bd:de:51: 56:11:1a:1a:98:41:9c:46:7e:51:99:14:42:c8:17: 00:a2:f6:c1:13:4e:fc:30:bd:ba:5f:04:be:67:9b: f4:6b:c2:4b:12:a9:d3:b4:c4:d7:46:4a:14:de:4e: ba:c3:42:12:e6:90:95:93:0b:f7:13:20:2c:7b:c5: 3c:9a:1b:86:8b:aa:a5:ba:8d:7b:c5:66:a6:5c:8c: e9:b3:b5:2d:28:ce:55:e6:70:f4:da:61:55:a3:5d: 0f:49:87:1a:e6:02:80:a7:a4:c8:4d:10:e1:6b:94: 03:17:33:46:74:91:c3:91:eb:f6:62:3c:75:32:9d: 16:4f:a7:41:0d:22:1a:37:37:46:5e:bb:dd:80:ca: 9b:56:dd:87:ab:90:a4:fa:7d:2f:9f:70:50:95:6b: df:16:44:ef:07:70:50:43:0b:ae:68:05:0b:b0:c3: 0a:9a:20:92:de:7b:48:6f:c7:8d:bd:cd:0c:60:c8: 14:17:34:cc:db:34:a5:87:13:78:8c:bf:af:19:ae: 55:6d:2a:03:c1:2d:fb:7c:a8:56:a0:99:2d:37:0a: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D2:41:FE:16:1E:4E:16:0A:47:70:A7:A5:C2:70:72:1D:A5:FD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c256c98-a43c-3061-80b5-8c349c47380b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a0:94:70:c9:46:0d:d6:1b:1b:eb:38:c0:0e:05:fc:00:66: 16:2c:23:49:06:e1:66:8c:3c:70:b3:24:71:ed:1b:ba:5b:7f: 64:82:68:8d:89:35:cc:aa:94:b6:e4:5b:20:65:d4:ad:e9:d8: de:cc:c1:c5:a2:8c:cd:b6:8a:c8:fe:39:ee:32:88:ca:9a:3a: 2e:14:db:c6:15:26:7c:5e:a5:ba:0d:25:7d:4d:b7:0b:99:a9: 9c:cf:62:c1:06:eb:74:43:ab:e8:bb:41:d1:e7:77:ab:ec:b0: 74:1f:2e:dd:83:6c:48:a3:60:09:a3:a4:1e:c1:f1:73:3f:10: cf:42:5e:14:e1:fb:67:94:94:d8:c1:db:1a:a9:05:df:02:f4: e0:ac:5d:ae:1c:8e:ae:a4:07:d9:09:32:3f:91:40:e8:c2:ff: 0b:0a:40:84:27:16:b4:7c:16:4e:51:4f:52:10:5c:57:61:52: 03:30:b1:7e:5f:b5:0f:28:c2:73:53:68:cf:31:75:c1:c3:98: bd:a5:af:1b:43:72:97:9a:71:05:df:9b:72:12:50:2c:33:a3: 2c:40:31:21:fb:a5:b7:85:40:af:6e:a3:4f:82:1c:17:f9:3a: cc:9c:ae:eb:d6:34:2e:b3:89:96:1d:40:70:9f:77:06:7b:95: 70:dd:0e:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUCioNoY2F2WLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk OTVjYThkYjUtOTc2MC00MzU3LWFjYjEtOThiMmU3NWIzNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon2zlCW7CxWcqcU0ejj2qmNzm3iPR5zL3oHA iToQova8+Pqw86Go5t693lFWERoamEGcRn5RmRRCyBcAovbBE078ML26XwS+Z5v0 a8JLEqnTtMTXRkoU3k66w0IS5pCVkwv3EyAse8U8mhuGi6qluo17xWamXIzps7Ut KM5V5nD02mFVo10PSYca5gKAp6TITRDha5QDFzNGdJHDkev2Yjx1Mp0WT6dBDSIa NzdGXrvdgMqbVt2Hq5Ck+n0vn3BQlWvfFkTvB3BQQwuuaAULsMMKmiCS3ntIb8eN vc0MYMgUFzTM2zSlhxN4jL+vGa5VbSoDwS37fKhWoJktNwocTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/SQf4WHk4WCkdwp6XCcHIdpf1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmMyNTZjOTgtYTQzYy0z MDYxLTgwYjUtOGMzNDljNDczODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKglHDJRg3WGxvrOMAOBfwAZhYsI0kG4WaMPHCzJHHtG7pbf2SCaI2J NcyqlLbkWyBl1K3p2N7MwcWijM22isj+Oe4yiMqaOi4U28YVJnxepboNJX1NtwuZ qZzPYsEG63RDq+i7QdHnd6vssHQfLt2DbEijYAmjpB7B8XM/EM9CXhTh+2eUlNjB 2xqpBd8C9OCsXa4cjq6kB9kJMj+RQOjC/wsKQIQnFrR8Fk5RT1IQXFdhUgMwsX5f tQ8ownNTaM8xdcHDmL2lrxtDcpeacQXfm3ISUCwzoyxAMSH7pbeFQK9uo0+CHBf5 OsycruvWNC6ziZYdQHCfdwZ7lXDdDgg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:53 2025 by rpki-client