$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa File: 2db60313-820c-3bb6-85f6-8c85184ca8a4.roa (raw, json) Hash identifier: NW8fAWYUwXjOrdYe+EiWUGUpYGCfM0iAFdsax+e//mY= Subject key identifier: A8:D9:61:69:EB:22:84:45:C6:39:03:CF:52:88:D0:8B:15:17:1B:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA853FED8F877E00369EBF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 16625 IP address blocks: 96.16.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:3f:ed:8f:87:7e:00:36:9e:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=d53b952f-dcba-41da-b785-bcf8cf751441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:8d:1e:52:fa:da:17:65:e7:dc:c5:34:24: 3b:e3:b1:93:34:2c:e3:7b:b2:ce:a1:9e:25:41:69: 5e:f7:8c:8d:fb:ab:9f:25:39:6c:e8:b2:b2:64:59: c0:b9:68:01:76:e1:ee:97:82:74:2f:2a:de:0c:3a: 98:95:b5:ba:33:98:61:d5:6f:25:bf:20:24:8d:b0: a6:9f:64:7b:d4:fb:af:36:0a:de:15:98:ae:aa:b4: dc:f6:1c:b8:48:96:98:74:75:0f:ef:23:91:db:d7: 4a:08:78:5f:3d:26:d8:89:f1:09:f5:25:47:41:54: 29:fe:c1:f7:da:bc:36:95:bb:83:62:81:20:93:b4: 77:91:dd:8e:c7:d4:02:00:d2:8d:91:0d:98:30:02: b6:28:0d:8e:ce:85:f2:c6:01:03:50:be:00:a7:19: 0f:3b:8d:77:29:01:83:b2:c7:31:ce:eb:88:17:c4: f8:ef:e3:dc:a2:f6:34:32:bc:ba:db:64:77:47:92: 0a:39:f6:4b:c8:24:fe:33:ef:59:d4:2f:d5:e3:ce: 2e:1d:e2:79:61:10:0b:97:25:e3:12:90:73:0f:6e: a1:bd:92:72:c8:3e:30:bc:03:d1:fc:3a:d9:7f:36: c9:ac:72:9c:0f:bd:a2:1b:5f:37:1b:89:e4:7b:b1: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D9:61:69:EB:22:84:45:C6:39:03:CF:52:88:D0:8B:15:17:1B:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2db60313-820c-3bb6-85f6-8c85184ca8a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.16.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:68:9a:66:43:5c:bd:89:9a:b8:fe:41:7f:bb:4f:c9:2d:29: 20:1b:89:93:c6:89:52:1a:89:22:85:f3:5e:2b:7f:7e:ba:ee: 8a:9c:15:68:54:e0:54:cd:8f:8d:00:0c:29:62:84:f0:c7:ff: 0f:f3:fc:48:7f:11:4f:2a:bf:38:b4:18:70:2b:39:6d:7d:ce: 43:1a:70:23:08:a8:83:7a:24:fb:62:1e:e8:ae:ed:dd:1b:58: ac:1a:8d:31:67:ab:3b:31:35:4f:df:fb:42:95:81:ec:d3:d1: 9c:dd:5a:49:e3:f1:46:52:f3:14:ca:00:62:5f:c7:c0:c2:29: f7:1c:7f:9e:dc:b6:ff:25:8c:11:0f:6f:da:fb:b8:40:b8:e0: 1b:a6:08:fe:e9:7f:78:ea:43:ee:0d:95:a8:da:a6:ed:29:27: 26:76:9a:f2:db:cb:61:52:c1:c7:3d:56:1f:68:60:14:f0:70: db:26:1a:8f:bc:07:62:f0:c7:41:d7:d5:ed:87:0a:1a:a1:84: 2d:4a:14:34:84:e5:c5:ec:ea:09:14:9c:96:1a:b9:ca:d6:5f: 9f:67:d2:84:d3:db:40:05:eb:a5:be:16:37:d5:f2:2e:c6:bf: 38:42:da:2a:bc:29:a1:72:e1:51:6e:8d:80:6c:39:e9:1f:73: 13:8d:71:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhT/tj4d+ADaevwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZDUzYjk1MmYtZGNiYS00MWRhLWI3ODUtYmNmOGNmNzUxNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLCNHlL62hdl59zFNCQ747GTNCzje7LOoZ4l QWle94yN+6ufJTls6LKyZFnAuWgBduHul4J0LyreDDqYlbW6M5hh1W8lvyAkjbCm n2R71PuvNgreFZiuqrTc9hy4SJaYdHUP7yOR29dKCHhfPSbYifEJ9SVHQVQp/sH3 2rw2lbuDYoEgk7R3kd2Ox9QCANKNkQ2YMAK2KA2OzoXyxgEDUL4ApxkPO413KQGD sscxzuuIF8T47+PcovY0Mry622R3R5IKOfZLyCT+M+9Z1C/V484uHeJ5YRALlyXj EpBzD26hvZJyyD4wvAPR/DrZfzbJrHKcD72iG183G4nke7EMHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjZYWnrIoRFxjkDz1KI0IsVFxuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRiNjAzMTMtODIwYy0z YmI2LTg1ZjYtOGM4NTE4NGNhOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYBDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJommZDXL2Jmrj+QX+7T8ktKSAbiZPGiVIaiSKF814rf3667oqcFWhU 4FTNj40ADClihPDH/w/z/Eh/EU8qvzi0GHArOW19zkMacCMIqIN6JPtiHuiu7d0b WKwajTFnqzsxNU/f+0KVgezT0ZzdWknj8UZS8xTKAGJfx8DCKfccf57ctv8ljBEP b9r7uEC44BumCP7pf3jqQ+4Nlajapu0pJyZ2mvLby2FSwcc9Vh9oYBTwcNsmGo+8 B2Lwx0HX1e2HChqhhC1KFDSE5cXs6gkUnJYaucrWX59n0oTT20AF66W+FjfV8i7G vzhC2iq8KaFy4VFujYBsOekfcxONcb4= -----END CERTIFICATE-----Generated at Sat Jun 7 14:13:46 2025 by rpki-client