$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6ba5fd4-ee3e-3b99-ae3e-ba0319686600.roa File: f6ba5fd4-ee3e-3b99-ae3e-ba0319686600.roa (raw, json) Hash identifier: +GWl0v6E+KsLXL/SKhgl0lUkR1iR4OLwQCwEhY12lRM= Subject key identifier: DE:BF:59:62:39:35:8D:95:DB:42:1A:6E:61:BE:FD:8A:17:BD:25:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849EA85416885A4BC5433CAC880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6ba5fd4-ee3e-3b99-ae3e-ba0319686600.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 20940 IP address blocks: 96.17.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:41:68:85:a4:bc:54:33:ca:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=e742a644-51ba-4804-8532-4dc9d328b4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:c7:5f:7c:5a:5f:d9:50:cf:7d:e1:09:3a: 3c:11:64:1d:06:f3:ad:49:c8:e4:33:e5:66:01:ee: a2:2e:24:c0:e0:7e:4e:2d:95:2f:fa:c4:28:ea:d4: 3e:bc:26:29:a2:a0:18:d6:14:17:b5:63:1c:0c:c3: f0:73:3d:fe:aa:d6:ca:bc:40:6a:c5:06:85:d3:42: 7b:5d:6f:14:b9:19:28:74:bd:06:bf:91:d7:be:4a: c5:31:e8:6c:14:a7:5f:46:a1:02:a2:43:17:7e:b7: 08:e1:9f:5e:bd:28:32:d3:38:17:5b:ec:36:f1:67: 9e:98:94:76:5c:00:47:c7:26:bc:4a:80:0a:1f:23: 95:1c:71:8a:0a:8c:73:f0:b6:30:63:9a:f8:c4:7f: e8:69:d7:40:e5:ad:86:86:cb:26:cd:dd:6b:88:eb: 44:1d:c4:16:22:c5:c9:bf:9a:ea:49:e1:86:3b:40: 9a:10:ab:0d:88:06:5e:c5:fa:b9:c1:24:af:66:86: dc:59:a9:12:df:ce:a9:cf:11:80:f0:4b:93:87:7e: 13:cf:7d:88:8f:73:19:7f:ab:60:7e:07:5b:88:2f: c1:20:25:27:b2:73:3c:98:d7:82:74:74:94:31:65: 68:94:1a:03:16:37:f5:d0:59:a5:2f:bc:05:6e:49: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BF:59:62:39:35:8D:95:DB:42:1A:6E:61:BE:FD:8A:17:BD:25:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6ba5fd4-ee3e-3b99-ae3e-ba0319686600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 96.17.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c1:25:15:5d:da:9a:d3:57:a5:cf:e9:0a:1d:45:09:de:fe: 46:ae:73:a1:c9:9f:40:a0:d3:33:a5:e6:71:bc:51:c6:88:c2: 83:2c:f6:5f:84:e2:9b:72:5b:21:1f:94:8d:26:46:95:03:0b: 94:c1:10:09:1e:54:bd:90:15:c3:d2:71:f2:17:4e:7f:de:86: e1:80:2e:b7:1f:18:16:8d:60:a4:15:05:93:66:cd:df:75:5f: dd:a6:74:93:9a:36:23:28:54:c8:f0:76:4d:9d:a2:fb:7f:80: d8:31:70:1b:90:1d:e8:29:2e:8c:cd:43:43:d6:4d:ba:a6:63: 9e:6f:0d:4e:51:be:41:d9:64:96:e0:3a:d3:1f:ce:db:7a:4c: d6:57:63:d0:bf:85:e7:ab:8e:55:35:72:f9:fd:24:02:34:c6: 2c:a3:27:3a:23:1c:70:e3:fe:88:f2:be:68:b7:52:57:67:0d: ff:f9:2a:67:38:c5:6d:26:1d:5e:f7:22:3d:fc:ed:3d:2c:91: 28:f5:cf:13:f8:c4:8d:2f:71:52:fe:c5:d2:40:3a:3a:27:b0: 8f:a4:30:d3:27:60:ab:23:89:6e:18:12:cb:ea:55:8b:b0:10: 0b:5c:68:ff:8d:b0:9f:1c:10:db:62:3c:03:9b:0d:65:84:91: 46:98:da:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhUFohaS8VDPKyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZTc0MmE2NDQtNTFiYS00ODA0LTg1MzItNGRjOWQzMjhiNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovXHX3xaX9lQz33hCTo8EWQdBvOtScjkM+Vm Ae6iLiTA4H5OLZUv+sQo6tQ+vCYpoqAY1hQXtWMcDMPwcz3+qtbKvEBqxQaF00J7 XW8UuRkodL0Gv5HXvkrFMehsFKdfRqECokMXfrcI4Z9evSgy0zgXW+w28WeemJR2 XABHxya8SoAKHyOVHHGKCoxz8LYwY5r4xH/oaddA5a2Ghssmzd1riOtEHcQWIsXJ v5rqSeGGO0CaEKsNiAZexfq5wSSvZobcWakS386pzxGA8EuTh34Tz32Ij3MZf6tg fgdbiC/BICUnsnM8mNeCdHSUMWVolBoDFjf10FmlL7wFbkkG9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6/WWI5NY2V20IabmG+/YoXvSUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjZiYTVmZDQtZWUzZS0z Yjk5LWFlM2UtYmEwMzE5Njg2NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYBG1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDBJRVd2prTV6XP6QodRQne/kauc6HJn0Cg0zOl5nG8UcaIwoMs9l+E 4ptyWyEflI0mRpUDC5TBEAkeVL2QFcPScfIXTn/ehuGALrcfGBaNYKQVBZNmzd91 X92mdJOaNiMoVMjwdk2dovt/gNgxcBuQHegpLozNQ0PWTbqmY55vDU5RvkHZZJbg OtMfztt6TNZXY9C/heerjlU1cvn9JAI0xiyjJzojHHDj/ojyvmi3UldnDf/5Kmc4 xW0mHV73Ij387T0skSj1zxP4xI0vcVL+xdJAOjonsI+kMNMnYKsjiW4YEsvqVYuw EAtcaP+NsJ8cENtiPAObDWWEkUaY2lQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:28 2025 by rpki-client