$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb853fd-acfc-32ee-858e-c10947cebc63.roa File: 2eb853fd-acfc-32ee-858e-c10947cebc63.roa (raw, json) Hash identifier: hVWYyRWt9j+OVVrxTyydhFkx9wevDZ33Ht8lDoYiKDg= Subject key identifier: D2:CD:CF:50:89:36:37:97:0D:76:5F:19:9A:51:B5:12:2E:F3:2B:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A7086145DE548D5F9793D5A20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb853fd-acfc-32ee-858e-c10947cebc63.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 7922 IP address blocks: 96.108.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:14:5d:e5:48:d5:f9:79:3d:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=fe9b16a1-21b2-4461-b40d-4dd25dd6b3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:68:41:1b:e8:9b:2a:3d:91:e1:ff:72:88: d9:48:25:8d:3f:bb:d5:7c:f3:0b:a4:b5:bb:ea:28: d1:93:6d:c2:39:07:02:44:38:31:a3:e2:89:75:83: f6:63:5f:4e:cb:5a:53:f7:41:2a:b8:3d:6c:24:ae: 45:8e:57:55:a1:5e:1b:0b:8d:2f:6a:60:e7:44:ab: 1e:19:91:66:3d:11:06:a0:11:d7:d5:a0:76:ec:13: 67:3f:37:b2:7e:9d:cb:97:fd:54:a1:57:3b:7f:4a: 4e:ea:fb:48:1f:32:2c:f8:c5:ac:cf:14:64:1b:3e: f2:c0:6b:8e:57:48:d5:96:e1:29:e0:66:0b:22:d1: 10:05:85:7a:c4:2f:89:d1:ac:8b:be:da:4e:e5:22: d2:98:8e:1d:60:18:5f:43:9e:a0:e2:93:6a:c2:1e: 6d:0a:1c:6c:95:5d:de:15:b6:96:10:af:0d:b8:99: 04:c5:1c:b7:4b:6a:aa:ea:0d:91:8f:fd:47:6a:93: fb:42:e2:e1:17:67:94:36:b6:5e:de:4d:e7:9c:21: af:2e:8b:5d:ca:76:97:2b:d6:f5:d2:29:cd:ed:95: a3:d2:52:b3:f2:9f:41:6f:1e:5c:99:23:53:b1:00: e6:53:46:24:ac:c1:58:e6:09:77:4c:45:af:6e:8f: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CD:CF:50:89:36:37:97:0D:76:5F:19:9A:51:B5:12:2E:F3:2B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2eb853fd-acfc-32ee-858e-c10947cebc63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:34:92:2b:71:8e:f6:47:bb:73:76:58:da:07:9c:a0:41:2e: 2b:c1:f1:60:0a:84:43:64:3d:8a:8a:52:44:d4:e1:a0:b3:2e: 6c:2b:74:6d:cc:38:2f:d6:f6:10:ab:8c:25:4c:f7:b3:ef:ef: dd:f4:17:b9:61:2d:42:1a:97:d8:6d:d9:82:ae:a0:d9:33:a3: b0:92:9d:e0:40:ea:4d:3b:06:63:95:4d:ac:d0:79:c7:e8:13: 3b:fc:19:8c:ba:6e:29:16:8d:9f:42:4f:31:16:49:0b:cb:b8: ed:4f:f3:30:86:61:b1:2b:aa:cc:d3:8b:4d:c1:15:4a:bc:62: f6:9b:af:a9:ff:fe:5d:57:46:3f:55:c4:85:a8:90:b3:02:1d: 8a:10:a9:4d:df:3b:03:54:a8:0e:56:85:7f:4e:df:dd:b0:22: 79:28:63:53:37:41:65:f4:0d:6e:12:3f:3d:4f:cd:79:b5:91: e5:43:03:83:4c:c6:62:49:61:c7:26:4e:2a:3d:cf:be:a7:a8: 96:b6:d6:d8:af:12:f8:ff:6f:89:30:47:8c:f3:3f:9f:c1:34: 3e:54:0a:75:3f:c5:a4:c1:2a:91:81:3e:d8:fd:ad:cd:ca:20: f2:68:a9:53:82:61:5c:75:7d:37:66:cb:93:fc:5e:89:09:69: a7:0e:1c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhhRd5UjV+Xk9WiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ZmU5YjE2YTEtMjFiMi00NDYxLWI0MGQtNGRkMjVkZDZiM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHNoQRvomyo9keH/cojZSCWNP7vVfPMLpLW7 6ijRk23COQcCRDgxo+KJdYP2Y19Oy1pT90EquD1sJK5FjldVoV4bC40vamDnRKse GZFmPREGoBHX1aB27BNnPzeyfp3Ll/1UoVc7f0pO6vtIHzIs+MWszxRkGz7ywGuO V0jVluEp4GYLItEQBYV6xC+J0ayLvtpO5SLSmI4dYBhfQ56g4pNqwh5tChxslV3e FbaWEK8NuJkExRy3S2qq6g2Rj/1HapP7QuLhF2eUNrZe3k3nnCGvLotdynaXK9b1 0inN7ZWj0lKz8p9Bbx5cmSNTsQDmU0YkrMFY5gl3TEWvbo8p1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLNz1CJNjeXDXZfGZpRtRIu8ysxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmViODUzZmQtYWNmYy0z MmVlLTg1OGUtYzEwOTQ3Y2ViYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYGxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk0kitxjvZHu3N2WNoHnKBBLivB8WAKhENkPYqKUkTU4aCzLmwrdG3M OC/W9hCrjCVM97Pv7930F7lhLUIal9ht2YKuoNkzo7CSneBA6k07BmOVTazQecfo Ezv8GYy6bikWjZ9CTzEWSQvLuO1P8zCGYbErqszTi03BFUq8Yvabr6n//l1XRj9V xIWokLMCHYoQqU3fOwNUqA5WhX9O392wInkoY1M3QWX0DW4SPz1PzXm1keVDA4NM xmJJYccmTio9z76nqJa21tivEvj/b4kwR4zzP5/BND5UCnU/xaTBKpGBPtj9rc3K IPJoqVOCYVx1fTdmy5P8XokJaacOHL0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:11:09 2025 by rpki-client