$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/304ebbb1-8e3a-3c95-84f8-1b0e53eb70f6.roa File: 304ebbb1-8e3a-3c95-84f8-1b0e53eb70f6.roa (raw, json) Hash identifier: lSXQJo+YqG8v5WFuczDtx1Rr+Az+w8GK54GXNsM/0r0= Subject key identifier: 61:9C:CD:C7:E5:71:0C:50:B3:7B:C0:CD:1F:F5:70:0E:14:0A:B6:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB61E374BB4ABE463E6800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/304ebbb1-8e3a-3c95-84f8-1b0e53eb70f6.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 96.124.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:61:e3:74:bb:4a:be:46:3e:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=7a8cbb6e-68d3-4c46-a0a1-5807220205e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:59:8e:c4:fd:3d:b9:3f:99:c1:6d:83:c4: 08:90:f2:ec:a2:f3:cd:0d:31:a6:3f:b7:36:e3:bb: ef:5c:f0:2d:99:04:1a:01:8f:f4:44:99:43:14:af: 8c:c2:9f:4e:6f:56:ed:05:1a:5e:ea:7c:7e:0f:2b: 18:54:a8:b8:a4:dc:54:c8:6a:a9:fd:9e:ce:0b:da: b7:4e:df:9d:5b:8d:a4:60:99:a0:bf:b9:34:64:8a: 3c:bf:f8:26:0c:a1:5c:86:5d:87:ee:22:9f:49:f4: 61:49:3b:50:76:64:04:8b:6c:74:26:ec:60:a8:1b: a5:15:e2:23:1f:4f:f8:17:46:76:1b:d7:92:33:51: 23:57:9c:c5:0c:26:a6:4f:24:8f:0f:45:ea:3a:14: f1:26:bb:67:6e:dc:91:c4:23:e6:c2:52:0b:d2:9d: 30:91:10:9d:b7:2d:e3:30:0c:5d:2b:ba:ed:80:a3: 5e:c2:81:b9:f7:2a:a6:2e:2a:d3:d7:70:26:71:81: 79:73:07:01:df:f5:4d:66:f6:91:b7:ee:88:4f:01: 87:dc:21:66:b1:b0:32:d8:cf:27:4b:86:cd:ee:18: 6d:24:2f:14:eb:0e:03:37:f0:d2:ec:61:85:e8:21: 34:a1:54:ca:bd:ae:fb:cb:8b:dc:b5:af:09:5a:02: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9C:CD:C7:E5:71:0C:50:B3:7B:C0:CD:1F:F5:70:0E:14:0A:B6:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/304ebbb1-8e3a-3c95-84f8-1b0e53eb70f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.124.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:43:f3:87:15:1e:64:87:6c:ff:89:ab:35:02:5c:9a:a0:64: a5:10:f7:ee:94:d7:92:6a:fe:b1:b6:a1:f4:e9:7f:af:6e:0d: c0:6a:d5:2c:90:1d:b2:89:09:99:72:8c:92:6b:2c:f9:2a:75: 92:eb:d0:7c:84:3c:b0:ac:cb:28:a3:f8:d1:17:3b:2c:d7:e6: 5f:00:ee:03:ca:d0:20:a9:da:a8:e1:eb:f2:c9:39:89:31:67: 5f:27:22:e9:a4:97:65:26:86:a2:60:2e:be:09:b8:46:22:f5: 79:2b:53:bb:fe:9c:18:47:c7:0d:4a:4e:08:50:20:76:62:2a: 80:34:3d:1e:d2:ad:42:95:b8:0f:cb:49:6a:ee:88:b8:8b:e6: 07:99:ff:22:78:1f:c5:c9:5b:02:c6:39:f0:99:7a:a2:d1:f9: 8f:de:5b:0f:cc:f0:23:d3:3d:5e:df:08:ec:d2:98:ba:c3:6e: c6:9c:41:77:c0:fc:da:6a:9e:56:c7:42:e4:2e:f3:ce:6a:6e: ee:b0:29:29:2b:bc:06:03:0a:39:d7:e1:8c:21:30:dd:1a:75: 07:0c:8d:1e:c6:ae:87:d3:dc:c6:f5:f5:00:ee:76:b5:96:60: 2b:a0:1b:53:c3:66:51:97:3a:12:59:3a:23:82:8d:3f:63:12: 35:52:97:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+2HjdLtKvkY+aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk N2E4Y2JiNmUtNjhkMy00YzQ2LWEwYTEtNTgwNzIyMDIwNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnexZjsT9Pbk/mcFtg8QIkPLsovPNDTGmP7c2 47vvXPAtmQQaAY/0RJlDFK+Mwp9Ob1btBRpe6nx+DysYVKi4pNxUyGqp/Z7OC9q3 Tt+dW42kYJmgv7k0ZIo8v/gmDKFchl2H7iKfSfRhSTtQdmQEi2x0JuxgqBulFeIj H0/4F0Z2G9eSM1EjV5zFDCamTySPD0XqOhTxJrtnbtyRxCPmwlIL0p0wkRCdty3j MAxdK7rtgKNewoG59yqmLirT13AmcYF5cwcB3/VNZvaRt+6ITwGH3CFmsbAy2M8n S4bN7hhtJC8U6w4DN/DS7GGF6CE0oVTKva77y4vcta8JWgJuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGczcflcQxQs3vAzR/1cA4UCraWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzA0ZWJiYjEtOGUzYS0z Yzk1LTg0ZjgtMWIwZTUzZWI3MGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhD84cVHmSHbP+JqzUCXJqgZKUQ9+6U15Jq/rG2ofTpf69uDcBq1SyQ HbKJCZlyjJJrLPkqdZLr0HyEPLCsyyij+NEXOyzX5l8A7gPK0CCp2qjh6/LJOYkx Z18nIumkl2UmhqJgLr4JuEYi9XkrU7v+nBhHxw1KTghQIHZiKoA0PR7SrUKVuA/L SWruiLiL5geZ/yJ4H8XJWwLGOfCZeqLR+Y/eWw/M8CPTPV7fCOzSmLrDbsacQXfA /NpqnlbHQuQu885qbu6wKSkrvAYDCjnX4YwhMN0adQcMjR7GrofT3Mb19QDudrWW YCugG1PDZlGXOhJZOiOCjT9jEjVSlyQ= -----END CERTIFICATE-----Generated at Sun Jul 20 17:39:46 2025 by rpki-client