$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd1d046-f6fd-3d8f-aea7-6f9ec444f143.roa File: 8dd1d046-f6fd-3d8f-aea7-6f9ec444f143.roa (raw, json) Hash identifier: JF4YJyyPy/TGksEE/gjpiVHd84X8+IgWqxt4za+eotU= Subject key identifier: 74:D8:41:66:4B:D2:3F:8C:A4:BA:83:E1:87:AB:84:76:23:23:E0:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD239A8B1D5519DC802A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd1d046-f6fd-3d8f-aea7-6f9ec444f143.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33652 IP address blocks: 96.124.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:23:9a:8b:1d:55:19:dc:80:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=d252d13e-479c-459e-979d-d98cf06459a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:58:c1:40:45:88:ac:42:22:01:be:6d:34: 3d:92:41:2b:9e:b8:4d:d0:98:5a:5b:75:84:43:3b: 64:cb:3d:1b:f5:82:af:43:cf:df:62:8d:e1:55:4a: 3e:d4:b8:30:93:fa:7a:09:c8:84:d9:79:86:c1:9f: 8a:53:d4:c7:68:2d:3b:4f:6a:d0:6d:a1:d5:95:83: 12:ba:44:45:77:82:cd:5d:89:e0:14:79:02:b7:f2: 74:49:df:f6:d8:00:5a:b7:ae:d3:74:99:19:70:8e: 0b:38:03:45:db:79:e8:fb:79:3e:a1:f8:ab:16:25: 46:3f:e5:b6:ef:cb:2f:64:0b:e8:15:86:43:3b:d1: 99:d3:bb:5f:3d:80:9f:c4:52:ae:03:82:a3:89:9e: 01:f0:b1:29:54:e0:fa:f8:4f:7d:84:fb:3c:86:bc: de:c9:86:6e:eb:8e:59:10:fb:1b:49:19:93:f8:a5: 6b:11:07:80:cc:5c:00:db:f3:68:24:58:31:11:e8: c1:fe:cc:f2:65:10:08:86:2b:6c:9f:61:c4:76:b6: e4:82:e6:ad:6d:61:5c:16:16:23:e0:01:e6:88:e7: 7e:06:54:cc:e7:dc:e8:56:a0:92:7c:e5:a7:a6:5d: 28:a8:9e:02:b8:48:f1:9a:02:00:e0:01:9b:72:81: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D8:41:66:4B:D2:3F:8C:A4:BA:83:E1:87:AB:84:76:23:23:E0:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd1d046-f6fd-3d8f-aea7-6f9ec444f143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.124.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:38:eb:7a:d3:87:83:61:08:ac:5b:72:a6:47:dc:e4:60:78: eb:a0:64:4f:ad:4e:96:62:77:cd:51:5c:64:31:91:68:dc:8e: 83:dd:9c:fa:d4:7e:f0:d4:64:3c:5d:f0:06:1e:ed:22:65:01: e0:5a:ee:73:04:6d:b1:e8:eb:87:d6:90:df:bd:25:01:e9:ef: 66:08:a0:19:2e:a3:86:5d:12:fb:d3:c0:ae:15:6c:df:34:80: 7b:4c:67:46:de:b7:b3:a7:fd:fb:0b:3a:81:5b:15:4e:0e:65: 9a:92:06:20:93:40:87:14:32:a0:2a:60:7e:50:75:a1:c3:8d: 6a:cf:ef:e7:8b:ee:dc:e9:e9:21:d6:86:54:84:54:4a:47:4b: 5e:ef:fb:c1:62:cb:9f:cb:b1:81:20:65:97:11:3a:b8:b4:0c: 40:aa:a0:79:43:b5:d1:a8:39:e9:5e:d2:38:39:67:0f:86:c2: 67:42:ee:c5:2e:29:a7:2a:24:2b:bb:54:86:b9:8c:6b:f3:86: 57:ec:74:27:74:ea:c5:27:4b:15:c3:06:2c:20:8a:96:af:f2: 36:d2:ba:1b:07:d3:fe:33:de:47:45:66:5b:88:ed:93:9b:28: 9a:70:20:3d:36:9f:d4:32:d8:fd:de:38:47:81:8f:2c:13:14: 6f:4a:1f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/SOaix1VGdyAKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZDI1MmQxM2UtNDc5Yy00NTllLTk3OWQtZDk4Y2YwNjQ1OWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApptYwUBFiKxCIgG+bTQ9kkErnrhN0JhaW3WE Qztkyz0b9YKvQ8/fYo3hVUo+1Lgwk/p6CciE2XmGwZ+KU9THaC07T2rQbaHVlYMS ukRFd4LNXYngFHkCt/J0Sd/22ABat67TdJkZcI4LOANF23no+3k+ofirFiVGP+W2 78svZAvoFYZDO9GZ07tfPYCfxFKuA4KjiZ4B8LEpVOD6+E99hPs8hrzeyYZu645Z EPsbSRmT+KVrEQeAzFwA2/NoJFgxEejB/szyZRAIhitsn2HEdrbkguatbWFcFhYj 4AHmiOd+BlTM59zoVqCSfOWnpl0oqJ4CuEjxmgIA4AGbcoEMKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTYQWZL0j+MpLqD4YerhHYjI+CVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRkMWQwNDYtZjZmZC0z ZDhmLWFlYTctNmY5ZWM0NDRmMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk463rTh4NhCKxbcqZH3ORgeOugZE+tTpZid81RXGQxkWjcjoPdnPrU fvDUZDxd8AYe7SJlAeBa7nMEbbHo64fWkN+9JQHp72YIoBkuo4ZdEvvTwK4VbN80 gHtMZ0bet7On/fsLOoFbFU4OZZqSBiCTQIcUMqAqYH5QdaHDjWrP7+eL7tzp6SHW hlSEVEpHS17v+8Fiy5/LsYEgZZcROri0DECqoHlDtdGoOele0jg5Zw+GwmdC7sUu KacqJCu7VIa5jGvzhlfsdCd06sUnSxXDBiwgipav8jbSuhsH0/4z3kdFZluI7ZOb KJpwID02n9Qy2P3eOEeBjywTFG9KH6c= -----END CERTIFICATE-----Generated at Sun Jul 20 17:28:09 2025 by rpki-client