$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa File: 91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa (raw, json) Hash identifier: Q13TzqLBGoHr6LjR6mZbhteQEaqq9yMSX79T/wklfjs= Subject key identifier: 86:F0:8B:C8:C2:A6:32:AA:84:D3:4D:01:DA:CD:97:08:A4:50:30:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBC3DC52CB1EA709580A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33652 IP address blocks: 96.109.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:c3:dc:52:cb:1e:a7:09:58:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=f0d92084-750a-4e7f-b640-000a9c067ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:19:11:f0:d8:c5:7a:b9:7e:db:8e:6b:18:9c: bf:d8:d9:d5:fb:ed:39:d2:3f:69:30:8e:24:b0:8f: e1:23:95:3d:bb:0b:91:ae:0d:f9:ee:39:3d:05:d7: 0a:9d:d6:47:f9:fa:35:f8:84:59:93:24:57:6f:a8: b3:2d:ac:8a:13:5d:7a:1e:5c:7d:2f:d0:29:e7:06: 88:f2:89:f3:a8:78:bc:24:53:b7:49:dd:aa:01:2d: 09:96:7a:06:14:d3:b0:e9:63:e3:94:ac:e0:aa:df: ba:42:86:d5:5e:1f:08:11:1f:5c:17:ed:39:a3:7c: 1d:d7:17:0c:e4:bd:07:87:f9:2e:bc:2f:3b:09:c4: 41:c7:9a:c4:51:79:5b:bb:f8:6e:07:e5:b6:10:43: fe:2a:f1:80:30:71:16:ac:54:13:ec:55:94:98:f5: 4f:70:ed:2e:67:6b:93:49:83:31:7b:05:69:d9:8d: cd:b6:4a:15:cb:29:75:3a:be:85:64:d6:db:f3:7a: 50:6e:b6:49:09:4c:a3:a1:05:f6:82:32:1d:9e:52: fd:be:f7:a8:5e:4c:8c:95:95:45:8f:9d:b7:1e:80: 62:bf:36:0a:ad:23:23:a0:1f:3e:27:d4:5f:57:79: e4:12:ad:de:b6:f6:de:b8:46:16:fb:21:41:7e:c9: 35:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F0:8B:C8:C2:A6:32:AA:84:D3:4D:01:DA:CD:97:08:A4:50:30:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.109.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c8:80:cd:89:5e:0b:62:f4:a1:38:54:44:d5:b1:9a:1c:46: d9:2c:6e:72:be:61:1c:d9:fc:f6:78:9a:8d:ff:d1:cf:1b:64: a4:21:0f:b6:8c:3a:59:a8:d1:39:7a:72:76:6c:32:cc:0a:9c: de:30:c8:a6:f9:25:30:25:b4:34:6c:3c:d5:af:8f:15:53:d9: ac:50:52:4a:14:12:44:4c:7b:63:91:74:c5:c0:de:8d:77:2a: e6:ca:21:2b:a5:53:0b:55:11:7a:ce:67:0c:10:22:b2:3d:75: 83:a8:be:7f:25:de:9c:93:4b:35:c4:a7:d2:d4:dc:18:68:83: 1e:93:fc:d4:73:ca:5e:6b:06:26:ea:33:b7:eb:c7:9f:37:83: 56:59:2d:69:53:bf:5b:0b:9e:b0:da:6c:89:d9:37:6d:65:30: e2:89:51:6f:9c:fe:28:ce:b4:a2:62:24:a1:ad:a0:31:ec:b5: ba:93:8c:e0:60:e0:e3:5e:70:03:85:2b:0f:0e:ec:7c:90:e7: 77:8e:fc:7a:a6:af:d0:3b:db:76:27:fe:0c:e7:b0:f8:d5:7a: 92:6f:88:f0:e8:0d:dd:14:f8:b0:1c:c0:17:4e:cd:93:71:da: 83:8b:70:47:9f:cf:de:6c:98:97:74:5c:04:0f:bd:24:aa:5c: 35:85:6c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+8PcUssepwlYCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZjBkOTIwODQtNzUwYS00ZTdmLWI2NDAtMDAwYTljMDY3ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hkR8NjFerl+245rGJy/2NnV++050j9pMI4k sI/hI5U9uwuRrg357jk9BdcKndZH+fo1+IRZkyRXb6izLayKE116Hlx9L9Ap5waI 8onzqHi8JFO3Sd2qAS0JlnoGFNOw6WPjlKzgqt+6QobVXh8IER9cF+05o3wd1xcM 5L0Hh/kuvC87CcRBx5rEUXlbu/huB+W2EEP+KvGAMHEWrFQT7FWUmPVPcO0uZ2uT SYMxewVp2Y3NtkoVyyl1Or6FZNbb83pQbrZJCUyjoQX2gjIdnlL9vveoXkyMlZVF j523HoBivzYKrSMjoB8+J9RfV3nkEq3etvbeuEYW+yFBfsk14QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbwi8jCpjKqhNNNAdrNlwikUDASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFhMzllMDQtYTRiZC0z ZjZlLThiM2MtMDZjM2M5YzZlNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYG3UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnIgM2JXgti9KE4VETVsZocRtksbnK+YRzZ/PZ4mo3/0c8bZKQhD7aM Olmo0Tl6cnZsMswKnN4wyKb5JTAltDRsPNWvjxVT2axQUkoUEkRMe2ORdMXA3o13 KubKISulUwtVEXrOZwwQIrI9dYOovn8l3pyTSzXEp9LU3Bhogx6T/NRzyl5rBibq M7frx583g1ZZLWlTv1sLnrDabInZN21lMOKJUW+c/ijOtKJiJKGtoDHstbqTjOBg 4ONecAOFKw8O7HyQ53eO/Hqmr9A723Yn/gznsPjVepJviPDoDd0U+LAcwBdOzZNx 2oOLcEefz95smJd0XAQPvSSqXDWFbG8= -----END CERTIFICATE-----Generated at Sun Jul 20 17:00:09 2025 by rpki-client