$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f494245a-0a43-3c9c-af6f-ce0a2cd44731.roa File: f494245a-0a43-3c9c-af6f-ce0a2cd44731.roa (raw, json) Hash identifier: qIxaIQVCGbibyFK0WNEgIAgc6Y8h4CnSXNXVX/A3ND4= Subject key identifier: 44:5A:33:DD:7A:ED:C3:11:22:4C:24:C1:42:35:54:56:0D:7A:0C:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB9A48209CE4E828522D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f494245a-0a43-3c9c-af6f-ce0a2cd44731.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 20214 IP address blocks: 96.108.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:9a:48:20:9c:e4:e8:28:52:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=d8099556-bb02-4df1-94d6-20f41ab9e42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:47:4e:e0:ed:c9:25:fb:93:fa:81:3f:33: 9e:25:c2:29:0a:43:51:01:fe:2e:2f:a0:cc:0e:24: a2:59:3b:ec:ba:5a:3b:77:bd:2c:b1:30:60:26:f0: 95:00:8b:59:4f:2a:03:e1:12:d9:43:65:a9:30:9b: 3f:4d:dc:ee:83:91:43:91:52:80:79:06:2f:d4:fc: 5a:47:eb:1c:4a:d6:6b:95:01:fc:74:ac:c7:41:f0: f1:26:30:dc:78:0d:56:06:80:0a:c5:c5:e1:de:bc: 2b:75:0a:71:a1:ce:b5:31:f0:80:42:56:3f:68:84: 49:c1:53:c9:71:a4:e7:81:ce:2a:e6:66:de:23:6a: ec:14:e3:b9:6d:cb:6a:f5:19:18:1e:38:f8:79:3f: 67:3c:45:07:e5:40:3c:98:26:15:01:37:cc:3b:19: 1b:fc:55:2b:da:1d:06:a1:a4:a7:c8:f5:78:1f:8a: e0:24:9b:5f:c6:58:fe:7c:43:01:99:5b:f4:58:9e: bc:20:dd:35:78:5e:b1:ea:8e:69:be:2e:ba:da:76: f3:1f:c5:af:08:06:37:27:d5:41:8d:e6:7d:9d:f2: dd:bf:65:10:64:81:bc:49:a8:60:af:9a:9d:3a:d5: f7:ec:29:15:ab:0b:f8:02:c8:7f:ad:50:53:5c:82: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5A:33:DD:7A:ED:C3:11:22:4C:24:C1:42:35:54:56:0D:7A:0C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f494245a-0a43-3c9c-af6f-ce0a2cd44731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.108.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f4:c4:13:3e:93:55:8d:b4:ba:b5:59:8e:8b:82:a3:d6:56: 06:6f:29:df:08:e6:1f:7f:5b:74:3d:2d:45:7a:2b:1d:d7:b3: bb:fd:d3:dc:e4:c7:9b:53:11:c0:b9:5c:92:b0:36:2a:a3:19: d2:32:89:13:ba:45:28:53:97:77:c1:e8:28:58:22:cd:ba:d8: 39:75:92:86:93:96:7d:55:70:40:e4:b8:0a:01:67:1c:88:b5: 94:ca:52:70:61:89:04:04:de:51:1e:93:b1:66:04:d3:b1:84: 54:4f:ec:71:5f:ca:c5:f4:f8:e3:6e:c0:f0:88:8c:cc:c9:13: 17:d6:62:2e:83:bc:7e:da:a8:c7:72:df:c9:16:c6:ae:92:3d: d8:9a:58:9f:fd:20:a1:de:11:e0:04:31:5a:88:c4:bb:05:d8: 6a:cf:da:d5:f9:2c:59:f1:de:a8:e0:2e:3f:59:b3:4f:2d:82: 02:4e:8e:48:0c:42:b1:88:ff:ba:9e:19:cb:74:c2:92:40:ec: ef:82:6d:f3:7a:2c:27:b6:3b:84:14:a3:1b:ae:d8:08:60:64: 7c:40:0b:95:e6:59:19:b2:7c:d9:bb:cd:88:84:27:5a:d2:53: da:18:12:10:57:a0:4c:a0:95:b6:04:a4:a4:28:9f:50:73:75: 48:35:94:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+5pIIJzk6ChSLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZDgwOTk1NTYtYmIwMi00ZGYxLTk0ZDYtMjBmNDFhYjllNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPJHTuDtySX7k/qBPzOeJcIpCkNRAf4uL6DM DiSiWTvsulo7d70ssTBgJvCVAItZTyoD4RLZQ2WpMJs/Tdzug5FDkVKAeQYv1Pxa R+scStZrlQH8dKzHQfDxJjDceA1WBoAKxcXh3rwrdQpxoc61MfCAQlY/aIRJwVPJ caTngc4q5mbeI2rsFOO5bctq9RkYHjj4eT9nPEUH5UA8mCYVATfMOxkb/FUr2h0G oaSnyPV4H4rgJJtfxlj+fEMBmVv0WJ68IN01eF6x6o5pvi662nbzH8WvCAY3J9VB jeZ9nfLdv2UQZIG8Sahgr5qdOtX37CkVqwv4Ash/rVBTXILEPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERaM9167cMRIkwkwUI1VFYNegzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQ5NDI0NWEtMGE0My0z YzljLWFmNmYtY2UwYTJjZDQ0NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYGwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/0xBM+k1WNtLq1WY6LgqPWVgZvKd8I5h9/W3Q9LUV6Kx3Xs7v909zk x5tTEcC5XJKwNiqjGdIyiRO6RShTl3fB6ChYIs262Dl1koaTln1VcEDkuAoBZxyI tZTKUnBhiQQE3lEek7FmBNOxhFRP7HFfysX0+ONuwPCIjMzJExfWYi6DvH7aqMdy 38kWxq6SPdiaWJ/9IKHeEeAEMVqIxLsF2GrP2tX5LFnx3qjgLj9Zs08tggJOjkgM QrGI/7qeGct0wpJA7O+CbfN6LCe2O4QUoxuu2AhgZHxAC5XmWRmyfNm7zYiEJ1rS U9oYEhBXoEyglbYEpKQon1BzdUg1lAc= -----END CERTIFICATE-----Generated at Sun Jul 20 17:41:58 2025 by rpki-client