$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fadb5651-4c82-3c2f-9f7e-5074637b01b4.roa File: fadb5651-4c82-3c2f-9f7e-5074637b01b4.roa (raw, json) Hash identifier: 1K8bSjBeXRaRfD0u4seAivEyjNrO3bLWUnFoxz/PQ+I= Subject key identifier: 35:A2:2F:E5:7A:11:58:E4:89:7E:AE:45:F1:76:98:AE:7D:76:F7:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCEA6B1A9D30FBAEA14B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fadb5651-4c82-3c2f-9f7e-5074637b01b4.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7725 IP address blocks: 96.124.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:ea:6b:1a:9d:30:fb:ae:a1:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=47649bd6-8868-4726-be82-8ab51556356f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:5b:1f:3f:29:f2:44:e5:4c:e0:a6:58:e5: 5c:b3:56:29:ae:05:92:5a:df:02:c7:fb:fe:fb:26: 17:a9:21:5f:f3:6f:ae:59:11:b6:99:6b:9c:72:8d: 9b:90:49:01:58:cc:d7:60:02:7a:69:f7:16:3e:08: 6d:cb:73:e8:7d:05:b6:aa:16:89:64:7d:42:06:b6: 33:af:1f:2d:2c:14:e0:92:ba:7b:f8:9b:4e:1e:6b: 9f:ba:4b:6c:6b:e4:47:8b:e2:d2:a0:20:97:c5:75: 1c:cc:b0:5f:e3:b2:82:7f:96:05:b5:e9:67:fd:b5: b8:ba:23:47:ef:a4:b6:f4:41:73:3d:5b:ef:7d:e3: 14:d1:7d:1f:d2:ff:4b:44:db:d9:15:8a:07:e1:18: b2:13:d2:92:48:36:47:65:23:bf:7d:b5:f8:35:56: 45:fc:1f:75:fd:c5:80:e8:22:b7:51:b0:2a:dc:bc: 06:65:b0:d5:d6:f9:8c:1e:99:33:fb:00:62:72:14: bb:6b:d9:14:1a:de:68:11:67:44:d9:58:9d:d0:9d: 32:4a:33:e8:4b:2e:55:4f:ca:d0:6b:00:9a:ce:51: 9a:45:2c:3e:a8:33:21:01:e0:08:f2:ef:e5:ed:d4: 4d:e3:db:43:79:0d:99:2f:34:2b:bb:b0:be:ba:ab: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A2:2F:E5:7A:11:58:E4:89:7E:AE:45:F1:76:98:AE:7D:76:F7:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fadb5651-4c82-3c2f-9f7e-5074637b01b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.124.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c7:a5:46:50:6f:13:a3:a6:74:29:69:6c:25:4e:c1:96:f1: bd:59:ca:2c:aa:59:f7:00:95:d3:4f:27:7d:90:29:9c:4c:48: b5:67:e4:5b:41:02:b4:76:1c:1f:a0:ee:f7:ac:c8:54:cc:4b: 95:42:31:73:2d:77:c0:4a:d3:d1:0e:62:20:f2:8d:19:eb:12: 0b:1d:c0:49:a8:33:be:f6:fc:69:04:4c:93:63:02:d6:b2:b0: 75:70:99:b1:7e:b6:65:c6:83:75:a8:fa:f1:28:8d:27:12:3f: d9:b2:cd:db:bf:10:02:6f:78:81:91:1a:09:b9:68:11:5e:44: 4b:39:fd:7e:7e:f4:f7:d0:71:ec:d1:11:67:89:d2:99:ba:05: 09:02:1b:d5:57:a7:e2:99:5e:99:6e:44:36:8f:32:65:15:c7: 8f:07:1f:05:22:55:17:2a:b3:50:79:1a:07:86:43:dc:f0:c2: 11:bc:fc:51:7f:cc:47:c0:dc:45:d8:78:5c:37:5f:3a:32:3e: 9c:da:3b:cb:bc:b3:63:87:bd:3d:f3:a2:e6:b2:5d:cb:3f:83: 1f:e0:5a:78:ab:3b:47:d9:7b:9a:ff:94:55:8e:c7:25:58:1f: 37:91:bd:74:15:17:b9:9c:1d:63:66:36:fd:c0:3f:9d:bb:3d: 12:af:ca:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/OprGp0w+66hSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NDc2NDliZDYtODg2OC00NzI2LWJlODItOGFiNTE1NTYzNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolBbHz8p8kTlTOCmWOVcs1YprgWSWt8Cx/v+ +yYXqSFf82+uWRG2mWucco2bkEkBWMzXYAJ6afcWPghty3PofQW2qhaJZH1CBrYz rx8tLBTgkrp7+JtOHmufuktsa+RHi+LSoCCXxXUczLBf47KCf5YFteln/bW4uiNH 76S29EFzPVvvfeMU0X0f0v9LRNvZFYoH4RiyE9KSSDZHZSO/fbX4NVZF/B91/cWA 6CK3UbAq3LwGZbDV1vmMHpkz+wBichS7a9kUGt5oEWdE2Vid0J0ySjPoSy5VT8rQ awCazlGaRSw+qDMhAeAI8u/l7dRN49tDeQ2ZLzQru7C+uqvq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWiL+V6EVjkiX6uRfF2mK59dvcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFkYjU2NTEtNGM4Mi0z YzJmLTlmN2UtNTA3NDYzN2IwMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3HpUZQbxOjpnQpaWwlTsGW8b1ZyiyqWfcAldNPJ32QKZxMSLVn5FtB ArR2HB+g7vesyFTMS5VCMXMtd8BK09EOYiDyjRnrEgsdwEmoM772/GkETJNjAtay sHVwmbF+tmXGg3Wo+vEojScSP9myzdu/EAJveIGRGgm5aBFeREs5/X5+9PfQcezR EWeJ0pm6BQkCG9VXp+KZXpluRDaPMmUVx48HHwUiVRcqs1B5GgeGQ9zwwhG8/FF/ zEfA3EXYeFw3XzoyPpzaO8u8s2OHvT3zouayXcs/gx/gWnirO0fZe5r/lFWOxyVY HzeRvXQVF7mcHWNmNv3AP527PRKvylc= -----END CERTIFICATE-----Generated at Sun Jul 20 17:16:26 2025 by rpki-client