$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96d2c0dc-777d-31fb-8c7f-9dcdd7b814d5.roa File: 96d2c0dc-777d-31fb-8c7f-9dcdd7b814d5.roa (raw, json) Hash identifier: kf3p4rVQkLBPeRod+L/vvlZQg7yFGJygPQjU8vmgMA4= Subject key identifier: 40:25:BE:51:2F:AD:DD:F7:08:78:CD:C7:C5:8F:9C:B4:34:9A:80:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43228F55B5B9F1B3601E840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96d2c0dc-777d-31fb-8c7f-9dcdd7b814d5.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 76.20.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:28:f5:5b:5b:9f:1b:36:01:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=2b9341d4-193f-4fe6-9dfd-29ffa8ceea56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:86:d8:da:9a:41:4a:23:68:2f:97:d2:88: 10:43:56:14:f9:01:9e:18:16:cd:42:01:67:3a:23: 2d:b4:64:61:62:de:7a:25:d7:bd:54:20:c2:bf:42: fb:b2:1a:f3:be:61:98:e7:37:f6:17:41:a3:b8:2c: 54:96:cf:bc:21:60:b0:72:05:2e:e5:68:29:e9:de: 75:ff:d1:e9:eb:1d:e3:52:0a:63:ce:79:0e:6b:ea: 95:a6:d5:f5:6b:44:ef:99:5a:41:b4:50:77:31:67: 80:87:a4:8c:5f:32:3b:2f:79:4c:bf:e7:b0:cf:22: 4b:90:ee:e1:cc:1f:97:dd:a8:69:c1:66:ab:60:b0: 94:f2:01:c3:c3:7f:c6:54:7e:e3:1b:69:82:c6:db: 4e:8f:54:2d:d1:b7:15:f0:44:ea:f5:f5:09:99:e6: 9a:e1:79:33:8a:80:4e:02:63:ee:35:09:12:d7:70: 5f:08:40:b9:a8:03:06:e7:c2:ce:08:08:a3:d8:18: e8:8d:a5:77:be:78:8d:67:3e:8b:31:01:3c:b2:f7: 67:8d:59:76:d4:9a:16:21:31:7c:ae:bf:83:19:99: d9:f4:61:77:77:d9:c2:81:c8:83:a6:2a:83:d6:d6: a0:05:29:13:11:27:f9:32:2f:1f:e0:a5:fc:be:b0: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:25:BE:51:2F:AD:DD:F7:08:78:CD:C7:C5:8F:9C:B4:34:9A:80:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96d2c0dc-777d-31fb-8c7f-9dcdd7b814d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.20.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:38:8a:0f:13:a0:3e:6e:67:40:9c:06:e2:ef:db:e4:c1:15: f9:6f:1b:0c:1e:4d:2c:09:10:00:a9:45:39:b7:26:a4:f0:49: 04:72:30:59:ab:d8:2f:3d:62:1e:4b:51:4f:ea:b8:5c:56:3f: 17:0e:b2:10:9d:fa:87:3b:2a:13:29:61:5a:65:b3:4a:7f:3c: 3e:68:d4:47:6d:f4:18:6c:21:26:21:ba:dc:ea:73:eb:9c:d6: 0b:65:58:ec:d5:47:05:38:35:48:58:cc:36:16:7b:fb:0f:93: 32:68:8e:2f:7c:71:dc:ea:c2:72:32:66:9a:4f:a5:00:40:80: 41:99:cc:86:7c:cc:d1:1f:85:52:46:8b:7b:dc:79:0a:b0:b3: 5a:c0:49:8b:ed:14:42:85:b1:64:6e:36:5b:e3:75:27:55:02: df:cb:5f:7f:3d:32:04:e1:6e:4c:04:b2:7f:1d:02:f5:51:86: 22:6d:15:17:fd:79:57:05:3e:f7:85:2b:63:26:f3:de:44:a3: 9d:c3:7d:a1:89:8c:d6:0d:e4:25:b9:63:6f:e0:13:d2:2a:cc: 5f:b8:6f:ea:6f:85:d5:24:48:e4:95:42:0e:93:48:8e:69:de: e9:64:d4:f4:f2:ce:01:1d:af:f8:90:67:0a:23:70:51:e5:6d: ff:46:94:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMij1W1ufGzYB6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MmI5MzQxZDQtMTkzZi00ZmU2LTlkZmQtMjlmZmE4Y2VlYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GyG2NqaQUojaC+X0ogQQ1YU+QGeGBbNQgFn OiMttGRhYt56Jde9VCDCv0L7shrzvmGY5zf2F0GjuCxUls+8IWCwcgUu5Wgp6d51 /9Hp6x3jUgpjznkOa+qVptX1a0TvmVpBtFB3MWeAh6SMXzI7L3lMv+ewzyJLkO7h zB+X3ahpwWarYLCU8gHDw3/GVH7jG2mCxttOj1Qt0bcV8ETq9fUJmeaa4XkzioBO AmPuNQkS13BfCEC5qAMG58LOCAij2BjojaV3vniNZz6LMQE8svdnjVl21JoWITF8 rr+DGZnZ9GF3d9nCgciDpiqD1tagBSkTESf5Mi8f4KX8vrDiuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAlvlEvrd33CHjNx8WPnLQ0moCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTZkMmMwZGMtNzc3ZC0z MWZiLThjN2YtOWRjZGQ3YjgxNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM4ig8ToD5uZ0CcBuLv2+TBFflvGwweTSwJEACpRTm3JqTwSQRyMFmr 2C89Yh5LUU/quFxWPxcOshCd+oc7KhMpYVpls0p/PD5o1Edt9BhsISYhutzqc+uc 1gtlWOzVRwU4NUhYzDYWe/sPkzJoji98cdzqwnIyZppPpQBAgEGZzIZ8zNEfhVJG i3vceQqws1rASYvtFEKFsWRuNlvjdSdVAt/LX389MgThbkwEsn8dAvVRhiJtFRf9 eVcFPveFK2Mm895Eo53DfaGJjNYN5CW5Y2/gE9IqzF+4b+pvhdUkSOSVQg6TSI5p 3ulk1PTyzgEdr/iQZwojcFHlbf9GlIo= -----END CERTIFICATE-----Generated at Tue Jun 3 05:01:04 2025 by rpki-client