$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b3f9670-4c94-3d9e-a0e0-919563389407.roa File: 0b3f9670-4c94-3d9e-a0e0-919563389407.roa (raw, json) Hash identifier: PQlaD0zao7dc5q+Gav3TLLxTCOFHqWrABDaCeYcB4QU= Subject key identifier: B4:8B:A6:A9:F1:CB:20:E4:7E:6D:56:0A:AF:0F:2F:E3:3E:F6:0F:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC74A59E99E999514A5880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b3f9670-4c94-3d9e-a0e0-919563389407.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33659 IP address blocks: 96.67.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:74:a5:9e:99:e9:99:51:4a:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=364770e2-8e14-4b35-a185-5936e21886e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6d:2c:4e:70:a4:bb:c1:d2:b9:9b:e5:d7:31: 84:ca:04:0c:a6:6e:fd:22:99:ae:88:6f:32:12:b5: 5c:72:b3:55:34:26:c6:d3:90:c7:85:8e:0b:6d:39: 88:4d:e0:d6:e0:40:76:6d:58:9c:d5:1b:fa:bd:70: 2a:79:4f:8d:c0:ac:d5:3f:ef:f2:24:37:74:66:81: 83:6d:64:8a:06:96:64:7b:1a:93:50:c2:ba:c2:a8: c8:61:6a:1b:f9:5e:94:d7:c2:b9:57:df:5b:ce:4b: 47:3c:f0:18:b4:2b:f1:c0:e5:9a:dd:3b:d3:f6:62: 5d:72:02:31:b5:4e:54:8a:a4:25:4c:c5:99:cc:6b: 63:a0:13:57:3b:91:4d:d7:d7:2d:86:1a:c4:fe:cf: 88:3a:ce:07:1a:3c:e6:53:ef:93:05:e9:23:c5:0c: 4f:49:60:8e:6d:aa:62:11:4c:b8:cc:00:48:83:19: 90:07:5b:97:50:f9:90:05:2d:fe:ab:b3:0d:ff:fd: 61:70:f9:9d:86:a3:c6:af:0b:d7:3c:b6:ff:50:e3: 99:07:27:9f:4e:f0:af:9b:83:3e:3d:58:c4:20:69: 56:86:0e:27:a5:b6:4d:ca:18:77:fc:ab:0f:2e:b5: 8b:b7:d7:93:ab:da:fc:a9:e0:76:00:6b:1a:f5:09: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8B:A6:A9:F1:CB:20:E4:7E:6D:56:0A:AF:0F:2F:E3:3E:F6:0F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b3f9670-4c94-3d9e-a0e0-919563389407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.67.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:38:c6:e4:8f:b2:93:d8:4f:15:dc:7f:9a:92:36:c7:e6:c7: 57:69:16:ec:71:24:7d:e2:12:6a:29:76:63:f8:68:61:1e:a8: 57:0a:42:f7:44:bf:fc:89:3f:bd:22:23:40:15:0f:c4:ec:8c: 19:f1:96:b9:00:08:b1:80:51:4e:5f:f5:e1:1d:f5:ed:b0:03: d3:bc:5a:a1:a7:92:0a:84:8f:1b:6a:ae:26:36:04:65:2d:e0: 6f:0e:8c:c0:ab:b3:61:d9:5d:ed:20:87:79:90:91:0e:d9:1c: e7:3d:d2:38:d4:f5:7e:cd:6e:db:8d:2c:cb:9a:69:ff:48:00: 5a:10:04:b5:27:33:f7:05:2c:60:37:4f:ab:4f:3e:45:ce:ef: 36:6d:92:24:ed:35:e5:ee:fc:f5:a8:a4:30:69:2f:e7:0c:22: 01:11:5e:20:0a:56:be:57:09:f2:3f:5c:93:39:c2:3f:fc:f5: d5:a6:be:46:2a:c3:27:84:18:93:51:ce:a5:82:ac:e5:65:c9: 99:7f:f4:b9:85:79:00:1f:2b:55:26:80:04:61:03:ba:2b:81: b0:b9:8f:bb:b3:ae:4e:df:88:44:39:8c:34:be:bc:08:4a:56: 2c:da:1e:82:50:b3:a4:7c:f9:9f:c9:a9:7c:d2:03:e9:8f:8d: 1f:7a:03:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/HSlnpnpmVFKWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MzY0NzcwZTItOGUxNC00YjM1LWExODUtNTkzNmUyMTg4NmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm0sTnCku8HSuZvl1zGEygQMpm79IpmuiG8y ErVccrNVNCbG05DHhY4LbTmITeDW4EB2bVic1Rv6vXAqeU+NwKzVP+/yJDd0ZoGD bWSKBpZkexqTUMK6wqjIYWob+V6U18K5V99bzktHPPAYtCvxwOWa3TvT9mJdcgIx tU5UiqQlTMWZzGtjoBNXO5FN19cthhrE/s+IOs4HGjzmU++TBekjxQxPSWCObapi EUy4zABIgxmQB1uXUPmQBS3+q7MN//1hcPmdhqPGrwvXPLb/UOOZByefTvCvm4M+ PVjEIGlWhg4npbZNyhh3/KsPLrWLt9eTq9r8qeB2AGsa9Ql4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSLpqnxyyDkfm1WCq8PL+M+9g+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGIzZjk2NzAtNGM5NC0z ZDllLWEwZTAtOTE5NTYzMzg5NDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYEOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo4xuSPspPYTxXcf5qSNsfmx1dpFuxxJH3iEmopdmP4aGEeqFcKQvdE v/yJP70iI0AVD8TsjBnxlrkACLGAUU5f9eEd9e2wA9O8WqGnkgqEjxtqriY2BGUt 4G8OjMCrs2HZXe0gh3mQkQ7ZHOc90jjU9X7NbtuNLMuaaf9IAFoQBLUnM/cFLGA3 T6tPPkXO7zZtkiTtNeXu/PWopDBpL+cMIgERXiAKVr5XCfI/XJM5wj/89dWmvkYq wyeEGJNRzqWCrOVlyZl/9LmFeQAfK1UmgARhA7orgbC5j7uzrk7fiEQ5jDS+vAhK VizaHoJQs6R8+Z/JqXzSA+mPjR96A1Q= -----END CERTIFICATE-----Generated at Tue Jul 1 19:41:21 2025 by rpki-client