$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68d3db8e-3037-3a4f-b645-c63e73aa4e8e.roa File: 68d3db8e-3037-3a4f-b645-c63e73aa4e8e.roa (raw, json) Hash identifier: gSRwlMGConJ2Ik8LpFs0kfdcgvXU5/dIkdkwNyjnqQU= Subject key identifier: 9C:BD:F4:B0:7D:E4:E6:47:95:2C:88:B8:42:6B:55:50:C3:88:E7:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5765D58DAC54086C4B6FB200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68d3db8e-3037-3a4f-b645-c63e73aa4e8e.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7922 IP address blocks: 96.120.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d5:8d:ac:54:08:6c:4b:6f:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=59d66c76-a00b-4b5f-b942-b0fd92325214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:22:9c:6f:b0:61:b2:e7:13:b6:39:27:3c: 41:73:95:81:67:27:dc:35:16:63:a3:c1:5e:7b:40: 98:56:e3:2d:7b:10:27:44:4d:97:d2:ee:46:a5:b5: b7:7e:60:20:8c:50:9f:a5:47:d6:49:dd:b8:59:13: 3a:b2:7f:69:ed:85:01:dd:00:99:12:50:78:29:39: 05:76:88:fc:7f:03:26:09:bd:7d:32:4e:24:df:92: 5c:a9:bd:d4:5a:37:9f:ed:9d:24:0c:cf:24:b6:50: fd:e1:f5:ed:29:ed:9c:2e:3e:2c:ec:9a:16:41:b3: 95:9f:d5:8e:bd:87:42:0d:63:20:9a:fa:d7:35:3b: a7:22:85:7b:c1:df:47:9e:ba:07:21:c4:a1:a5:bf: 90:6a:65:84:15:c7:b3:12:27:e9:b5:ed:2a:12:81: 81:2a:7d:f1:1d:6a:30:e6:91:27:f4:67:e8:ef:c1: 95:2d:fc:b3:c5:5d:a2:57:3d:5c:cd:ce:9a:bc:62: 58:95:ac:18:a3:6a:e0:4e:c6:ea:e6:5a:2a:4a:e4: 17:9d:cf:af:13:01:0a:ee:ce:db:61:0e:cd:5f:32: c6:16:7c:31:07:02:a5:04:e6:b7:26:ef:5a:86:00: ff:8b:a4:89:95:11:82:c2:12:ec:41:ad:f3:da:62: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BD:F4:B0:7D:E4:E6:47:95:2C:88:B8:42:6B:55:50:C3:88:E7:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68d3db8e-3037-3a4f-b645-c63e73aa4e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.120.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:33:bd:ef:ff:85:9b:c1:46:31:2a:03:e6:85:ef:75:e8:cb: 5b:fe:48:b1:4c:6d:52:f4:6e:4f:69:bb:64:09:c3:0c:c4:14: 4f:1a:a8:fe:93:3c:4e:37:90:42:6a:80:a2:1c:5d:6f:12:fc: 2d:14:bc:0a:26:e3:d0:a3:79:8d:e6:c1:bc:15:80:bc:8a:d6: b8:f0:aa:38:d6:c1:1e:7a:a4:d6:ee:9d:51:99:5a:ad:b7:d0: a1:5f:88:63:f9:3d:0a:0c:48:3e:22:cf:a2:8e:48:fc:e4:af: de:97:53:a7:3d:c2:27:6d:a9:6c:14:ed:bf:33:a7:6c:62:77: 81:bb:a5:7a:bc:33:88:52:e5:dc:3f:14:fa:e4:dd:8a:16:ef: 75:eb:b6:3f:9e:26:ad:22:a4:d6:b4:8c:17:4b:de:88:c8:1b: a7:09:75:0f:ac:39:02:5f:38:90:15:92:92:40:ea:b8:e6:2f: a4:f3:bf:de:b5:22:f2:67:8f:c2:f1:98:b1:04:f5:e7:29:ee: 05:e1:50:53:f3:7c:11:a7:2e:8d:b2:7c:57:b5:4d:27:63:92: a5:df:54:75:84:3e:b3:be:50:22:94:55:ed:52:53:1a:dc:d6: b9:03:3a:68:18:e0:4b:8f:eb:4f:c7:ca:74:8c:c1:af:b8:5a: 17:ab:48:22 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpXZdWNrFQIbEtvsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NTlkNjZjNzYtYTAwYi00YjVmLWI5NDItYjBmZDkyMzI1MjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6cinG+wYbLnE7Y5JzxBc5WBZyfcNRZjo8Fe e0CYVuMtexAnRE2X0u5GpbW3fmAgjFCfpUfWSd24WRM6sn9p7YUB3QCZElB4KTkF doj8fwMmCb19Mk4k35Jcqb3UWjef7Z0kDM8ktlD94fXtKe2cLj4s7JoWQbOVn9WO vYdCDWMgmvrXNTunIoV7wd9HnroHIcShpb+QamWEFcezEifpte0qEoGBKn3xHWow 5pEn9Gfo78GVLfyzxV2iVz1czc6avGJYlawYo2rgTsbq5loqSuQXnc+vEwEK7s7b YQ7NXzLGFnwxBwKlBOa3Ju9ahgD/i6SJlRGCwhLsQa3z2mJEDwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJy99LB95OZHlSyIuEJrVVDDiOeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhkM2RiOGUtMzAzNy0z YTRmLWI2NDUtYzYzZTczYWE0ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCYHgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAtDO97/+Fm8FGMSoD5oXvdejLW/5IsUxtUvRuT2m7ZAnDDMQUTxqo/pM8 TjeQQmqAohxdbxL8LRS8Cibj0KN5jebBvBWAvIrWuPCqONbBHnqk1u6dUZlarbfQ oV+IY/k9CgxIPiLPoo5I/OSv3pdTpz3CJ22pbBTtvzOnbGJ3gbulerwziFLl3D8U +uTdihbvdeu2P54mrSKk1rSMF0veiMgbpwl1D6w5Al84kBWSkkDquOYvpPO/3rUi 8mePwvGYsQT15ynuBeFQU/N8EacujbJ8V7VNJ2OSpd9UdYQ+s75QIpRV7VJTGtzW uQM6aBjgS4/rT8fKdIzBr7haF6tIIg== -----END CERTIFICATE-----Generated at Sun Jun 29 17:50:11 2025 by rpki-client