$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/738c6452-a323-33e0-9bbb-7ce68d6a432b.roa File: 738c6452-a323-33e0-9bbb-7ce68d6a432b.roa (raw, json) Hash identifier: ctnSYKq0aLP7ZRnormP3T+uoVUp+uGJiVqM+LsbOv3U= Subject key identifier: A0:64:DE:00:62:1E:1D:3D:9F:AD:3B:49:79:42:E4:56:01:7E:17:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD7C10D43FE683E543FE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/738c6452-a323-33e0-9bbb-7ce68d6a432b.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 96.124.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:7c:10:d4:3f:e6:83:e5:43:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=81d26efe-a946-4da9-8691-d1d7db8e419e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:74:bd:e4:df:55:32:05:22:40:a1:f8:11: e5:ad:b0:5e:29:df:9b:be:73:9f:37:25:17:96:f5: ce:c9:a9:12:55:d5:be:b9:79:96:43:49:79:09:95: 8d:02:f2:a6:e5:d4:eb:67:e0:c4:65:90:5f:17:59: e1:8b:2c:83:86:de:65:22:2e:0a:cf:bb:db:4f:7f: f8:39:cc:2e:aa:21:77:4a:4e:ff:f2:03:84:bf:3a: 93:51:26:ed:8e:bd:70:3b:43:b8:41:23:00:ea:0f: 04:64:a0:f8:a7:73:72:6a:d6:33:d7:47:b0:be:da: 03:76:7a:a6:6f:84:68:eb:8f:55:73:9f:04:ac:f7: 0c:e9:79:4e:e5:03:19:d2:c7:2e:f3:c6:0f:77:c2: 22:61:c8:57:16:74:59:02:ae:9e:e9:5b:36:54:14: 4b:db:33:d5:db:40:e1:aa:89:23:1c:f8:c7:08:a9: 68:a0:ce:b4:cc:8d:a8:67:84:db:cb:5f:4e:eb:ad: 57:b8:7d:b6:f5:f9:9d:ec:73:b2:11:e8:1e:f3:70: 4c:ea:f5:80:09:dc:2a:3e:50:74:de:6e:3e:8b:d4: 0e:a7:b6:cb:3c:14:76:3b:de:de:43:68:1c:b8:39: 23:7a:84:b9:7f:cd:c5:54:ca:d8:b4:34:ae:53:0e: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:DE:00:62:1E:1D:3D:9F:AD:3B:49:79:42:E4:56:01:7E:17:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/738c6452-a323-33e0-9bbb-7ce68d6a432b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.124.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:09:70:92:62:df:c2:00:a4:d9:18:42:87:11:4f:8a:8b:30: de:d9:a6:f6:de:81:6f:3c:b9:9f:e5:4e:80:da:cc:72:ff:41: 41:a0:5a:ff:16:a5:71:f5:97:98:35:2c:4c:64:9a:9f:a0:94: 34:a3:e6:1b:bd:f7:67:08:21:08:d2:58:d1:dd:cc:b1:ab:92: da:2f:53:c9:76:14:0f:54:21:a2:e1:3e:02:39:b0:6e:3c:28: e4:cd:b1:16:21:65:90:aa:8c:8c:64:e9:d6:ef:73:a5:8b:ec: a1:fe:3c:ec:3c:5f:c0:d9:23:59:95:1e:43:56:91:01:f8:04: 19:56:b9:cc:39:32:bc:4b:cc:22:6d:3a:a4:2d:0c:7d:98:79: 8b:99:d0:f0:71:4c:c8:73:c5:1f:0b:d2:91:3f:26:dc:87:e9: b1:ab:cd:51:f1:5e:30:69:87:2e:a1:47:e3:40:16:38:23:8f: 66:39:96:45:63:4c:f6:9e:e9:cf:46:1c:20:00:77:fe:b5:18: 89:92:2e:dd:05:d7:6f:f5:e8:fc:ce:dc:58:ba:57:a0:61:a9: d8:78:e2:a0:f5:d4:10:69:03:ec:27:f6:b4:0f:4f:fc:67:be: 2d:13:b7:c1:e4:3c:4a:de:c5:12:24:55:1a:85:2a:58:3f:82: 83:4f:94:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/XwQ1D/mg+VD/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ODFkMjZlZmUtYTk0Ni00ZGE5LTg2OTEtZDFkN2RiOGU0MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIB0veTfVTIFIkCh+BHlrbBeKd+bvnOfNyUX lvXOyakSVdW+uXmWQ0l5CZWNAvKm5dTrZ+DEZZBfF1nhiyyDht5lIi4Kz7vbT3/4 OcwuqiF3Sk7/8gOEvzqTUSbtjr1wO0O4QSMA6g8EZKD4p3NyatYz10ewvtoDdnqm b4Ro649Vc58ErPcM6XlO5QMZ0scu88YPd8IiYchXFnRZAq6e6Vs2VBRL2zPV20Dh qokjHPjHCKlooM60zI2oZ4Tby19O661XuH229fmd7HOyEege83BM6vWACdwqPlB0 3m4+i9QOp7bLPBR2O97eQ2gcuDkjeoS5f83FVMrYtDSuUw7o4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBk3gBiHh09n607SXlC5FYBfhcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzM4YzY0NTItYTMyMy0z M2UwLTliYmItN2NlNjhkNmE0MzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMJcJJi38IApNkYQocRT4qLMN7ZpvbegW88uZ/lToDazHL/QUGgWv8W pXH1l5g1LExkmp+glDSj5hu992cIIQjSWNHdzLGrktovU8l2FA9UIaLhPgI5sG48 KOTNsRYhZZCqjIxk6dbvc6WL7KH+POw8X8DZI1mVHkNWkQH4BBlWucw5MrxLzCJt OqQtDH2YeYuZ0PBxTMhzxR8L0pE/JtyH6bGrzVHxXjBphy6hR+NAFjgjj2Y5lkVj TPae6c9GHCAAd/61GImSLt0F12/16PzO3Fi6V6Bhqdh44qD11BBpA+wn9rQPT/xn vi0Tt8HkPErexRIkVRqFKlg/goNPlJc= -----END CERTIFICATE-----Generated at Tue Jul 1 10:02:29 2025 by rpki-client