$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821641a9-6c0b-3b37-9cc9-4dc3394ca289.roa File: 821641a9-6c0b-3b37-9cc9-4dc3394ca289.roa (raw, json) Hash identifier: H/SneNsPQLC41C3waKAzcP4mZd1vgCNnUyfTRtES5IU= Subject key identifier: C9:B2:29:4B:AA:54:80:29:80:91:B8:D7:3C:B6:4E:FB:63:FB:2F:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2B5BABD99C70E9760EB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821641a9-6c0b-3b37-9cc9-4dc3394ca289.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 96.217.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:b5:ba:bd:99:c7:0e:97:60:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2e96a6d7-3880-4de4-b598-8af3e389ccf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:dd:c8:8c:0e:e5:23:4d:27:5b:df:1d:5b: c8:d3:b3:8a:c9:9b:be:c0:41:1f:29:81:31:09:7c: d6:f9:22:3f:a2:06:44:17:65:79:82:62:ce:15:e4: 6f:37:95:c9:3a:3a:be:b7:e1:41:4f:6c:f2:39:59: c0:67:6e:42:a5:59:51:07:9f:33:c7:1f:ea:28:1b: 0f:d1:5a:9e:45:58:73:a7:04:25:20:cc:29:b7:c5: b0:84:3d:5e:19:6b:0d:05:f0:6a:7d:1f:7b:1a:c2: 19:e3:9b:00:92:5e:75:19:ea:44:b9:af:86:77:1a: e3:83:1e:af:b8:4f:36:2e:05:c5:17:ea:f4:a1:39: 70:dc:65:78:ae:2e:4f:f0:d5:27:10:ac:52:4c:82: ac:be:ce:02:52:b6:47:5d:e3:c4:93:ff:49:6d:78: f7:d0:a3:ad:59:0c:d4:30:cc:51:89:f0:c0:ef:b7: af:bb:e6:88:99:bd:59:44:7b:05:a1:45:4c:95:3f: 75:1d:db:b2:66:a6:f1:77:93:e4:57:3c:08:16:3f: 30:ca:3a:ae:6b:31:83:0a:30:8a:7e:ea:17:96:81: 26:58:16:99:12:e4:0c:83:9f:33:3d:f1:6b:51:5c: e7:80:69:83:2d:83:c9:78:4f:a3:10:d5:02:f5:c8: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:29:4B:AA:54:80:29:80:91:B8:D7:3C:B6:4E:FB:63:FB:2F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/821641a9-6c0b-3b37-9cc9-4dc3394ca289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.217.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:2d:fd:46:66:47:86:29:70:8f:dd:6f:97:b9:72:e5:99:de: 81:5c:31:93:db:5e:59:ec:20:3f:66:76:a9:11:31:78:4f:22: ef:e3:ef:b7:93:ef:63:9e:5b:e5:b0:c1:15:ec:e9:2f:d6:c5: 11:75:cf:69:7c:c5:a7:37:0f:71:ea:24:57:cd:d2:d2:bd:c7: ad:2c:f7:24:01:32:54:d7:f9:7f:6d:75:e9:05:8c:e8:c3:b8: c9:47:ca:0f:a9:7e:f4:b8:06:44:c0:d0:77:d5:b9:d3:26:15: f2:ea:17:6b:56:b5:21:af:24:95:4a:67:23:fc:9c:ae:45:53: e3:ba:fc:e1:24:48:33:a5:3d:3e:40:99:32:7e:0a:63:0b:6c: be:b9:6d:ab:8b:d0:73:d4:ed:5a:23:a5:e3:b4:76:01:d8:32: 61:d0:33:dc:f6:c8:56:c8:7f:ab:42:ce:4a:b8:d8:d3:d7:48: 7a:7c:91:d3:c8:db:0d:fa:0a:ce:e1:a1:1c:c0:ef:40:70:59: 01:98:b6:2c:aa:ed:bc:cf:ba:6a:d8:2d:6e:40:f6:3c:9e:6d: cb:ce:a6:3e:03:a7:48:6f:73:4f:6a:67:51:75:31:bc:e0:58: 14:57:04:b4:20:4c:b1:e0:60:c9:78:8b:41:e9:ba:f7:19:1e: 91:fe:ee:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswrW6vZnHDpdg64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmU5NmE2ZDctMzg4MC00ZGU0LWI1OTgtOGFmM2UzODljY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ndyIwO5SNNJ1vfHVvI07OKyZu+wEEfKYEx CXzW+SI/ogZEF2V5gmLOFeRvN5XJOjq+t+FBT2zyOVnAZ25CpVlRB58zxx/qKBsP 0VqeRVhzpwQlIMwpt8WwhD1eGWsNBfBqfR97GsIZ45sAkl51GepEua+Gdxrjgx6v uE82LgXFF+r0oTlw3GV4ri5P8NUnEKxSTIKsvs4CUrZHXePEk/9JbXj30KOtWQzU MMxRifDA77evu+aImb1ZRHsFoUVMlT91HduyZqbxd5PkVzwIFj8wyjquazGDCjCK fuoXloEmWBaZEuQMg58zPfFrUVzngGmDLYPJeE+jENUC9cjAHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmyKUuqVIApgJG41zy2Tvtj+y9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODIxNjQxYTktNmMwYi0z YjM3LTljYzktNGRjMzM5NGNhMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYNloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMt/UZmR4YpcI/db5e5cuWZ3oFcMZPbXlnsID9mdqkRMXhPIu/j77eT 72OeW+WwwRXs6S/WxRF1z2l8xac3D3HqJFfN0tK9x60s9yQBMlTX+X9tdekFjOjD uMlHyg+pfvS4BkTA0HfVudMmFfLqF2tWtSGvJJVKZyP8nK5FU+O6/OEkSDOlPT5A mTJ+CmMLbL65bauL0HPU7VojpeO0dgHYMmHQM9z2yFbIf6tCzkq42NPXSHp8kdPI 2w36Cs7hoRzA70BwWQGYtiyq7bzPumrYLW5A9jyebcvOpj4Dp0hvc09qZ1F1Mbzg WBRXBLQgTLHgYMl4i0HpuvcZHpH+7gQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:36:17 2025 by rpki-client