$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f918ccd-c753-38de-b345-e55dd6007e95.roa File: 8f918ccd-c753-38de-b345-e55dd6007e95.roa (raw, json) Hash identifier: DHES5SIMDgyyTIePSyvagnbAQo29fPt0n6UZhAfA5iU= Subject key identifier: 2C:1D:47:3A:1B:BB:07:14:5B:BF:2A:14:94:43:3B:8B:26:11:10:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC74D322ECBBE7BECCE300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f918ccd-c753-38de-b345-e55dd6007e95.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33659 IP address blocks: 96.96.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:74:d3:22:ec:bb:e7:be:cc:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=c2822d1a-e25a-424c-8793-1a71a2229a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:c1:5d:d6:97:ca:0f:7a:3e:e1:ed:7f:43: a6:9d:f6:ab:84:1b:27:cc:1d:ab:51:39:67:31:7c: c8:8f:eb:b8:cf:0b:17:b5:aa:b2:f0:b0:ee:a7:8a: 51:89:25:3f:b6:de:0f:18:06:72:8c:b7:d9:ce:47: 1b:6a:f1:9d:5b:66:20:10:b4:47:16:78:a8:ae:62: 42:ba:f4:aa:10:27:31:28:9f:72:fe:33:c8:c8:84: ed:80:04:09:12:c1:d8:29:04:9b:97:b4:7d:c1:0f: f7:81:e2:04:e3:14:fa:65:06:94:51:5a:8e:15:05: 3b:91:0e:64:31:42:a7:34:e8:50:a0:87:cc:18:ff: 9e:15:e1:0b:c9:f2:c1:e6:ad:fb:e0:fa:93:76:2a: 6f:8d:e5:e8:7d:de:4f:02:99:6b:23:f1:62:99:6c: 8c:4d:95:63:58:e2:4b:be:5d:b5:61:0c:18:ed:72: 1c:56:55:85:f4:88:8d:b9:be:3d:54:38:57:e5:00: 83:a6:26:88:47:d7:76:27:58:2b:1c:3a:f7:44:6b: 14:45:a0:45:9e:a0:74:2e:ff:83:45:4a:34:ac:f1: 64:50:5b:c4:10:a5:52:a6:17:79:df:fd:d6:42:34: bf:dc:5a:52:8e:e4:4b:b0:98:17:6e:aa:95:4b:19: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:47:3A:1B:BB:07:14:5B:BF:2A:14:94:43:3B:8B:26:11:10:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f918ccd-c753-38de-b345-e55dd6007e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.96.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:68:cc:e3:f1:cf:df:a4:02:ef:86:a9:7d:ef:bd:c4:c1:9d: f0:51:e1:eb:de:bb:78:e7:c4:bd:be:f4:e5:74:c8:7a:be:81: 5d:ad:83:3a:01:7b:e9:ce:f4:f4:e7:96:79:02:cf:ae:24:bc: e4:40:89:1e:41:a8:54:30:e0:1b:7c:36:79:51:83:2b:05:40: ff:fc:cc:5c:15:cc:51:13:a5:18:67:51:1e:59:f3:ce:f6:53: 32:04:9b:03:0f:b4:83:3e:c3:8c:52:44:8d:17:f8:68:ce:26: af:5f:d1:70:2a:04:77:f2:09:52:de:f0:8e:fb:e0:b2:ce:31: e2:8a:0a:8f:3a:be:f8:ef:f3:70:3f:ce:ee:94:66:97:7a:e5: 8e:6b:34:6d:9a:cf:96:8a:55:b0:16:e1:fc:8c:c5:c4:36:7d: 74:89:4f:5d:8b:63:95:5e:7b:b7:d0:11:e7:09:f3:da:7e:4a: a3:b7:d9:78:b4:af:a3:3b:42:14:82:f5:95:78:16:f4:0a:ef: b7:8c:a8:18:e3:8c:89:3a:e2:18:bb:13:db:ec:aa:37:90:5e: e0:e0:9b:fb:5a:d4:78:a0:9d:a4:48:43:f6:d1:4d:fc:85:2e: 48:30:06:51:f3:66:23:56:90:c8:74:1d:7a:cc:97:f2:20:07: 21:e7:b4:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/HTTIuy7577M4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YzI4MjJkMWEtZTI1YS00MjRjLTg3OTMtMWE3MWEyMjI5YTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7HBXdaXyg96PuHtf0OmnfarhBsnzB2rUTln MXzIj+u4zwsXtaqy8LDup4pRiSU/tt4PGAZyjLfZzkcbavGdW2YgELRHFniormJC uvSqECcxKJ9y/jPIyITtgAQJEsHYKQSbl7R9wQ/3geIE4xT6ZQaUUVqOFQU7kQ5k MUKnNOhQoIfMGP+eFeELyfLB5q374PqTdipvjeXofd5PAplrI/FimWyMTZVjWOJL vl21YQwY7XIcVlWF9IiNub49VDhX5QCDpiaIR9d2J1grHDr3RGsURaBFnqB0Lv+D RUo0rPFkUFvEEKVSphd53/3WQjS/3FpSjuRLsJgXbqqVSxk1dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwdRzobuwcUW78qFJRDO4smERDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGY5MThjY2QtYzc1My0z OGRlLWIzNDUtZTU1ZGQ2MDA3ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYGBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlozOPxz9+kAu+GqX3vvcTBnfBR4eveu3jnxL2+9OV0yHq+gV2tgzoB e+nO9PTnlnkCz64kvORAiR5BqFQw4Bt8NnlRgysFQP/8zFwVzFETpRhnUR5Z8872 UzIEmwMPtIM+w4xSRI0X+GjOJq9f0XAqBHfyCVLe8I774LLOMeKKCo86vvjv83A/ zu6UZpd65Y5rNG2az5aKVbAW4fyMxcQ2fXSJT12LY5Vee7fQEecJ89p+SqO32Xi0 r6M7QhSC9ZV4FvQK77eMqBjjjIk64hi7E9vsqjeQXuDgm/ta1HignaRIQ/bRTfyF LkgwBlHzZiNWkMh0HXrMl/IgByHntEA= -----END CERTIFICATE-----Generated at Tue Jul 1 20:46:55 2025 by rpki-client