$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9631169e-54c3-30f1-9d33-3905a4001d39.roa File: 9631169e-54c3-30f1-9d33-3905a4001d39.roa (raw, json) Hash identifier: 8STOEGR6Wvrnyhi0aoAWPomvLjGg8gSdgf/fsDTuP6c= Subject key identifier: 67:DA:AC:B8:32:79:CC:25:DE:9C:48:20:FF:DB:03:4B:CA:32:70:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD29ED456B85558CB0F980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9631169e-54c3-30f1-9d33-3905a4001d39.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33662 IP address blocks: 96.76.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:29:ed:45:6b:85:55:8c:b0:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=ed50f0b3-5b25-4bfd-b94e-660c9740f86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:1e:70:be:b8:ae:e9:96:2d:b6:6a:d5:85: de:05:53:e8:d6:e0:ee:b7:49:67:93:cb:d9:ef:e3: 25:97:bf:db:49:c5:58:6c:5e:43:8c:0a:11:17:36: 71:41:51:5c:8c:7a:bd:5e:c2:b1:8f:b9:4a:e5:82: f3:be:ee:b6:d3:1f:a2:a8:a8:b1:28:58:5c:8a:5e: 76:e1:01:a6:2c:bc:b4:eb:23:7c:db:92:0a:94:95: 20:0d:ae:9a:3e:e6:f3:01:5b:23:2f:ce:9b:60:f9: 6e:6e:74:7e:77:dc:f9:51:fb:3b:ba:e4:df:3e:1c: a9:16:80:cf:91:0d:21:56:62:3b:a3:e0:35:a6:8e: 59:79:dd:98:04:b1:f6:9f:cd:50:b8:5d:d3:bc:44: 2b:cd:3a:c7:4f:d2:e5:8d:7a:d7:b7:9f:94:a2:e4: 33:c2:c4:cc:e0:00:55:1a:4c:26:35:3f:18:8a:53: 86:bf:69:37:c6:53:69:8c:36:7e:56:7f:a1:99:ae: 82:c0:37:f0:2b:03:a8:cc:a7:89:d2:ae:74:1f:b2: 6f:7e:c1:d6:20:c6:bf:d8:12:81:7e:93:3c:5a:22: c2:50:24:0d:e2:cc:4f:97:c1:65:b0:f0:ad:85:08: 95:3d:62:16:8c:91:63:22:04:e0:49:5f:c8:f6:3e: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DA:AC:B8:32:79:CC:25:DE:9C:48:20:FF:DB:03:4B:CA:32:70:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9631169e-54c3-30f1-9d33-3905a4001d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.76.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:2b:4d:60:76:49:e6:3c:3b:c7:70:89:45:47:f9:43:63:a4: 1a:d2:f2:7b:f4:1e:0e:62:80:c3:5d:65:09:2b:15:4a:7a:b5: b6:e0:51:fc:6e:bc:71:a2:15:6a:50:e6:c0:7f:b6:e4:c8:96: ae:c6:38:23:53:65:73:40:b7:3d:90:87:24:9a:e9:e1:92:b7: 78:54:15:55:8d:d0:33:e8:99:57:e8:8c:7e:50:84:12:15:4d: 12:69:61:19:fc:fa:b4:c5:1d:e5:0a:4f:82:4f:87:1d:61:a3: 69:9c:08:cf:ae:40:59:c6:d4:57:01:84:43:34:7b:53:21:96: df:63:65:c9:81:58:73:14:2c:5e:9d:4b:b0:bc:32:4c:0c:12: 33:4b:b7:46:2a:a3:b0:09:85:1c:37:fe:86:26:ed:9b:72:f7: 4e:75:f1:cf:f3:a6:65:cc:74:ba:d7:bf:dd:49:e7:fe:9b:3c: f6:1e:0c:d5:74:6b:a4:33:d8:06:33:ef:84:0c:65:fc:49:be: e8:6d:a6:26:56:5f:93:78:20:1d:ec:b0:63:55:92:95:01:ae: 2a:78:76:07:b8:53:de:ef:03:b0:fb:4b:a6:fb:3d:9d:b4:24: fb:4f:db:32:cf:2b:b6:ab:d3:46:f9:5d:d2:79:0c:e5:db:61: ec:29:b7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/SntRWuFVYyw+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZWQ1MGYwYjMtNWIyNS00YmZkLWI5NGUtNjYwYzk3NDBmODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTUecL64rumWLbZq1YXeBVPo1uDut0lnk8vZ 7+Mll7/bScVYbF5DjAoRFzZxQVFcjHq9XsKxj7lK5YLzvu620x+iqKixKFhcil52 4QGmLLy06yN825IKlJUgDa6aPubzAVsjL86bYPlubnR+d9z5Ufs7uuTfPhypFoDP kQ0hVmI7o+A1po5Zed2YBLH2n81QuF3TvEQrzTrHT9LljXrXt5+UouQzwsTM4ABV GkwmNT8YilOGv2k3xlNpjDZ+Vn+hma6CwDfwKwOozKeJ0q50H7JvfsHWIMa/2BKB fpM8WiLCUCQN4sxPl8FlsPCthQiVPWIWjJFjIgTgSV/I9j4bmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfarLgyecwl3pxIIP/bA0vKMnAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTYzMTE2OWUtNTRjMy0z MGYxLTlkMzMtMzkwNWE0MDAxZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYEywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANorTWB2SeY8O8dwiUVH+UNjpBrS8nv0Hg5igMNdZQkrFUp6tbbgUfxu vHGiFWpQ5sB/tuTIlq7GOCNTZXNAtz2QhySa6eGSt3hUFVWN0DPomVfojH5QhBIV TRJpYRn8+rTFHeUKT4JPhx1ho2mcCM+uQFnG1FcBhEM0e1Mhlt9jZcmBWHMULF6d S7C8MkwMEjNLt0Yqo7AJhRw3/oYm7Zty90518c/zpmXMdLrXv91J5/6bPPYeDNV0 a6Qz2AYz74QMZfxJvuhtpiZWX5N4IB3ssGNVkpUBrip4dge4U97vA7D7S6b7PZ20 JPtP2zLPK7ar00b5XdJ5DOXbYewpt9c= -----END CERTIFICATE-----Generated at Tue Jul 1 16:56:51 2025 by rpki-client