$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a02ec6a5-160e-304a-a61b-38819c09e323.roa File: a02ec6a5-160e-304a-a61b-38819c09e323.roa (raw, json) Hash identifier: s+JnkedOGCExnswhO7vNZD6v7CFaxcw3O67T3EEZHLA= Subject key identifier: DB:FC:AE:59:0F:EC:68:62:6B:BE:2D:32:90:26:26:64:A9:E7:A7:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1BFF2B07BAB94D30AB800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a02ec6a5-160e-304a-a61b-38819c09e323.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 96.217.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:bf:f2:b0:7b:ab:94:d3:0a:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=26d3e74e-124a-4152-9aa1-e8679ff67c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:26:36:2a:71:73:e9:ec:50:9a:3b:a9:ae: 4b:b4:0c:0a:a5:65:1d:6d:53:64:4c:29:57:27:02: 0b:f8:3c:42:bc:96:be:f6:5f:5f:de:ff:28:1c:a2: 12:eb:3e:06:8f:85:a4:2e:84:be:c1:32:18:35:0d: d8:57:03:30:b8:fc:7b:77:fd:ed:58:64:a5:f8:45: 23:e5:48:5d:e7:65:ac:ef:0a:3c:cd:11:be:2d:d1: a8:fd:06:7a:c7:f7:0c:7b:38:59:e8:a2:a3:c9:a9: 2e:a3:28:7e:eb:f0:92:fe:9a:f1:74:b0:ab:f3:c6: d9:53:66:f9:0f:5e:62:7f:bd:86:ef:7d:bd:aa:d3: 05:4b:ba:ba:3a:bb:31:af:c2:bb:76:db:f6:ef:d7: 11:d9:dd:de:d5:84:82:25:85:93:18:05:ea:28:d9: 3a:d3:9e:3d:09:ef:42:f3:c1:fb:04:de:b1:f1:86: f1:02:d3:4f:05:1f:99:c9:5c:49:a6:84:d2:81:ff: ad:ec:77:8e:79:75:b1:a0:c5:b5:a0:48:80:62:23: fb:dc:10:c2:10:8e:da:33:5a:53:24:10:06:f7:33: 28:e8:b7:52:0e:58:a2:52:88:26:58:9f:cd:6f:72: 86:db:8e:0a:fb:4f:5b:4c:49:1f:50:93:fa:6f:23: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FC:AE:59:0F:EC:68:62:6B:BE:2D:32:90:26:26:64:A9:E7:A7:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a02ec6a5-160e-304a-a61b-38819c09e323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.217.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7d:dd:a3:55:2b:b0:6a:4c:7e:c9:31:7c:5e:37:2c:75:1c: 86:6c:44:ef:50:65:51:71:b3:65:93:ca:b5:8a:ce:54:3e:6b: 19:54:1c:c9:3a:b4:7b:59:97:7e:83:41:2b:7e:e6:f2:13:ce: 5d:54:15:bf:39:6a:99:7a:4d:df:a3:05:01:2f:7a:e8:ee:64: cb:3b:68:29:8b:06:ba:cc:79:96:2e:1c:31:af:55:86:00:24: b3:07:f6:c4:eb:d7:03:09:28:ff:28:5f:89:0c:05:f3:5a:67: f5:ef:56:eb:81:1e:dc:bc:8a:ec:79:a4:39:ad:c8:90:b5:66: 87:62:a0:19:cc:cf:d8:65:0d:af:2a:cc:86:a8:d4:55:da:6b: ea:72:3a:70:80:3a:5b:37:b0:fe:73:62:46:29:d5:01:c3:8e: 91:ad:4f:c2:d5:14:a8:be:8d:76:b8:05:2c:30:62:36:3b:fc: e5:68:c2:65:53:34:fd:95:10:75:df:7d:4e:61:bc:3b:20:9e: 59:c9:1c:97:84:60:56:f9:b7:5e:59:82:bd:6b:ce:df:c9:de: 6d:c2:ec:50:06:12:f1:db:87:fc:c0:5c:df:67:4d:0b:72:7d: 2e:63:e2:98:98:73:61:db:63:e5:a3:28:ea:57:0e:8d:0f:0e: e6:7d:7c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswb/ysHurlNMKuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjZkM2U3NGUtMTI0YS00MTUyLTlhYTEtZTg2NzlmZjY3YzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LImNipxc+nsUJo7qa5LtAwKpWUdbVNkTClX JwIL+DxCvJa+9l9f3v8oHKIS6z4Gj4WkLoS+wTIYNQ3YVwMwuPx7d/3tWGSl+EUj 5Uhd52Ws7wo8zRG+LdGo/QZ6x/cMezhZ6KKjyakuoyh+6/CS/prxdLCr88bZU2b5 D15if72G7329qtMFS7q6Orsxr8K7dtv279cR2d3e1YSCJYWTGAXqKNk60549Ce9C 88H7BN6x8YbxAtNPBR+ZyVxJpoTSgf+t7HeOeXWxoMW1oEiAYiP73BDCEI7aM1pT JBAG9zMo6LdSDliiUogmWJ/Nb3KG244K+09bTEkfUJP6byO0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNv8rlkP7Ghia74tMpAmJmSp56eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTAyZWM2YTUtMTYwZS0z MDRhLWE2MWItMzg4MTljMDllMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYNlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx93aNVK7BqTH7JMXxeNyx1HIZsRO9QZVFxs2WTyrWKzlQ+axlUHMk6 tHtZl36DQSt+5vITzl1UFb85apl6Td+jBQEveujuZMs7aCmLBrrMeZYuHDGvVYYA JLMH9sTr1wMJKP8oX4kMBfNaZ/XvVuuBHty8iux5pDmtyJC1ZodioBnMz9hlDa8q zIao1FXaa+pyOnCAOls3sP5zYkYp1QHDjpGtT8LVFKi+jXa4BSwwYjY7/OVowmVT NP2VEHXffU5hvDsgnlnJHJeEYFb5t15Zgr1rzt/J3m3C7FAGEvHbh/zAXN9nTQty fS5j4piYc2HbY+WjKOpXDo0PDuZ9fFQ= -----END CERTIFICATE-----Generated at Sun Aug 24 09:34:04 2025 by rpki-client