$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc35de80-9976-378c-b250-58bac5ee6474.roa File: dc35de80-9976-378c-b250-58bac5ee6474.roa (raw, json) Hash identifier: n2bNGuNrgXxKP09+Jqi3rilKIo7xJ6bxy2JAy4usVwM= Subject key identifier: 88:2B:9A:6B:17:76:41:CB:B4:8A:B9:78:45:47:A8:76:23:ED:B4:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBA8F82BA7C10264E06E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc35de80-9976-378c-b250-58bac5ee6474.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33489 IP address blocks: 96.76.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:a8:f8:2b:a7:c1:02:64:e0:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=72e3e8a5-a293-49db-be6b-b0fb4b5ac980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:45:3f:c8:dd:9a:7a:43:15:8c:04:35:90: 86:d3:7a:b2:6b:b5:f5:0d:86:7a:9e:f2:ee:45:a0: a3:25:d6:17:43:4e:e8:6c:3a:1a:42:2b:79:d5:93: 1b:f7:e5:4f:76:39:4f:e3:2b:60:49:b5:1f:3b:11: 48:46:15:de:bb:54:c3:32:56:fa:18:c7:ac:59:62: 42:6d:92:ea:e4:a5:df:92:33:e9:9e:a3:9e:a6:03: 06:b4:e7:0b:61:5f:26:7b:2b:00:0e:ca:2e:98:9e: ed:2b:1d:89:6c:ca:73:3a:f1:56:d1:bf:c3:28:ff: 39:71:9c:e3:18:8a:2e:65:96:5d:83:c0:df:15:26: 25:14:f0:38:65:22:7a:fa:99:62:e9:59:41:07:d2: 2c:15:45:15:e9:de:dc:25:e1:fe:1f:d5:63:2b:cc: e2:36:5c:58:19:6a:c9:28:a2:a3:cf:e6:85:d8:76: 48:01:72:3d:a9:bf:4e:89:dd:e6:8c:22:50:26:a0: d7:47:54:ff:c9:49:71:36:b8:78:ce:b2:b8:78:31: 58:9d:19:f0:cc:0e:fd:e1:3a:99:48:63:3b:2c:8f: e4:51:76:b7:71:be:3a:54:03:80:40:7b:25:aa:1a: 38:a0:a6:77:b8:a1:45:70:9d:e1:b3:a4:ae:03:73: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2B:9A:6B:17:76:41:CB:B4:8A:B9:78:45:47:A8:76:23:ED:B4:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc35de80-9976-378c-b250-58bac5ee6474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.76.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7c:f4:92:c2:fb:2d:f8:b0:21:ec:74:14:d2:f9:b7:73:8b: be:36:3d:89:b1:63:8c:3b:c7:96:cd:0b:a3:11:f6:63:09:36: 6c:8c:0e:70:65:9d:48:3c:72:fd:e5:ae:fa:8d:8a:ce:e2:ee: ae:14:55:7b:76:1a:ea:78:d3:b1:85:6d:ae:f2:93:65:3e:07: f1:fc:bf:ff:9c:72:55:1a:d7:8e:a3:00:8a:d4:b3:8d:d3:5c: 8e:e6:50:86:0a:82:64:62:e5:80:dd:e2:2e:d2:6b:ed:14:69: ad:db:0b:0c:3a:97:a1:8e:2c:83:a4:90:08:06:c4:5d:ea:b0: 50:3b:ca:26:db:5a:19:83:97:71:2a:15:73:46:18:d5:b6:f1: f5:89:98:6c:ed:27:e7:7f:52:f6:87:f6:dd:11:3b:8c:13:39: 1d:ba:e0:97:14:ef:1c:53:01:67:0e:82:c0:ff:d2:f1:80:64: ac:c3:e8:b7:45:55:cb:53:91:c9:e1:2e:05:d9:78:59:86:c5: 1b:29:7e:65:b7:66:ff:de:30:88:6c:87:44:a2:fa:ff:3e:4b: b3:51:c8:9e:fb:37:94:73:b4:f7:4e:ac:24:33:93:5c:fc:4e: 59:97:66:3f:db:33:98:a7:ad:a1:7d:56:65:d7:e8:25:16:66: 10:b8:d3:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+6j4K6fBAmTgbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NzJlM2U4YTUtYTI5My00OWRiLWJlNmItYjBmYjRiNWFjOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoftFP8jdmnpDFYwENZCG03qya7X1DYZ6nvLu RaCjJdYXQ07obDoaQit51ZMb9+VPdjlP4ytgSbUfOxFIRhXeu1TDMlb6GMesWWJC bZLq5KXfkjPpnqOepgMGtOcLYV8meysADsoumJ7tKx2JbMpzOvFW0b/DKP85cZzj GIouZZZdg8DfFSYlFPA4ZSJ6+pli6VlBB9IsFUUV6d7cJeH+H9VjK8ziNlxYGWrJ KKKjz+aF2HZIAXI9qb9Oid3mjCJQJqDXR1T/yUlxNrh4zrK4eDFYnRnwzA794TqZ SGM7LI/kUXa3cb46VAOAQHslqho4oKZ3uKFFcJ3hs6SuA3Ob+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgrmmsXdkHLtIq5eEVHqHYj7bQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGMzNWRlODAtOTk3Ni0z NzhjLWIyNTAtNThiYWM1ZWU2NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYEwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF89JLC+y34sCHsdBTS+bdzi742PYmxY4w7x5bNC6MR9mMJNmyMDnBl nUg8cv3lrvqNis7i7q4UVXt2Gup407GFba7yk2U+B/H8v/+cclUa146jAIrUs43T XI7mUIYKgmRi5YDd4i7Sa+0Uaa3bCww6l6GOLIOkkAgGxF3qsFA7yibbWhmDl3Eq FXNGGNW28fWJmGztJ+d/UvaH9t0RO4wTOR264JcU7xxTAWcOgsD/0vGAZKzD6LdF VctTkcnhLgXZeFmGxRspfmW3Zv/eMIhsh0Si+v8+S7NRyJ77N5RztPdOrCQzk1z8 TlmXZj/bM5inraF9VmXX6CUWZhC40ww= -----END CERTIFICATE-----Generated at Tue Jul 1 20:38:37 2025 by rpki-client