$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa File: 0d0909e7-6d32-3d39-86f7-d73788e35b15.roa (raw, json) Hash identifier: 7SJW8jwzsZLbijhMUxaXUZ0ohyQ3m5iv8YdqmnJDzKY= Subject key identifier: EA:C2:D9:99:C4:30:FB:08:AD:98:90:39:F0:2D:33:BA:B1:8A:6D:61 Certificate issuer: /CN=95437874-24a3-4971-a87b-95b645e257bb Certificate serial: 010D0C9F43285849D42FB4C46298DB01CE940B00 Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 36556 IP address blocks: 96.9.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b4:c4:62:98:db:01:ce:94:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=bdc62f24-5fa8-481e-8cf8-c4087c621f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5b:98:93:5f:1a:68:20:7c:75:13:58:55:21: 40:31:06:33:5e:ee:df:b2:a7:29:c8:eb:dd:3f:fd: 69:82:87:cc:67:32:0f:f9:01:c4:9a:1b:9f:a1:82: b1:57:f2:6f:4d:e1:02:d4:4d:e6:9a:26:76:c7:04: 87:72:20:7d:35:ad:0e:d0:9b:90:74:32:64:bc:e4: c5:cf:4d:e6:d5:54:12:63:4c:c8:58:ca:21:56:b5: 60:7e:41:08:6f:11:c8:9d:9e:e1:1e:29:b4:05:8c: 19:b8:f4:54:df:2c:28:af:f2:32:3e:ee:9a:3f:8e: 26:75:08:69:14:84:d5:26:c5:39:b2:cf:c6:fd:94: 54:a0:6f:82:00:93:8e:7f:91:34:58:2a:a3:e5:06: c5:96:8c:89:86:9d:f5:47:7c:28:91:70:28:34:de: 6b:c8:52:94:cd:66:df:04:cd:1c:54:e4:9d:e9:ca: 4f:86:d9:ed:64:11:ac:92:49:77:12:30:4c:ab:e1: d1:05:c8:c9:d0:39:f4:19:6c:4b:a5:f6:17:8c:43: 31:e5:f0:f6:50:7d:05:39:59:86:4b:7c:de:4a:a5: ed:bc:53:c1:dc:81:4b:16:b4:37:3d:c8:f2:0b:c8: 36:57:be:67:bc:b1:f0:b1:dd:82:27:41:86:b6:c8: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C2:D9:99:C4:30:FB:08:AD:98:90:39:F0:2D:33:BA:B1:8A:6D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl X509v3 Authority Key Identifier: keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer sbgp-ipAddrBlock: critical IPv4: 96.9.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ad:9e:fd:5f:2c:21:65:57:56:0a:e8:82:e5:44:a2:d3:b8: 9c:35:e5:e7:42:11:be:c1:7d:ed:c0:4a:1c:26:3c:2e:f3:51: a4:fe:e0:07:e7:5b:e5:3d:5e:5b:13:f0:f6:61:7b:91:a3:88: df:fe:5e:ee:34:08:bc:9d:76:f7:5c:d8:07:e2:59:b6:36:f8: ab:2d:54:bb:da:86:af:cd:bd:ee:45:dc:d3:61:b5:3d:5e:19: e3:fc:79:41:f5:c2:96:62:a6:7d:6d:9e:e8:3e:e2:fe:f3:32: 09:f4:d7:61:7f:6c:42:01:53:47:8c:4e:2c:e2:ac:a1:63:9a: 4d:5e:97:cd:53:9d:0e:1c:26:66:e4:ad:11:59:aa:70:55:7b: 7f:8c:ac:5a:11:a3:3a:cf:36:12:67:b4:bf:68:55:ae:6d:a0: 92:d4:1d:58:66:75:f3:7c:ef:cb:50:ff:1f:fb:83:3d:d9:50: c7:5e:9f:13:5a:41:92:06:e0:b5:c5:c0:9c:6f:5a:8b:a7:98: df:ec:94:3f:98:31:ff:f5:84:5c:e9:1e:c1:e7:65:d3:4e:da: 02:a9:52:4a:d9:4d:65:02:59:0c:e6:d3:d1:97:85:a6:55:21: d1:da:33:0a:18:be:6e:4e:82:d3:a9:8a:92:75:71:2b:eb:d1: 8e:b2:8a:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7TEYpjbAc6UCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1 N2JiMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmRjNjJmMjQtNWZhOC00ODFlLThjZjgtYzQwODdjNjIxZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41uYk18aaCB8dRNYVSFAMQYzXu7fsqcpyOvd P/1pgofMZzIP+QHEmhufoYKxV/JvTeEC1E3mmiZ2xwSHciB9Na0O0JuQdDJkvOTF z03m1VQSY0zIWMohVrVgfkEIbxHInZ7hHim0BYwZuPRU3ywor/IyPu6aP44mdQhp FITVJsU5ss/G/ZRUoG+CAJOOf5E0WCqj5QbFloyJhp31R3wokXAoNN5ryFKUzWbf BM0cVOSd6cpPhtntZBGskkl3EjBMq+HRBcjJ0Dn0GWxLpfYXjEMx5fD2UH0FOVmG S3zeSqXtvFPB3IFLFrQ3PcjyC8g2V75nvLHwsd2CJ0GGtsiS7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrC2ZnEMPsIrZiQOfAtM7qxim1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NTQz Nzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvMGQwOTA5ZTctNmQzMi0z ZDM5LTg2ZjctZDczNzg4ZTM1YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTU0Mzc4NzQtMjRhMy00OTcxLWE4 N2ItOTViNjQ1ZTI1N2JiLzk1NDM3ODc0LTI0YTMtNDk3MS1hODdiLTk1YjY0NWUy NTdiYi5jcmwwHwYDVR0jBBgwFoAUDZpYabwzwNGVnD0AuQA7uUOKTmkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2 NDVlMjU3YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYAlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+tnv1fLCFlV1YK6ILlRKLTuJw15edCEb7Bfe3AShwmPC7zUaT+4Afn W+U9XlsT8PZhe5GjiN/+Xu40CLyddvdc2AfiWbY2+KstVLvahq/Nve5F3NNhtT1e GeP8eUH1wpZipn1tnug+4v7zMgn012F/bEIBU0eMTizirKFjmk1el81TnQ4cJmbk rRFZqnBVe3+MrFoRozrPNhJntL9oVa5toJLUHVhmdfN878tQ/x/7gz3ZUMdenxNa QZIG4LXFwJxvWounmN/slD+YMf/1hFzpHsHnZdNO2gKpUkrZTWUCWQzm09GXhaZV IdHaMwoYvm5OgtOpipJ1cSvr0Y6yiqU= -----END CERTIFICATE-----Generated at Tue May 13 17:35:40 2025 by rpki-client