$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa File: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (raw, json) Hash identifier: 7TRwF/Btp3G++2zVNeH65WlMfVmUvDcQH/Pfisc3ZEY= Subject key identifier: D2:19:EC:D0:E7:22:E3:2C:9A:D7:1A:2A:D7:5B:51:76:40:DF:5C:DE Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584AEE268479DF48B4D304D4D140 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 7311 IP address blocks: 96.125.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:84:79:df:48:b4:d3:04:d4:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=6f09467e-34e7-4b52-8b56-af152067822f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:b1:9d:b0:82:dd:e1:96:2d:71:80:d9:b2: d3:14:cc:57:bf:78:6b:1c:ac:e8:29:fd:d2:2e:a8: 42:18:93:1a:c4:a0:08:fa:dd:a1:cd:f9:0b:65:e1: 54:48:21:2d:30:b7:83:52:de:87:f4:e6:60:27:94: 2b:16:22:3e:24:9c:94:6c:18:0a:ee:92:d5:95:48: 0b:c9:50:f5:ab:bc:f6:52:17:37:ca:55:86:76:47: a8:4a:60:45:5e:2f:08:fd:b3:b6:ae:bb:ce:60:f5: 6f:6b:28:f4:e9:54:b1:86:17:2b:61:e2:e8:da:57: 56:28:35:05:7b:32:8f:92:0e:d6:4e:1a:28:c9:c0: df:08:22:a4:c7:a0:90:e8:55:18:de:bf:92:5d:bc: 58:d2:dd:36:dd:39:2b:90:bb:1e:01:d5:3a:0e:d2: 7c:a7:f6:93:c4:53:4f:63:3c:24:bb:68:58:e2:2a: 1b:53:a7:85:b3:36:61:73:fd:c4:fa:ea:56:ad:10: 8f:16:02:0f:af:74:86:5d:e2:e9:71:5e:9e:4e:ca: 06:e8:29:8b:24:71:50:ca:4b:4d:d0:b2:f7:f2:72: 1e:ad:9c:e6:91:6d:dd:82:0e:de:5a:0b:87:18:39: 4c:80:f8:f8:52:10:51:b3:38:eb:e1:8a:19:34:50: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:19:EC:D0:E7:22:E3:2C:9A:D7:1A:2A:D7:5B:51:76:40:DF:5C:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 96.125.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b3:3b:f7:a8:23:4e:fe:4e:e8:07:6d:3f:c7:5f:85:b9:cb: 84:63:b1:4e:2e:ba:c2:4a:46:a4:9b:c4:be:ef:1c:61:51:27: 48:15:9b:a8:94:53:1d:bb:f6:41:1c:3d:6d:7b:76:d2:0a:60: d0:32:2d:fd:af:8e:2e:64:59:a3:40:e6:2d:3c:ab:8e:54:f0: 3b:9b:3a:e4:a8:a7:4f:a3:4e:35:85:04:5e:7a:c2:ae:7e:05: b3:5b:69:e8:e6:23:c7:06:0b:a3:07:e2:11:c5:c3:20:8e:b2: 4f:0a:51:99:9e:f5:d6:63:eb:08:44:90:fd:c5:10:d9:87:63: 4c:78:10:d6:e1:89:15:50:03:aa:45:b9:74:3e:28:01:20:89: fe:c2:75:77:e1:cc:11:3d:78:d8:bc:9e:e4:ba:37:29:cc:4b: 25:c5:a5:8a:70:ae:33:9e:a3:b3:15:a0:8e:97:ec:59:70:2b: 61:34:d4:df:64:ee:2d:6e:76:b2:8c:4f:be:d1:60:9b:a5:d3: e4:c6:dc:d2:65:9d:14:93:f4:1e:c3:c0:c2:ce:40:db:d5:8c: 3c:72:09:0b:ff:72:85:92:8a:f5:14:34:a6:97:b5:26:1c:cd: 42:17:4b:30:a6:ee:ee:1e:c4:4a:3a:dc:9d:3a:67:81:c7:f6: 95:12:56:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoR530i00wTU0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NmYwOTQ2N2UtMzRlNy00YjUyLThiNTYtYWYxNTIwNjc4MjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutGxnbCC3eGWLXGA2bLTFMxXv3hrHKzoKf3S LqhCGJMaxKAI+t2hzfkLZeFUSCEtMLeDUt6H9OZgJ5QrFiI+JJyUbBgK7pLVlUgL yVD1q7z2Uhc3ylWGdkeoSmBFXi8I/bO2rrvOYPVvayj06VSxhhcrYeLo2ldWKDUF ezKPkg7WThooycDfCCKkx6CQ6FUY3r+SXbxY0t023TkrkLseAdU6DtJ8p/aTxFNP Yzwku2hY4iobU6eFszZhc/3E+upWrRCPFgIPr3SGXeLpcV6eTsoG6CmLJHFQyktN 0LL38nIerZzmkW3dgg7eWguHGDlMgPj4UhBRszjr4YoZNFBxhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIZ7NDnIuMsmtcaKtdbUXZA31zeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZDM0ZWIwZDgtZmEwYy0z MGQ2LWIzMjItYzYxYWYzMDQ1YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACizO/eoI07+TugHbT/HX4W5y4RjsU4uusJKRqSbxL7vHGFRJ0gVm6iU Ux279kEcPW17dtIKYNAyLf2vji5kWaNA5i08q45U8DubOuSop0+jTjWFBF56wq5+ BbNbaejmI8cGC6MH4hHFwyCOsk8KUZme9dZj6whEkP3FENmHY0x4ENbhiRVQA6pF uXQ+KAEgif7CdXfhzBE9eNi8nuS6NynMSyXFpYpwrjOeo7MVoI6X7FlwK2E01N9k 7i1udrKMT77RYJul0+TG3NJlnRST9B7DwMLOQNvVjDxyCQv/coWSivUUNKaXtSYc zUIXSzCm7u4exEo63J06Z4HH9pUSViQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:19:16 2025 by rpki-client