$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa File: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (raw, json) Hash identifier: H+lxvDQXU7pYmKX24gW05Wcoq1Vaxb465wJUCuwYC0k= Subject key identifier: E2:72:2F:59:5D:AD:3A:7A:4E:D2:81:3A:23:BD:FD:6A:8A:26:F2:E8 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584A0D6A87E0300C8ADFE3633E40 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 7311 IP address blocks: 96.125.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:87:e0:30:0c:8a:df:e3:63:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=76ab5fc4-4768-4675-b4b5-508053be681a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:be:8c:a9:9b:05:dc:64:81:3f:30:25:7c: 6b:80:fd:54:b9:d4:ad:32:06:27:61:39:9c:8a:20: 11:c8:b6:b9:5a:49:30:f0:f0:7d:f9:3f:ae:a4:72: 1b:ef:ce:9b:ea:80:51:ec:ce:8f:26:00:e9:12:03: 53:0f:e0:6e:d2:8f:71:e1:03:e8:72:98:d8:fc:cb: a7:50:c2:a7:2f:de:ef:f4:02:3f:e8:ad:b1:8a:10: b1:ff:13:60:6b:ad:07:08:c7:36:eb:1a:3d:ec:10: 29:8c:9e:cb:c5:54:c7:25:dc:6b:fb:64:e4:32:66: 7b:e7:5c:bd:b7:c2:2a:17:90:46:70:65:32:c4:51: f1:57:4c:53:6d:b5:c8:12:ad:b3:93:e6:c6:f2:7c: 28:38:d2:fa:d0:37:a1:05:71:f6:dc:af:78:61:48: fc:c3:a9:e2:86:92:fb:db:e6:0d:f2:8f:47:c6:54: 97:c9:98:49:a4:c7:c0:90:32:cd:67:d3:f2:92:44: bc:3a:16:6e:2f:ad:6d:35:9f:c5:be:c4:2e:95:80: 28:e0:49:54:30:03:1c:7c:6b:dc:ce:32:ca:fa:11: 12:93:6b:86:d7:ef:e2:b9:70:9d:3e:9b:d8:d4:e1: 4a:25:fe:60:f3:7b:3e:70:19:31:d1:78:0f:e7:fd: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:72:2F:59:5D:AD:3A:7A:4E:D2:81:3A:23:BD:FD:6A:8A:26:F2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 96.125.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:61:47:87:82:71:d4:cf:36:00:e0:ae:90:b6:a8:cb:24:9c: 2e:b2:e5:71:1a:58:23:c6:46:0f:65:7d:52:07:3f:5e:b6:83: e9:db:fd:a0:eb:3a:2d:0e:b8:4f:83:f6:9f:a7:3e:37:08:2a: 3a:90:ee:f7:90:62:b4:0f:27:f6:20:dd:fc:ed:0d:dd:4a:af: 5c:98:db:e4:68:b6:a8:17:18:e3:b5:c2:a9:91:20:98:be:86: c4:1e:d8:05:aa:b8:4a:69:bc:61:b0:c1:9f:96:bd:08:9c:42: e2:55:ad:00:c9:07:18:bc:86:60:ee:40:7b:d6:3c:27:1e:a0: ed:e8:1f:45:1c:5f:fd:02:4f:91:85:76:97:d0:63:c3:54:b3: b6:4d:04:cb:0a:8f:7a:b9:13:e2:46:06:ee:26:47:ce:45:45: 7f:d3:62:13:85:78:6b:91:32:fa:c7:b1:9d:87:1d:f2:0e:54: b4:4c:68:58:37:9b:fc:8c:31:77:1d:46:43:78:8e:00:3e:f8: e9:0d:d4:24:86:1f:a5:93:2a:bc:ff:d2:4d:a4:52:de:d0:92: 7d:4c:73:5d:23:a6:b8:73:7b:ef:fb:af:e5:d6:b8:1a:77:d1: 40:97:49:57:7a:9e:94:92:69:1f:be:fa:cd:8d:88:ba:73:bf: d0:62:64:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaofgMAyK3+NjPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk NzZhYjVmYzQtNDc2OC00Njc1LWI0YjUtNTA4MDUzYmU2ODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw42+jKmbBdxkgT8wJXxrgP1UudStMgYnYTmc iiARyLa5Wkkw8PB9+T+upHIb786b6oBR7M6PJgDpEgNTD+Bu0o9x4QPocpjY/Mun UMKnL97v9AI/6K2xihCx/xNga60HCMc26xo97BApjJ7LxVTHJdxr+2TkMmZ751y9 t8IqF5BGcGUyxFHxV0xTbbXIEq2zk+bG8nwoONL60DehBXH23K94YUj8w6nihpL7 2+YN8o9HxlSXyZhJpMfAkDLNZ9PykkS8OhZuL61tNZ/FvsQulYAo4ElUMAMcfGvc zjLK+hESk2uG1+/iuXCdPpvY1OFKJf5g83s+cBkx0XgP5/2TSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJyL1ldrTp6TtKBOiO9/WqKJvLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZDM0ZWIwZDgtZmEwYy0z MGQ2LWIzMjItYzYxYWYzMDQ1YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJhR4eCcdTPNgDgrpC2qMsknC6y5XEaWCPGRg9lfVIHP162g+nb/aDr Oi0OuE+D9p+nPjcIKjqQ7veQYrQPJ/Yg3fztDd1Kr1yY2+RotqgXGOO1wqmRIJi+ hsQe2AWquEppvGGwwZ+WvQicQuJVrQDJBxi8hmDuQHvWPCceoO3oH0UcX/0CT5GF dpfQY8NUs7ZNBMsKj3q5E+JGBu4mR85FRX/TYhOFeGuRMvrHsZ2HHfIOVLRMaFg3 m/yMMXcdRkN4jgA++OkN1CSGH6WTKrz/0k2kUt7Qkn1Mc10jprhze+/7r+XWuBp3 0UCXSVd6npSSaR+++s2NiLpzv9BiZBo= -----END CERTIFICATE-----Generated at Mon Jun 30 16:52:20 2025 by rpki-client