$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa File: b7eef4be-80b7-3b1d-9220-d57d94c78330.roa (raw, json) Hash identifier: 7C5Ea8s+WTZcki+exq2UmJtMxHfqkE3bEsCZytdTFMg= Subject key identifier: 94:50:61:DA:B3:AA:6E:BE:03:7C:21:E7:1F:70:A0:76:C1:2C:9C:E3 Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F43285849D85F8ADCD24A88DEAE688500 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 7127 IP address blocks: 192.214.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:8a:dc:d2:4a:88:de:ae:68:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=654986e8-c1fc-4eba-9fec-f7e82f9e4a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:e8:08:84:63:f5:37:25:af:45:f2:0d:3f: a0:4a:2b:52:fa:d9:d0:5e:3d:e1:4d:0f:50:3e:4b: 8a:bd:96:0e:ff:f1:96:f5:52:7b:50:bc:e3:5c:d6: b4:32:43:29:8d:3f:c4:cf:01:57:94:3e:be:de:19: dd:13:b4:b6:ac:32:76:97:cd:5d:af:6b:34:de:3a: b0:a2:b9:5d:bd:69:4a:9f:bc:31:ee:1f:44:2c:b0: cc:bf:a4:8e:21:67:40:57:9d:0f:e6:07:d5:37:b7: 55:e3:65:9f:53:0f:a6:d7:0c:28:6b:c4:3b:8a:62: ec:57:95:28:a9:bd:41:4e:20:5e:37:0f:cc:e9:2d: 9a:f7:b9:ef:79:61:39:22:ae:f9:6e:b3:59:e4:e3: 9c:73:a3:ee:6d:19:43:79:48:a9:89:ba:19:fa:dc: c7:eb:fb:a4:5f:c3:ac:66:e7:3b:3f:88:8e:9b:6f: ae:d5:92:b4:c3:09:30:4d:e5:ec:c9:5b:27:47:88: b1:dd:a1:83:eb:b5:19:40:47:cd:25:7e:80:ea:b4: dc:ad:8d:92:f6:27:17:1a:dd:cc:7f:38:19:2f:9d: 07:29:f8:85:34:19:08:a0:07:78:7c:76:19:0c:11: ac:65:35:06:ab:0f:ee:8a:6d:58:13:cb:ae:88:d6: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:50:61:DA:B3:AA:6E:BE:03:7C:21:E7:1F:70:A0:76:C1:2C:9C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/b7eef4be-80b7-3b1d-9220-d57d94c78330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: 192.214.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:01:70:e7:43:70:56:c8:7a:34:b1:da:de:8e:2e:be:51:46: 4d:ae:68:ef:93:7a:5a:a0:32:3d:9d:7a:11:63:13:86:3c:66: b4:a3:7e:8c:6b:4b:9f:b8:92:fe:fe:9e:bd:e6:8f:2e:7c:77: 29:9d:ee:bd:3c:d7:00:28:f4:5b:b2:65:07:23:7d:41:be:2a: 59:fd:e6:78:2e:6f:16:5a:54:29:3d:6b:2a:e2:7a:78:93:85: 35:84:32:7c:e4:4d:65:95:21:48:1d:21:9e:2b:48:ae:b9:0d: 1b:aa:2b:03:97:ee:12:1b:7a:5b:a7:3f:a1:d6:a5:ef:f7:be: 87:e9:04:3e:ca:f0:f3:3c:31:00:e0:8e:9e:eb:14:bd:41:86: bf:7c:48:74:19:cf:af:d5:55:da:41:6c:7e:8b:c6:01:33:53: 80:fd:63:93:ed:0d:3b:6e:df:87:4d:1e:e5:5f:80:7e:73:53: 97:6b:1b:f4:0c:4b:49:14:33:d6:11:32:ba:7b:5a:d1:5a:80: ed:7b:af:a6:9e:96:1e:52:76:fb:6d:c7:df:af:be:87:80:57: ef:72:25:88:19:76:7c:76:49:02:c6:28:14:2d:14:90:fa:1a: e8:a1:47:23:f5:17:2e:00:ed:a5:3f:5a:c8:8a:e4:d0:95:cb: 6d:fc:dc:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4rc0kqI3q5ohQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NjU0OTg2ZTgtYzFmYy00ZWJhLTlmZWMtZjdlODJmOWU0YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRPoCIRj9Tclr0XyDT+gSitS+tnQXj3hTQ9Q PkuKvZYO//GW9VJ7ULzjXNa0MkMpjT/EzwFXlD6+3hndE7S2rDJ2l81dr2s03jqw orldvWlKn7wx7h9ELLDMv6SOIWdAV50P5gfVN7dV42WfUw+m1wwoa8Q7imLsV5Uo qb1BTiBeNw/M6S2a97nveWE5Iq75brNZ5OOcc6PubRlDeUipiboZ+tzH6/ukX8Os Zuc7P4iOm2+u1ZK0wwkwTeXsyVsnR4ix3aGD67UZQEfNJX6A6rTcrY2S9icXGt3M fzgZL50HKfiFNBkIoAd4fHYZDBGsZTUGqw/uim1YE8uuiNbtLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRQYdqzqm6+A3wh5x9woHbBLJzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvYjdlZWY0YmUtODBiNy0z YjFkLTkyMjAtZDU3ZDk0Yzc4MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsBcOdDcFbIejSx2t6OLr5RRk2uaO+TelqgMj2dehFjE4Y8ZrSjfoxr S5+4kv7+nr3mjy58dymd7r081wAo9FuyZQcjfUG+Kln95ngubxZaVCk9ayrieniT hTWEMnzkTWWVIUgdIZ4rSK65DRuqKwOX7hIbelunP6HWpe/3vofpBD7K8PM8MQDg jp7rFL1Bhr98SHQZz6/VVdpBbH6LxgEzU4D9Y5PtDTtu34dNHuVfgH5zU5drG/QM S0kUM9YRMrp7WtFagO17r6aelh5Sdvttx9+vvoeAV+9yJYgZdnx2SQLGKBQtFJD6 GuihRyP1Fy4A7aU/WsiK5NCVy2383E0= -----END CERTIFICATE-----Generated at Mon Jun 30 10:26:47 2025 by rpki-client