$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa File: b7091e43-35d5-3171-a245-3dadb9d48c94.roa (raw, json) Hash identifier: +cTF7xcYph7oYxCdTvyiQhkjENq+2/fk+JWC5QsHoSU= Subject key identifier: 22:2D:DF:FF:B8:E9:75:E3:B1:D6:81:DF:CB:4C:23:39:FE:26:F1:47 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F43285849D594D88BD29DA982B08E3D00 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 20278 IP address blocks: 96.9.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d8:8b:d2:9d:a9:82:b0:8e:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=cd384831-6b94-4c22-8296-e9c2b0b8b418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:0b:c7:33:ee:fe:38:5d:c9:1e:4f:cf:57: f4:3c:29:d4:26:5d:ea:29:8c:64:30:43:50:f7:31: e8:50:78:fc:ac:27:2c:81:eb:0c:18:41:a4:58:96: ba:72:bf:2b:e2:1e:f9:6f:91:fb:ee:53:0d:6a:d5: ab:c8:d0:b8:50:26:d7:04:f8:f6:17:04:cb:60:73: 09:50:07:75:73:71:48:e0:e5:60:42:33:84:a2:6d: b5:25:40:51:87:d2:9c:e5:dc:c4:8c:eb:8e:b3:72: 7b:c4:08:5f:08:db:b5:dd:62:1f:3e:36:7c:f0:bf: 73:d2:8f:8b:dc:35:e8:df:a5:02:ce:90:e4:f0:22: 6b:a3:57:24:83:5f:70:d6:67:94:03:6f:bb:9e:67: 02:d3:d2:82:86:7b:4e:cc:57:43:2e:93:d0:d3:e0: 2d:7d:c4:24:e4:72:26:e0:0e:11:29:fd:1d:13:99: 48:3e:06:3b:c3:05:6e:6b:cd:40:76:be:49:6a:24: 05:26:4b:73:64:d6:ca:2d:f9:74:69:c7:8c:00:8c: c4:b0:f5:13:aa:6d:2a:b4:2a:e0:16:c4:76:de:06: 65:2a:17:9b:87:0e:56:e7:b4:fa:08:6b:b2:9e:19: b3:9b:39:78:89:eb:f4:1f:56:35:de:da:83:96:75: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2D:DF:FF:B8:E9:75:E3:B1:D6:81:DF:CB:4C:23:39:FE:26:F1:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 96.9.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:38:36:1a:6d:4c:49:03:f1:21:75:93:63:5a:2d:0d:bf:9e: 6f:fe:dd:b7:5d:20:4c:da:45:a3:44:d0:33:a1:b8:4f:51:e3: 66:6b:4c:25:a9:92:c4:60:11:c7:b7:b4:ba:97:53:5d:c3:7b: a5:96:a2:7c:6c:29:0f:53:93:c7:78:33:3d:1e:5b:47:ce:15: 6f:45:03:69:df:28:7b:1c:f9:e1:19:8b:2b:8a:d4:6d:e9:71: bf:fb:8c:c3:90:3e:bd:9c:08:51:5d:ee:ca:7f:7d:3c:c3:2f: a5:ba:59:ab:7a:b3:15:9f:b9:23:21:ef:6c:85:06:9f:08:41: 87:9e:1b:d0:20:62:23:52:ad:e6:ba:10:ee:68:a2:88:77:9b: 43:f8:84:9d:3e:13:8c:68:b5:ab:d0:26:84:12:9b:4c:a8:f7: d4:42:09:71:98:9a:e6:dc:6a:81:c2:c7:d6:44:bc:b4:bd:80: 33:9b:6e:80:90:44:3c:c9:f2:69:ab:f8:a7:e6:88:fc:5d:04: 7b:1e:91:64:f7:00:a0:4b:0c:08:49:f3:ec:e0:0f:db:7e:ec: 6f:60:9a:8f:a5:0b:89:3d:5e:b5:a8:3b:c0:62:93:0d:6a:e8: 36:7b:d8:96:3b:9f:61:df:fc:75:d9:2a:fb:f3:0c:99:b1:de: 0d:e4:2c:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNiL0p2pgrCOPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2QzODQ4MzEtNmI5NC00YzIyLTgyOTYtZTljMmIwYjhiNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprQLxzPu/jhdyR5Pz1f0PCnUJl3qKYxkMENQ 9zHoUHj8rCcsgesMGEGkWJa6cr8r4h75b5H77lMNatWryNC4UCbXBPj2FwTLYHMJ UAd1c3FI4OVgQjOEom21JUBRh9Kc5dzEjOuOs3J7xAhfCNu13WIfPjZ88L9z0o+L 3DXo36UCzpDk8CJro1ckg19w1meUA2+7nmcC09KChntOzFdDLpPQ0+AtfcQk5HIm 4A4RKf0dE5lIPgY7wwVua81Adr5JaiQFJktzZNbKLfl0aceMAIzEsPUTqm0qtCrg FsR23gZlKhebhw5W57T6CGuynhmzmzl4iev0H1Y13tqDlnXAWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIt3/+46XXjsdaB38tMIzn+JvFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjcwOTFlNDMtMzVkNS0z MTcxLWEyNDUtM2RhZGI5ZDQ4Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI4NhptTEkD8SF1k2NaLQ2/nm/+3bddIEzaRaNE0DOhuE9R42ZrTCWp ksRgEce3tLqXU13De6WWonxsKQ9Tk8d4Mz0eW0fOFW9FA2nfKHsc+eEZiyuK1G3p cb/7jMOQPr2cCFFd7sp/fTzDL6W6Wat6sxWfuSMh72yFBp8IQYeeG9AgYiNSrea6 EO5oooh3m0P4hJ0+E4xotavQJoQSm0yo99RCCXGYmubcaoHCx9ZEvLS9gDObboCQ RDzJ8mmr+KfmiPxdBHsekWT3AKBLDAhJ8+zgD9t+7G9gmo+lC4k9XrWoO8Bikw1q 6DZ72JY7n2Hf/HXZKvvzDJmx3g3kLBU= -----END CERTIFICATE-----Generated at Tue Jul 1 16:54:23 2025 by rpki-client