$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa File: 45232cc2-d5ff-3a30-881e-770a37fd9fac.roa (raw, json) Hash identifier: vwDo1sw9dvWm6XOtBcZ3DfXZ/fscOGKaOo/cKeLG2R0= Subject key identifier: 8D:EE:2D:28:21:50:4E:B1:D4:00:46:1F:6E:A0:CF:5D:A6:FD:2D:F3 Certificate issuer: /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Certificate serial: 010D0C9F43285849E225257638FCE62AC0DFE180 Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 22302 IP address blocks: 96.43.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:25:76:38:fc:e6:2a:c0:df:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=5ae29fa4-c24d-4bc6-b7c5-8312afd79d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:51:b3:24:07:58:bf:ac:50:29:9d:0e:e0: 8e:f3:d3:87:04:5d:ad:cb:cc:18:fb:da:29:be:fd: c3:a2:60:40:bd:f2:1c:8e:fc:49:2d:c3:17:2c:41: 52:33:e6:f7:e4:99:dd:14:92:8b:18:7b:c0:2e:8a: b4:87:81:90:1e:a4:ff:30:d1:7f:e4:0a:b3:a3:f4: 71:5a:c7:2a:55:cf:18:2b:14:84:1f:fc:66:66:b8: 9e:54:f9:38:89:d4:97:16:81:b0:ff:7c:50:ee:21: 81:28:5e:bb:b2:a6:66:53:5e:2c:a8:72:56:f5:c2: 54:09:7a:45:ac:9b:cd:7a:f3:a2:56:c1:28:19:2f: 6b:64:c9:4a:89:af:0c:3a:d6:9a:a4:5b:5e:9e:1a: 73:64:e7:a4:03:2a:5c:2b:df:6c:a0:84:83:b9:5e: bf:60:ed:fa:ae:c7:b5:e8:90:19:78:95:80:93:a2: e9:05:62:08:c4:10:07:4c:97:94:2b:82:05:fe:98: 65:ee:a0:a3:60:fb:c8:12:27:9f:9a:e9:a7:eb:f0: 9a:d8:88:6b:d6:59:39:3c:4d:31:81:a6:9b:c7:cb: 12:b9:e1:b4:38:ef:2b:c9:04:c8:e6:c4:c2:72:7c: 12:02:bf:33:29:80:09:98:9a:60:2e:35:16:51:86: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:2D:28:21:50:4E:B1:D4:00:46:1F:6E:A0:CF:5D:A6:FD:2D:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/45232cc2-d5ff-3a30-881e-770a37fd9fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl X509v3 Authority Key Identifier: keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer sbgp-ipAddrBlock: critical IPv4: 96.43.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:bf:e2:4b:2a:c5:8a:78:af:bc:ac:a2:5f:10:98:68:98:ee: e0:9d:90:bc:09:60:0e:23:5a:1a:a7:9b:df:15:8f:f9:dd:34: ae:30:6a:ed:0b:5c:78:bc:d9:fe:7a:ea:e4:48:ba:83:a5:47: 00:b7:dd:d1:b4:81:ff:8a:b7:a8:0b:39:e5:81:c2:d9:2a:46: e2:44:01:ba:dc:16:5f:bb:51:25:c2:23:fe:e8:bb:5e:da:4e: 3f:b5:ae:14:69:93:69:80:f7:f0:fb:57:7e:97:6c:db:e4:19: 2c:46:0f:1d:f1:3d:cb:ad:1b:ac:16:32:b8:5b:5f:c7:ff:08: 29:85:9e:5e:78:75:bc:ff:19:27:10:1f:1c:28:0b:2f:44:3b: 24:3a:d8:41:72:01:e5:3a:bf:d4:99:3c:13:95:92:18:ce:f0: 7d:95:8f:42:70:31:2d:46:27:2d:56:54:20:06:9a:b5:32:4c: e8:ad:5f:ee:c1:67:39:87:4b:57:e2:51:61:e3:10:41:1e:47: fc:bc:66:eb:f3:5b:56:39:5b:c3:04:13:d5:63:ed:46:3c:5e: 09:ed:1c:d5:c8:c2:e6:d6:05:95:45:dd:12:18:f3:94:b6:3d: b8:3b:85:65:78:b6:dc:4d:22:05:aa:cb:d6:d0:fd:8c:2d:a1: c6:34:2e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSV2OPzmKsDf4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj YTRkMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NWFlMjlmYTQtYzI0ZC00YmM2LWI3YzUtODMxMmFmZDc5ZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OJRsyQHWL+sUCmdDuCO89OHBF2ty8wY+9op vv3DomBAvfIcjvxJLcMXLEFSM+b35JndFJKLGHvALoq0h4GQHqT/MNF/5Aqzo/Rx WscqVc8YKxSEH/xmZrieVPk4idSXFoGw/3xQ7iGBKF67sqZmU14sqHJW9cJUCXpF rJvNevOiVsEoGS9rZMlKia8MOtaapFtenhpzZOekAypcK99soISDuV6/YO36rse1 6JAZeJWAk6LpBWIIxBAHTJeUK4IF/phl7qCjYPvIEiefmumn6/Ca2Ihr1lk5PE0x gaabx8sSueG0OO8ryQTI5sTCcnwSAr8zKYAJmJpgLjUWUYYVKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3uLSghUE6x1ABGH26gz12m/S3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvNDUyMzJjYzItZDVmZi0z YTMwLTg4MWUtNzcwYTM3ZmQ5ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1 Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq/4ksqxYp4r7ysol8QmGiY7uCdkLwJYA4jWhqnm98Vj/ndNK4wau0L XHi82f566uRIuoOlRwC33dG0gf+Kt6gLOeWBwtkqRuJEAbrcFl+7USXCI/7ou17a Tj+1rhRpk2mA9/D7V36XbNvkGSxGDx3xPcutG6wWMrhbX8f/CCmFnl54dbz/GScQ HxwoCy9EOyQ62EFyAeU6v9SZPBOVkhjO8H2Vj0JwMS1GJy1WVCAGmrUyTOitX+7B ZzmHS1fiUWHjEEEeR/y8ZuvzW1Y5W8MEE9Vj7UY8XgntHNXIwubWBZVF3RIY85S2 Pbg7hWV4ttxNIgWqy9bQ/YwtocY0LsA= -----END CERTIFICATE-----Generated at Sun Jun 29 12:45:55 2025 by rpki-client