$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa File: 328acd99-4643-3ed8-b9f2-bab57c33866c.roa (raw, json) Hash identifier: 8JwbrAb5FP0Jcu1EByJm6EZwkt5xFqjeyQ2VOXQEc2w= Subject key identifier: AA:53:46:1D:34:1E:60:EA:22:B1:FA:BE:C4:B8:AE:36:E5:20:79:74 Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F4328584AAB2656BE963F385DF7A33180 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 47039 IP address blocks: 96.61.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:56:be:96:3f:38:5d:f7:a3:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=942756b9-0d8e-4d8e-83d7-c332a7ccce51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:59:b9:4c:42:c7:75:82:2d:a9:08:b8:0e: 70:2c:96:a4:61:c7:12:a9:de:b8:82:b2:07:5c:e9: c9:da:f2:d7:c1:64:32:29:90:de:b7:39:58:b4:29: de:24:f4:b6:28:e4:ca:03:be:bc:1e:98:ad:b6:4e: dd:c8:e6:a9:3c:f2:93:e1:85:3f:e6:e1:49:7d:6c: 40:57:a4:54:6e:33:65:0d:32:cd:69:6a:5e:bf:d5: 66:1f:fa:fc:48:fb:e5:7b:70:4a:cc:e1:15:ab:30: 17:f3:10:a0:11:27:d7:2b:27:20:07:ca:d1:e7:f2: 14:4a:81:ce:99:6b:e3:23:11:1e:37:8f:aa:27:e0: 60:45:16:c7:c5:8a:90:40:83:d1:ba:33:43:a9:5c: 45:3b:8b:40:c5:11:69:ba:8d:f9:ea:95:e4:aa:ff: c2:3f:45:4b:9e:76:a1:a4:72:ad:34:08:d7:55:40: 1d:40:1e:99:2d:68:32:74:90:58:fb:29:f3:b7:36: bf:4b:e2:fb:bd:bf:7d:77:a6:5b:b3:3a:b3:fe:3b: 84:c7:23:6a:1d:fd:cf:cd:49:b1:34:38:ab:36:8e: 77:f5:35:80:4f:c9:13:ea:85:3c:b8:66:24:2c:65: c5:39:ad:e1:88:d2:db:14:77:5a:40:95:25:b5:bb: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:53:46:1D:34:1E:60:EA:22:B1:FA:BE:C4:B8:AE:36:E5:20:79:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 96.61.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:90:9e:69:7c:70:14:02:58:9b:ea:63:2b:57:14:83:47:15: 31:06:23:08:95:d5:90:cd:62:b9:f7:53:ec:b0:d3:96:3c:ef: 38:4b:cf:30:ef:27:b3:f0:a6:ba:7f:b4:98:0a:8a:c1:f0:1a: 6c:01:3e:cb:71:c6:3e:d6:f3:ad:84:17:cf:ea:47:73:12:9c: 4d:16:2c:9d:2b:ff:8d:df:15:37:79:a0:a7:11:e9:03:cf:9d: 40:9b:c3:59:ab:9d:5d:12:2e:e2:79:ea:7d:96:36:4c:7a:98: 50:e7:4f:1a:a6:aa:1d:a6:5c:6c:08:86:85:61:da:0d:ac:70: a2:fd:e4:23:e3:5f:35:28:c7:c0:45:20:8a:af:93:24:a7:b3: c3:e7:bc:bb:99:c1:72:7f:d0:5a:e7:dd:a0:c6:01:31:a9:85: 9f:ca:3a:ff:b7:b0:01:aa:87:3a:8e:53:84:32:02:fe:67:36: fd:db:b0:4e:e1:6c:e6:0e:28:1b:98:94:8e:6e:db:a7:4e:2b: ca:d6:43:b7:3f:ef:51:0d:6b:9c:32:c4:86:e4:a1:21:dd:ae: 69:81:50:79:c0:e2:7b:22:f3:bd:9a:76:e9:05:9b:8b:07:c9: 83:a5:20:d0:44:89:8a:0e:25:0c:32:f9:43:8e:e9:d2:1e:b4: b3:ce:c7:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJla+lj84XfejMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OTQyNzU2YjktMGQ4ZS00ZDhlLTgzZDctYzMzMmE3Y2NjZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeBZuUxCx3WCLakIuA5wLJakYccSqd64grIH XOnJ2vLXwWQyKZDetzlYtCneJPS2KOTKA768Hpittk7dyOapPPKT4YU/5uFJfWxA V6RUbjNlDTLNaWpev9VmH/r8SPvle3BKzOEVqzAX8xCgESfXKycgB8rR5/IUSoHO mWvjIxEeN4+qJ+BgRRbHxYqQQIPRujNDqVxFO4tAxRFpuo356pXkqv/CP0VLnnah pHKtNAjXVUAdQB6ZLWgydJBY+ynztza/S+L7vb99d6Zbszqz/juExyNqHf3PzUmx NDirNo539TWAT8kT6oU8uGYkLGXFOa3hiNLbFHdaQJUltbshQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpTRh00HmDqIrH6vsS4rjblIHl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvMzI4YWNkOTktNDY0My0z ZWQ4LWI5ZjItYmFiNTdjMzM4NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD3jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaQnml8cBQCWJvqYytXFINHFTEGIwiV1ZDNYrn3U+yw05Y87zhLzzDv J7Pwprp/tJgKisHwGmwBPstxxj7W862EF8/qR3MSnE0WLJ0r/43fFTd5oKcR6QPP nUCbw1mrnV0SLuJ56n2WNkx6mFDnTxqmqh2mXGwIhoVh2g2scKL95CPjXzUox8BF IIqvkySns8PnvLuZwXJ/0Frn3aDGATGphZ/KOv+3sAGqhzqOU4QyAv5nNv3bsE7h bOYOKBuYlI5u26dOK8rWQ7c/71ENa5wyxIbkoSHdrmmBUHnA4nsi872adukFm4sH yYOlINBEiYoOJQwy+UOO6dIetLPOx0Y= -----END CERTIFICATE-----Generated at Mon Aug 11 10:09:22 2025 by rpki-client