$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa File: 0d0909e7-6d32-3d39-86f7-d73788e35b15.roa (raw, json) Hash identifier: s1lp+WENyVffrHAa7cNuYRev3ZhmpIZLo4glSAXrv/U= Subject key identifier: 3C:32:41:FE:22:EC:0F:2C:29:16:B5:C8:D0:36:AA:C6:8A:34:3E:10 Certificate issuer: /CN=95437874-24a3-4971-a87b-95b645e257bb Certificate serial: 010D0C9F4328584AB4EB7E4D4B5C6CD032E2A780 Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 36556 IP address blocks: 96.9.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7e:4d:4b:5c:6c:d0:32:e2:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=d564fcdc-80de-4a0d-a8b0-2dc5e371bbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:10:ad:e5:dc:11:33:43:6b:5c:63:72:b1: 9a:d9:fe:dd:b1:dd:02:ab:63:33:f8:5f:2f:57:cb: f8:9d:9a:cc:9c:7d:5a:0a:97:24:1e:37:42:73:cf: 02:32:d4:81:25:e1:24:03:c5:45:96:b2:f7:bb:f3: 93:46:0b:8e:64:91:f9:23:88:57:c3:0d:7d:a7:f6: 4b:4b:ac:b7:85:93:72:4b:79:75:61:bb:3a:7d:fa: 5a:0b:03:0a:a8:f6:06:10:a5:d2:dc:f4:77:eb:55: 9b:8b:20:a8:c9:dc:68:cd:60:db:c4:54:bc:39:2a: fc:df:81:39:77:10:61:01:4c:b5:06:f9:d6:78:fa: 46:fd:c7:2b:28:4e:a3:6b:53:f3:97:09:a0:31:2c: b1:1b:88:49:48:fd:96:73:5e:b9:d9:e6:72:33:d1: bd:a9:38:a7:f8:a6:3d:fa:3c:36:12:07:39:e9:8b: 16:5c:1f:4c:94:d2:b4:f8:3c:b1:d4:55:ea:b9:40: a8:0b:d6:70:db:c7:7b:3d:98:9b:b2:0d:26:69:b9: 55:39:8e:d1:0b:af:fd:0a:94:e5:4e:99:af:43:6a: f1:8f:8b:04:58:06:c8:7a:62:4a:d7:a4:a7:aa:d9: 29:16:a0:47:47:4e:ab:63:b0:1c:c9:b1:6b:12:71: b7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:41:FE:22:EC:0F:2C:29:16:B5:C8:D0:36:AA:C6:8A:34:3E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/0d0909e7-6d32-3d39-86f7-d73788e35b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl X509v3 Authority Key Identifier: keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer sbgp-ipAddrBlock: critical IPv4: 96.9.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a2:68:d3:b9:3a:66:86:53:41:6c:cf:33:41:7b:e0:2e:1f: 36:63:38:40:f5:0b:57:8b:c6:d3:36:46:a4:60:32:e2:15:ea: 76:9a:4a:6b:46:c1:67:3b:ee:20:a2:71:69:5c:99:84:f7:f9: 6e:7f:3c:5f:1f:3f:27:9f:17:91:b5:b9:ae:9f:70:30:99:35: 19:16:6d:54:19:04:8f:1b:c8:88:bf:ce:33:71:6d:8f:43:96: 4a:7a:91:b0:73:24:0c:60:25:ed:c8:46:02:8b:c7:0d:8e:2a: a7:94:bf:c4:7c:c5:22:97:34:9d:90:2e:e1:49:99:40:92:e1: ad:35:c6:5c:29:ea:bf:44:06:cf:2a:9a:a8:da:bf:db:62:78: bf:10:c0:5f:a2:9f:07:7b:b8:ac:bd:77:ca:27:68:04:52:63: 77:79:9a:08:99:1f:73:70:7e:8e:b0:3c:a1:79:13:c0:b2:83: 78:79:54:b8:f0:dd:77:6c:88:7b:75:35:2a:57:69:59:9b:1c: ff:07:1e:cd:8e:e4:a6:e2:5e:58:64:97:82:b9:5c:3c:dc:98: b6:33:a6:4c:08:8a:da:78:14:b7:b8:47:24:75:68:57:f8:4a: a4:3c:51:8e:fa:c3:77:f8:3a:7f:bc:9f:04:a0:fb:5a:d2:b4: e3:0b:75:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0635NS1xs0DLip4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1 N2JiMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDU2NGZjZGMtODBkZS00YTBkLWE4YjAtMmRjNWUzNzFiYmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oAQreXcETNDa1xjcrGa2f7dsd0Cq2Mz+F8v V8v4nZrMnH1aCpckHjdCc88CMtSBJeEkA8VFlrL3u/OTRguOZJH5I4hXww19p/ZL S6y3hZNyS3l1Ybs6ffpaCwMKqPYGEKXS3PR361WbiyCoydxozWDbxFS8OSr834E5 dxBhAUy1BvnWePpG/ccrKE6ja1PzlwmgMSyxG4hJSP2Wc1652eZyM9G9qTin+KY9 +jw2Egc56YsWXB9MlNK0+Dyx1FXquUCoC9Zw28d7PZibsg0mablVOY7RC6/9CpTl TpmvQ2rxj4sEWAbIemJK16SnqtkpFqBHR06rY7AcybFrEnG3yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwyQf4i7A8sKRa1yNA2qsaKND4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NTQz Nzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvMGQwOTA5ZTctNmQzMi0z ZDM5LTg2ZjctZDczNzg4ZTM1YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTU0Mzc4NzQtMjRhMy00OTcxLWE4 N2ItOTViNjQ1ZTI1N2JiLzk1NDM3ODc0LTI0YTMtNDk3MS1hODdiLTk1YjY0NWUy NTdiYi5jcmwwHwYDVR0jBBgwFoAUDZpYabwzwNGVnD0AuQA7uUOKTmkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2 NDVlMjU3YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYAlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeiaNO5OmaGU0FszzNBe+AuHzZjOED1C1eLxtM2RqRgMuIV6naaSmtG wWc77iCicWlcmYT3+W5/PF8fPyefF5G1ua6fcDCZNRkWbVQZBI8byIi/zjNxbY9D lkp6kbBzJAxgJe3IRgKLxw2OKqeUv8R8xSKXNJ2QLuFJmUCS4a01xlwp6r9EBs8q mqjav9tieL8QwF+inwd7uKy9d8onaARSY3d5mgiZH3Nwfo6wPKF5E8Cyg3h5VLjw 3XdsiHt1NSpXaVmbHP8HHs2O5KbiXlhkl4K5XDzcmLYzpkwIitp4FLe4RyR1aFf4 SqQ8UY76w3f4On+8nwSg+1rStOMLdTw= -----END CERTIFICATE-----Generated at Mon Aug 11 08:45:02 2025 by rpki-client