$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa File: 2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa (raw, json) Hash identifier: NcsknlA4R8z6jQ+1whZA7TpEy2H6PsgEqGKmgDTELQ8= Subject key identifier: F3:97:4D:B6:85:37:AA:C1:32:52:74:51:50:EF:B5:E8:4C:FC:49:9C Certificate issuer: /CN=397724ba-b516-4bac-893a-fcaae9e60f35 Certificate serial: 010D0C9F4328584A03A549B5748B34BADF1E5800 Authority key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 11686 IP address blocks: 96.4.0.0/15 maxlen: 32 207.191.176.0/20 maxlen: 32 2610:128::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:49:b5:74:8b:34:ba:df:1e:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397724ba-b516-4bac-893a-fcaae9e60f35 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=0c070fe7-5382-4be8-a84e-a257f45065d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:04:18:e2:19:45:86:3d:94:3c:05:4d:af: a5:c0:d4:27:b1:a7:ed:e7:c4:2c:b4:c4:f5:09:23: 6c:40:96:dc:68:ba:4c:1f:67:81:d7:40:77:7a:96: 84:16:ad:4c:6b:69:78:e8:ac:92:c5:c7:eb:1d:e8: 39:b4:1d:4c:08:c0:8c:d5:20:a1:71:35:ec:3c:e7: fa:89:50:bb:46:f1:4c:20:e9:79:fd:eb:c7:55:e0: 00:65:34:7a:bd:35:68:fb:93:a2:6b:90:7c:ad:42: 97:3c:e8:c1:95:af:cb:85:43:97:ed:cd:aa:18:bf: 18:82:97:af:80:a7:a5:21:df:50:8a:06:ed:dc:e2: 03:63:10:66:45:ad:fe:7a:6e:be:93:76:54:db:d3: 52:9f:ce:b4:1b:34:5f:06:88:56:f1:97:eb:46:18: 25:25:32:1f:bd:02:23:49:9d:e3:bf:3f:1f:6d:71: 95:6f:1d:cf:44:05:95:bc:c8:27:2a:4a:f3:1c:f6: 96:83:77:74:c0:f9:cf:5f:f8:c3:b0:3d:bd:a9:1a: 46:a4:7c:8a:9a:6a:ec:63:fe:ca:e1:96:7c:ec:f2: c5:5d:4b:b4:80:d8:7b:91:a1:cd:fa:d2:6b:7b:74: 76:d1:35:10:42:e9:7c:a2:c5:77:3c:75:16:0b:8e: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:97:4D:B6:85:37:AA:C1:32:52:74:51:50:EF:B5:E8:4C:FC:49:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl X509v3 Authority Key Identifier: keyid:1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer sbgp-ipAddrBlock: critical IPv4: 96.4.0.0/15 207.191.176.0/20 IPv6: 2610:128::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7f:f7:45:4b:fb:9c:b8:3e:3f:09:bd:75:bc:57:64:91:4d: 11:1a:c8:08:ba:17:5b:fc:f6:57:52:b2:b4:a9:eb:a1:5e:07: 05:2b:5e:18:3e:2c:6c:3a:7c:8f:ab:4a:2d:df:e4:18:4a:92: 8c:d8:15:69:3d:05:ac:3a:21:55:db:b2:3c:d6:08:94:5f:75: fd:43:e2:7b:0f:cf:41:a5:d1:ab:b4:34:61:8e:e8:cb:2e:4b: 47:d5:74:aa:3f:30:82:87:6a:88:da:6d:92:bb:c4:7a:0e:52: 2d:b5:71:c7:98:ee:b1:32:a2:8d:76:82:5b:bc:ab:6e:74:01: ca:59:ca:d9:a1:59:1b:c9:df:e8:5d:8e:69:f7:c1:1c:5f:da: 24:24:12:c8:97:9d:cc:31:fe:36:7d:65:08:7f:c3:46:85:dc: be:17:09:b3:68:c8:8f:aa:b8:09:a3:53:af:60:57:3a:4c:ea: be:e8:75:c7:ee:d0:f8:2f:db:34:db:dc:23:09:f2:04:8b:40: c5:ef:3e:12:8d:e8:bf:cd:ab:55:d9:88:8a:50:2c:a8:fa:7c: c2:e2:59:35:5d:34:9d:78:94:77:94:b4:ed:16:75:83:c6:01: 87:a0:0f:07:7b:4a:68:61:a9:78:8c:51:90:08:6c:a2:11:8e: d2:ed:40:e1 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEoDpUm1dIs0ut8eWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NzI0YmEtYjUxNi00YmFjLTg5M2EtZmNhYWU5ZTYw ZjM1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MGMwNzBmZTctNTM4Mi00YmU4LWE4NGUtYTI1N2Y0NTA2NWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFsEGOIZRYY9lDwFTa+lwNQnsaft58QstMT1 CSNsQJbcaLpMH2eB10B3epaEFq1Ma2l46KySxcfrHeg5tB1MCMCM1SChcTXsPOf6 iVC7RvFMIOl5/evHVeAAZTR6vTVo+5Oia5B8rUKXPOjBla/LhUOX7c2qGL8Ygpev gKelId9Qigbt3OIDYxBmRa3+em6+k3ZU29NSn860GzRfBohW8ZfrRhglJTIfvQIj SZ3jvz8fbXGVbx3PRAWVvMgnKkrzHPaWg3d0wPnPX/jDsD29qRpGpHyKmmrsY/7K 4ZZ87PLFXUu0gNh7kaHN+tJre3R20TUQQul8osV3PHUWC44DBQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFPOXTbaFN6rBMlJ0UVDvtehM/EmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3 MjRiYS1iNTE2LTRiYWMtODkzYS1mY2FhZTllNjBmMzUvMmY0ZDY4YTItMDJlZS0z Yjc4LTk3YmQtZjhjZGJkMGY2MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk3NzI0YmEtYjUxNi00YmFjLTg5 M2EtZmNhYWU5ZTYwZjM1LzM5NzcyNGJhLWI1MTYtNGJhYy04OTNhLWZjYWFlOWU2 MGYzNS5jcmwwHwYDVR0jBBgwFoAUHUJ3xTGpN8znBa3PKztrP7fqLJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3MjRiYS1iNTE2LTRiYWMtODkzYS1mY2Fh ZTllNjBmMzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMBYAQDBATP v7AwDQQCAAIwBwMFACYQASgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJ3/3RUv7nLg+Pwm9dbxXZJFNERrI CLoXW/z2V1KytKnroV4HBSteGD4sbDp8j6tKLd/kGEqSjNgVaT0FrDohVduyPNYI lF91/UPiew/PQaXRq7Q0YY7oyy5LR9V0qj8wgodqiNptkrvEeg5SLbVxx5jusTKi jXaCW7yrbnQBylnK2aFZG8nf6F2OaffBHF/aJCQSyJedzDH+Nn1lCH/DRoXcvhcJ s2jIj6q4CaNTr2BXOkzqvuh1x+7Q+C/bNNvcIwnyBItAxe8+Eo3ov82rVdmIilAs qPp8wuJZNV00nXiUd5S07RZ1g8YBh6APB3tKaGGpeIxRkAhsohGO0u1A4Q== -----END CERTIFICATE-----Generated at Mon Jun 16 02:02:45 2025 by rpki-client