$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b403842-2af8-3849-8d46-4457eef09b27.roa File: 0b403842-2af8-3849-8d46-4457eef09b27.roa (raw, json) Hash identifier: C+KQ4IfxOyC1D1xlg5vvpxs817HVbiFUfo2evm2pbUs= Subject key identifier: 21:53:86:D9:A7:4B:52:4B:DA:A5:50:3F:CA:84:68:31:55:97:4B:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECD6A4EC998B33DD7E7C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b403842-2af8-3849-8d46-4457eef09b27.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 76.139.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:d6:a4:ec:99:8b:33:dd:7e:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=b6ace54b-2778-481e-a299-318d31e590bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1f:63:cc:52:27:09:b8:5f:9d:bb:8b:51:b2: f2:03:3d:5b:64:1a:59:23:ff:af:66:02:2c:ab:70: 11:cd:91:e8:6b:f7:24:d1:87:ad:0c:a8:a5:43:b9: db:62:b1:e1:a9:57:d3:a5:13:3b:47:e9:b6:46:e3: 37:39:a7:dc:9f:45:0c:28:78:00:22:1e:0a:59:29: 84:2a:1e:97:24:b1:89:a8:a9:c1:8a:7a:68:75:e1: ca:d8:13:48:4b:13:a1:93:94:6a:28:a8:bf:1a:88: 09:ce:ee:1a:35:c1:fd:86:34:b2:aa:b2:42:a8:d4: bd:80:4e:14:9f:1e:8e:05:00:fc:b5:1f:4e:00:88: c4:50:5f:a5:be:a5:6d:df:6d:d8:83:d7:de:92:98: d8:10:7d:5e:9e:b2:86:91:fe:9a:a1:62:4f:3f:72: 99:a4:bb:dc:d4:8b:f2:30:91:57:85:ba:ea:01:ae: ab:5a:5c:7c:94:e5:83:58:ca:d6:0f:c2:7a:72:17: 31:12:ec:2c:d0:22:73:07:08:3f:31:b6:59:8d:a1: 49:e5:7b:43:30:00:04:d2:02:4b:48:0c:47:08:fd: 40:44:69:0f:ac:48:26:fc:ed:df:e1:b2:e8:17:30: 0d:a7:2e:42:17:fe:cb:f4:ef:b1:1f:1f:e1:2b:ce: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:53:86:D9:A7:4B:52:4B:DA:A5:50:3F:CA:84:68:31:55:97:4B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b403842-2af8-3849-8d46-4457eef09b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.139.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:08:b2:7c:3e:54:fd:6d:83:40:45:17:2d:c4:f7:13:4a:65: d8:aa:7a:99:ee:b9:01:fb:d2:7a:66:a9:57:44:93:1c:f4:84: ee:2b:8b:e2:30:dd:a4:b0:fb:84:fb:ba:90:50:ef:84:96:9c: 53:56:8c:e9:bb:b0:db:88:96:85:ef:f5:9e:27:f4:8b:ff:a3: 3b:cf:e8:18:e8:46:bc:df:b9:fa:fc:40:34:26:d0:e4:0e:17: 21:f5:56:54:18:62:20:5b:de:15:5e:55:b0:1c:28:cd:59:90: 70:6f:e9:4d:a5:89:2a:32:14:8b:a8:4a:5d:28:00:47:e5:68: 27:ae:8b:66:14:b0:90:6b:56:8b:0b:02:84:a0:ce:19:60:c2: 62:18:28:c5:14:98:98:4a:3a:9a:22:15:33:0b:e0:48:c1:bb: ae:0c:84:f9:cd:6c:0a:d6:1a:19:37:c7:0c:dd:70:eb:20:bb: 40:14:ac:17:ee:19:e7:ea:d0:f5:7a:f0:e6:3b:ea:dc:b1:89: 72:1b:76:ec:82:af:33:40:c2:74:7b:da:2d:a6:5f:d5:00:d6: 20:06:91:0c:b4:81:80:34:d3:dd:40:f1:07:c5:2a:79:59:e3: 09:5d:f9:bb:a6:6e:46:65:b1:b7:15:28:61:39:dc:e9:cb:c9: bc:cf:a6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07Nak7JmLM91+fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjZhY2U1NGItMjc3OC00ODFlLWEyOTktMzE4ZDMxZTU5MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6R9jzFInCbhfnbuLUbLyAz1bZBpZI/+vZgIs q3ARzZHoa/ck0YetDKilQ7nbYrHhqVfTpRM7R+m2RuM3Oafcn0UMKHgAIh4KWSmE Kh6XJLGJqKnBinpodeHK2BNISxOhk5RqKKi/GogJzu4aNcH9hjSyqrJCqNS9gE4U nx6OBQD8tR9OAIjEUF+lvqVt323Yg9fekpjYEH1enrKGkf6aoWJPP3KZpLvc1Ivy MJFXhbrqAa6rWlx8lOWDWMrWD8J6chcxEuws0CJzBwg/MbZZjaFJ5XtDMAAE0gJL SAxHCP1ARGkPrEgm/O3f4bLoFzANpy5CF/7L9O+xHx/hK86fXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFThtmnS1JL2qVQP8qEaDFVl0vTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGI0MDM4NDItMmFmOC0z ODQ5LThkNDYtNDQ1N2VlZjA5YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANoIsnw+VP1tg0BFFy3E9xNKZdiqepnuuQH70npmqVdEkxz0hO4ri+Iw 3aSw+4T7upBQ74SWnFNWjOm7sNuIloXv9Z4n9Iv/ozvP6BjoRrzfufr8QDQm0OQO FyH1VlQYYiBb3hVeVbAcKM1ZkHBv6U2liSoyFIuoSl0oAEflaCeui2YUsJBrVosL AoSgzhlgwmIYKMUUmJhKOpoiFTML4EjBu64MhPnNbArWGhk3xwzdcOsgu0AUrBfu Gefq0PV68OY76tyxiXIbduyCrzNAwnR72i2mX9UA1iAGkQy0gYA0091A8QfFKnlZ 4wld+bumbkZlsbcVKGE53OnLybzPplk= -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:40 2025 by rpki-client