$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3506e1fd-1a94-3422-9e7c-0c78db238507.roa File: 3506e1fd-1a94-3422-9e7c-0c78db238507.roa (raw, json) Hash identifier: DtZ7SPEjBojGbMFgYeCSSIANfKgHOWhJf7ilSYDFi04= Subject key identifier: 3C:7F:87:BE:E2:36:EC:F9:C0:67:04:93:67:DA:92:0E:B9:1C:F1:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED7A4FEA50ADCC1C626180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3506e1fd-1a94-3422-9e7c-0c78db238507.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 76.105.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:7a:4f:ea:50:ad:cc:1c:62:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=f6510ff6-d1e1-4488-af78-1d4194852cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:cf:b6:c1:8e:81:e2:68:80:a6:92:f6:e5: 70:e4:a6:f3:38:ce:05:ad:f5:9c:c9:39:db:11:e5: d7:ea:6b:75:38:16:f1:dd:01:ae:58:17:82:60:32: d4:be:01:1d:1d:d9:2e:6b:8a:ec:02:76:cb:31:fb: 26:d7:73:7b:ae:d4:2e:f4:01:5c:dd:f2:29:4b:1f: a7:9d:cb:f2:1f:67:93:d0:2f:d3:0b:89:50:09:a3: 7f:e9:82:d8:e0:84:22:ab:64:28:2a:c9:42:de:73: ab:59:6e:af:d5:c6:4e:8d:55:7a:74:07:04:3a:e3: 34:23:3a:4f:82:b2:af:7b:1a:d6:77:3c:1e:64:a2: f0:a4:79:55:d4:71:4f:3f:76:08:b6:2d:5d:43:2e: 8e:9d:c5:59:92:8b:ab:4c:d9:f6:5e:b9:57:d7:dd: a6:88:38:c7:c2:44:3e:09:a2:92:97:17:50:77:5e: 75:1e:33:bf:97:8f:a9:17:34:80:11:63:d1:15:b5: 94:47:f3:3b:0f:61:ba:3a:21:d6:5b:61:b5:64:2e: 7a:f3:f7:ad:4e:aa:96:81:e4:d1:fc:ca:42:d8:fa: 97:42:55:ba:a6:48:1a:ea:9a:cb:de:0d:27:00:07: 73:5b:e1:ad:57:3d:2b:1f:97:66:cd:ea:2a:99:2a: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7F:87:BE:E2:36:EC:F9:C0:67:04:93:67:DA:92:0E:B9:1C:F1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3506e1fd-1a94-3422-9e7c-0c78db238507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.105.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:cb:e3:d7:cf:4b:00:a7:b2:52:60:b2:e3:6b:b9:8d:f7:e9: e6:95:e2:2c:86:19:34:fa:d5:bd:10:53:63:6c:2f:ed:91:16: 87:c9:47:34:bf:fa:90:1f:aa:2a:57:98:2f:aa:04:be:33:cb: c5:1a:45:40:06:71:82:97:4f:f0:6e:05:52:74:36:7f:e0:68: b6:8c:e9:4f:fb:51:a9:a9:49:75:49:bc:1c:3c:a8:d1:e9:25: 32:31:74:2b:30:d7:93:77:38:ab:d6:a8:5a:4d:bb:5c:aa:3c: 41:60:e4:c4:73:8d:6a:44:df:84:11:97:79:f0:21:6e:86:0c: 88:80:41:80:28:5a:9f:86:09:c6:df:8c:d3:07:c2:c0:e5:78: 10:68:56:35:00:5c:57:e1:31:0a:16:84:4b:fc:ab:7b:a5:4e: 03:e2:64:9e:23:cd:5e:ab:98:ce:11:ab:25:47:c6:ce:c9:08: 96:26:04:84:1e:19:cc:12:2f:f6:a9:fd:45:e2:12:17:91:2f: e2:e1:bc:de:67:86:83:94:fd:07:9e:0b:54:4a:de:65:4d:00: f2:fe:48:e9:27:0d:88:0a:df:af:8a:63:59:b8:8c:f4:7b:90: f1:20:85:ee:0b:c4:5a:14:00:29:c2:fe:dc:4c:bc:a2:6f:20: 6e:3c:1a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07XpP6lCtzBxiYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjY1MTBmZjYtZDFlMS00NDg4LWFmNzgtMWQ0MTk0ODUyY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5/PtsGOgeJogKaS9uVw5KbzOM4FrfWcyTnb EeXX6mt1OBbx3QGuWBeCYDLUvgEdHdkua4rsAnbLMfsm13N7rtQu9AFc3fIpSx+n ncvyH2eT0C/TC4lQCaN/6YLY4IQiq2QoKslC3nOrWW6v1cZOjVV6dAcEOuM0IzpP grKvexrWdzweZKLwpHlV1HFPP3YIti1dQy6OncVZkourTNn2XrlX192miDjHwkQ+ CaKSlxdQd151HjO/l4+pFzSAEWPRFbWUR/M7D2G6OiHWW2G1ZC568/etTqqWgeTR /MpC2PqXQlW6pkga6prL3g0nAAdzW+GtVz0rH5dmzeoqmSodgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx/h77iNuz5wGcEk2fakg65HPHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUwNmUxZmQtMWE5NC0z NDIyLTllN2MtMGM3OGRiMjM4NTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTGmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjL49fPSwCnslJgsuNruY336eaV4iyGGTT61b0QU2NsL+2RFofJRzS/ +pAfqipXmC+qBL4zy8UaRUAGcYKXT/BuBVJ0Nn/gaLaM6U/7UampSXVJvBw8qNHp JTIxdCsw15N3OKvWqFpNu1yqPEFg5MRzjWpE34QRl3nwIW6GDIiAQYAoWp+GCcbf jNMHwsDleBBoVjUAXFfhMQoWhEv8q3ulTgPiZJ4jzV6rmM4RqyVHxs7JCJYmBIQe GcwSL/ap/UXiEheRL+LhvN5nhoOU/QeeC1RK3mVNAPL+SOknDYgK36+KY1m4jPR7 kPEghe4LxFoUACnC/txMvKJvIG48Gug= -----END CERTIFICATE-----Generated at Wed Aug 6 10:17:28 2025 by rpki-client