$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44d0474f-8494-3cf2-9f10-3153bb456178.roa File: 44d0474f-8494-3cf2-9f10-3153bb456178.roa (raw, json) Hash identifier: wGmHimmi9wU5lsQkmDoB19o9xtIT9ffy/pkIG4cvv0s= Subject key identifier: EA:5D:EF:3C:9C:C7:4D:FF:A1:81:BE:53:78:3B:A4:55:95:AF:04:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECD5D99D212450FCD309C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44d0474f-8494-3cf2-9f10-3153bb456178.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 76.139.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:d5:d9:9d:21:24:50:fc:d3:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=cbca5c8b-1f9f-47ad-a8da-1d4aa3de6f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0f:d5:04:78:63:0a:47:21:ec:20:7d:06:51: ba:b8:03:78:a2:c6:de:1d:4f:a5:5a:d2:90:3a:a6: 94:9a:ed:04:5a:27:45:48:13:dc:b7:6c:fd:63:37: b7:f6:63:36:a8:3f:07:25:dd:27:85:83:7b:11:8d: e6:b5:bb:cf:4e:a6:cc:70:20:af:08:41:b9:f5:68: 81:39:ae:ea:ad:11:e5:9f:b9:5e:89:dc:6b:be:77: fa:47:a3:cc:a9:e3:15:e9:32:ee:6d:c0:44:db:7f: 94:98:e5:d8:5d:b8:cb:9f:36:5d:57:d3:f6:38:c3: d6:a8:f0:9b:95:3e:58:34:43:80:49:90:3b:c7:4c: 99:44:0f:91:36:36:6f:f4:ee:1e:48:c0:dc:ef:a3: c6:1d:a6:d7:30:f6:e8:1d:d7:e4:53:ec:c5:27:67: 63:9f:f2:6d:de:0c:be:10:ee:b2:3d:aa:89:76:d2: ec:84:3c:7e:2c:11:6e:9d:ee:0c:db:11:62:49:bd: b5:ef:ef:97:f8:28:f7:b6:21:c6:16:89:e1:e5:b0: fe:23:76:b4:39:a9:b4:63:23:cd:e8:b0:ba:8c:91: 7c:8a:6b:70:6e:0c:54:d2:bd:41:2e:74:46:7a:83: be:bd:09:e7:b1:c4:8c:32:c8:69:07:c7:ad:87:79: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5D:EF:3C:9C:C7:4D:FF:A1:81:BE:53:78:3B:A4:55:95:AF:04:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44d0474f-8494-3cf2-9f10-3153bb456178.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.139.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:44:4e:60:3e:f6:7e:d7:01:1e:02:6d:3e:32:9c:2b:60:6d: e2:51:24:9f:d2:d8:44:34:7b:97:13:ea:cc:ab:23:7f:da:15: ca:e7:e0:63:1d:78:1b:28:91:68:95:87:54:7a:27:4f:57:bf: 79:a0:28:58:f6:2c:4b:5f:ed:bf:7c:22:5c:23:52:4f:c5:13: 60:2d:c5:a3:7c:9c:a0:44:b9:c7:1c:f1:b8:0e:aa:03:9a:3b: db:58:a4:11:e4:53:70:5d:b7:3e:99:88:53:79:11:ab:fb:54: 80:1c:93:3c:c4:6e:2d:51:ed:e5:6c:c4:9a:67:06:c6:d9:ae: ef:06:59:75:78:20:dd:0f:20:99:b4:16:a2:0b:93:23:61:53: 32:8d:3d:ac:73:e1:45:5f:00:ee:ad:fe:f8:e4:01:37:1a:b1: e3:a8:82:a8:44:ed:85:02:04:4f:db:ab:3a:ec:11:aa:6d:ef: 1b:70:ae:4a:14:51:67:25:20:a5:3b:62:8d:56:69:81:e5:aa: 9b:b6:86:9d:f4:13:6c:ac:49:84:23:ff:e3:62:8a:fc:cb:84: b1:db:96:57:e1:ea:ef:f7:a2:b5:e3:83:1d:f2:cd:53:f1:0a: cf:7f:6c:bf:e1:d8:81:25:93:10:22:d4:26:60:ef:8c:a4:9e: f0:70:34:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07NXZnSEkUPzTCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk Y2JjYTVjOGItMWY5Zi00N2FkLWE4ZGEtMWQ0YWEzZGU2ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA/VBHhjCkch7CB9BlG6uAN4osbeHU+lWtKQ OqaUmu0EWidFSBPct2z9Yze39mM2qD8HJd0nhYN7EY3mtbvPTqbMcCCvCEG59WiB Oa7qrRHln7leidxrvnf6R6PMqeMV6TLubcBE23+UmOXYXbjLnzZdV9P2OMPWqPCb lT5YNEOASZA7x0yZRA+RNjZv9O4eSMDc76PGHabXMPboHdfkU+zFJ2djn/Jt3gy+ EO6yPaqJdtLshDx+LBFune4M2xFiSb217++X+Cj3tiHGFonh5bD+I3a0Oam0YyPN 6LC6jJF8imtwbgxU0r1BLnRGeoO+vQnnscSMMshpB8eth3nJKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpd7zycx03/oYG+U3g7pFWVrwRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDRkMDQ3NGYtODQ5NC0z Y2YyLTlmMTAtMzE1M2JiNDU2MTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5ETmA+9n7XAR4CbT4ynCtgbeJRJJ/S2EQ0e5cT6syrI3/aFcrn4GMd eBsokWiVh1R6J09Xv3mgKFj2LEtf7b98IlwjUk/FE2AtxaN8nKBEuccc8bgOqgOa O9tYpBHkU3Bdtz6ZiFN5Eav7VIAckzzEbi1R7eVsxJpnBsbZru8GWXV4IN0PIJm0 FqILkyNhUzKNPaxz4UVfAO6t/vjkATcaseOogqhE7YUCBE/bqzrsEapt7xtwrkoU UWclIKU7Yo1WaYHlqpu2hp30E2ysSYQj/+NiivzLhLHbllfh6u/3orXjgx3yzVPx Cs9/bL/h2IElkxAi1CZg74yknvBwNHc= -----END CERTIFICATE-----Generated at Fri Aug 8 00:35:19 2025 by rpki-client