$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598a4e00-b033-3c1a-86cd-2144add7228c.roa File: 598a4e00-b033-3c1a-86cd-2144add7228c.roa (raw, json) Hash identifier: Nhx5iME2g49TcKpVAnam8FAvFk82hPulN4JJF7wRieM= Subject key identifier: 42:09:A1:2B:6C:8B:D5:7E:BD:14:E0:93:A7:38:E0:B8:C2:32:27:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1FC61AF200B598C166CE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598a4e00-b033-3c1a-86cd-2144add7228c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 76.124.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:fc:61:af:20:0b:59:8c:16:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=836f6f1b-4a1e-4962-bbe6-9d37ec4c86b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:4c:34:d1:3f:20:83:2e:cd:54:1e:71:46: bc:a4:d0:c4:a1:9d:c0:37:23:88:ba:48:da:9b:0e: df:15:32:e4:40:7f:a1:5d:ba:76:5d:53:73:c3:63: 77:b3:fb:3c:51:72:69:c2:1d:8f:ef:e8:bb:4e:3e: dc:ba:c5:02:d0:5b:85:74:fb:66:35:76:d6:cc:37: ca:19:e2:85:25:49:3e:b5:5a:7f:88:31:c6:f2:3a: 0c:eb:3c:f2:ea:37:68:c6:11:ba:3b:b6:cb:d5:e3: 0e:e9:e1:69:75:73:75:08:77:a8:06:a1:1c:21:f4: c6:1f:6c:60:3e:a9:23:f5:96:01:a1:e4:0b:67:76: 67:cb:ef:eb:58:0d:d9:51:bd:ec:53:c5:2e:af:e7: 24:42:46:4f:fe:e4:6b:6a:14:3d:d9:e4:62:ea:9b: 87:64:d3:33:d6:7e:02:36:01:31:42:b8:a2:dd:55: e2:e9:72:8a:ed:99:65:8d:f1:c6:2f:30:e1:01:c0: da:5d:3e:29:bb:ef:6b:80:4f:6a:4c:9c:f2:b2:b5: 87:55:ef:7d:77:db:02:90:ae:68:bc:34:49:35:e0: 7f:8b:7d:e4:32:e0:7d:96:31:8d:64:d4:d8:42:6d: 0b:35:2e:1d:09:83:18:33:2a:83:bc:0a:b9:a3:a8: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:09:A1:2B:6C:8B:D5:7E:BD:14:E0:93:A7:38:E0:B8:C2:32:27:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598a4e00-b033-3c1a-86cd-2144add7228c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:89:b5:15:ce:98:38:18:9c:a7:60:21:3b:4a:41:7b:dd:d7: 35:0d:2e:36:21:ad:b6:c9:9a:90:eb:95:31:b1:29:4d:55:a3: 23:1c:75:65:b2:81:6e:42:41:dc:2f:77:00:4d:48:6f:ac:f5: 01:90:bf:12:77:02:aa:e5:f0:cc:52:f5:3d:1a:33:52:aa:ca: c5:17:b7:f4:3f:97:ab:cf:94:09:1c:af:d9:eb:af:16:ee:59: 7b:1d:a7:0d:0a:cd:ad:73:b4:fc:02:41:85:fb:ee:a9:54:ca: 47:a8:27:77:95:66:73:79:cd:14:01:20:28:f2:5d:f7:42:9f: 73:ae:6b:20:8f:90:ac:9d:aa:5b:b7:60:5e:8b:1d:e5:d3:50: e4:49:9b:32:da:20:60:b8:ce:df:b5:98:e1:d7:5b:1d:b6:bb: 04:cd:93:65:4a:1e:79:43:b2:1d:9c:34:9c:f4:9c:c4:c4:bf: 95:55:24:c9:2e:7b:e9:a6:62:2a:ef:d1:8a:9b:9c:3d:d0:26: ed:7f:9b:87:6c:82:ed:73:1e:55:49:55:6a:c3:42:7e:c8:25: 90:83:f2:b1:b1:cf:4e:a3:85:f1:8e:0c:2b:9c:4b:a5:86:8a: dd:f4:30:3e:be:d1:9b:0c:c9:95:0b:a6:71:01:b6:3e:9b:ae: 71:6d:23:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswfxhryALWYwWbOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODM2ZjZmMWItNGExZS00OTYyLWJiZTYtOWQzN2VjNGM4NmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndpMNNE/IIMuzVQecUa8pNDEoZ3ANyOIukja mw7fFTLkQH+hXbp2XVNzw2N3s/s8UXJpwh2P7+i7Tj7cusUC0FuFdPtmNXbWzDfK GeKFJUk+tVp/iDHG8joM6zzy6jdoxhG6O7bL1eMO6eFpdXN1CHeoBqEcIfTGH2xg Pqkj9ZYBoeQLZ3Zny+/rWA3ZUb3sU8Uur+ckQkZP/uRrahQ92eRi6puHZNMz1n4C NgExQrii3VXi6XKK7ZlljfHGLzDhAcDaXT4pu+9rgE9qTJzysrWHVe99d9sCkK5o vDRJNeB/i33kMuB9ljGNZNTYQm0LNS4dCYMYMyqDvAq5o6gDOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIJoStsi9V+vRTgk6c44LjCMiftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTk4YTRlMDAtYjAzMy0z YzFhLTg2Y2QtMjE0NGFkZDcyMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaJtRXOmDgYnKdgITtKQXvd1zUNLjYhrbbJmpDrlTGxKU1VoyMcdWWy gW5CQdwvdwBNSG+s9QGQvxJ3Aqrl8MxS9T0aM1KqysUXt/Q/l6vPlAkcr9nrrxbu WXsdpw0Kza1ztPwCQYX77qlUykeoJ3eVZnN5zRQBICjyXfdCn3OuayCPkKydqlu3 YF6LHeXTUORJmzLaIGC4zt+1mOHXWx22uwTNk2VKHnlDsh2cNJz0nMTEv5VVJMku e+mmYirv0YqbnD3QJu1/m4dsgu1zHlVJVWrDQn7IJZCD8rGxz06jhfGODCucS6WG it30MD6+0ZsMyZULpnEBtj6brnFtIww= -----END CERTIFICATE-----Generated at Wed Nov 5 06:28:52 2025 by rpki-client