$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a738bf3a-928f-38d8-ae7a-0441930e692f.roa File: a738bf3a-928f-38d8-ae7a-0441930e692f.roa (raw, json) Hash identifier: mkXvBv67D5jExXkoyX0Ey+B9el3FbQ4rOSScJ9iShDg= Subject key identifier: F8:57:A8:5D:FE:2B:AB:2B:9C:75:BB:F0:20:8F:B9:76:C8:9E:CF:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB2211941135BEE40BF187380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a738bf3a-928f-38d8-ae7a-0441930e692f.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 22258 IP address blocks: 76.138.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:19:41:13:5b:ee:40:bf:18:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=1f7d52d9-0d3c-49ee-9a38-ca9c3b675379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:cc:71:48:56:5d:17:95:b8:52:d9:ae:c5: b6:41:4e:f3:ad:5e:d7:94:0f:cf:cc:0a:d2:c3:fc: 06:c4:6c:30:93:d0:12:0d:f6:0d:3f:c5:78:71:f1: 02:e2:f9:04:9a:c2:63:1f:28:00:3c:1c:3a:58:83: 94:39:81:7a:e6:93:a5:75:ec:a9:d0:d2:71:02:69: 81:3d:00:db:ff:e3:cf:3e:71:3c:9f:fd:97:20:f1: 0c:41:75:a6:38:8b:97:39:2c:f3:58:34:37:58:96: c4:41:ae:7e:78:ad:15:92:a4:fb:6e:ea:91:6b:2c: 8f:51:25:65:47:ab:07:8e:c1:c7:fa:93:2d:11:61: d5:fa:77:14:64:b3:c5:3b:32:81:6b:d8:2b:a4:16: 6f:c6:0f:d8:fc:88:bf:4c:d9:ff:63:95:c7:a7:98: 4d:fa:5c:57:b5:c5:b0:f7:75:d7:a6:10:51:5d:2b: 65:47:2d:dc:d8:39:20:b4:07:cc:d5:50:e9:4e:83: 5b:93:bb:a4:3b:9b:f7:be:c9:b4:e3:1f:cc:2e:f3: 5d:8b:b1:72:2e:4c:46:8c:f7:1a:13:97:d3:3b:35: db:60:01:07:f0:15:b3:aa:6c:a3:0b:1c:13:a0:da: 55:ea:1f:5c:52:00:df:82:9a:06:12:42:ca:33:ed: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:57:A8:5D:FE:2B:AB:2B:9C:75:BB:F0:20:8F:B9:76:C8:9E:CF:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a738bf3a-928f-38d8-ae7a-0441930e692f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ef:7c:82:a1:dc:1b:4d:f8:8a:6c:a1:ec:59:d0:bc:d4:53: d6:d8:24:f5:44:39:33:97:48:18:99:30:e4:af:d0:85:5e:86: 13:58:00:69:85:05:29:b9:d2:47:d0:ff:dc:d0:f6:6f:2e:66: 76:2f:85:1b:cc:25:c8:cf:e3:b7:23:61:85:5b:92:e2:b4:50: 8a:cd:dd:44:a4:e5:1f:49:73:fa:25:ab:c0:df:54:7b:36:47: f0:8f:c3:da:35:5a:6e:45:46:0c:55:b2:26:32:06:40:7a:be: 0d:5d:c1:bb:63:14:86:be:2f:01:cc:fd:af:12:6b:b4:a3:52: 77:cc:87:23:99:65:bf:7c:6e:b6:a5:ef:7b:b2:e5:aa:37:fb: 74:93:de:a1:49:a4:7c:c7:d3:0b:a1:4c:5a:79:e6:ee:ba:f4: 2c:65:c7:26:b6:ff:1c:72:30:91:f8:7e:96:91:8f:b8:04:bb: fa:bd:17:53:3b:a3:e1:26:df:f9:5c:37:64:e2:8b:0b:5e:3b: ca:eb:2f:08:39:d2:69:16:5b:10:e4:b9:76:49:52:d1:b8:08: ea:fb:84:89:34:bb:52:56:1f:35:00:e1:c1:8b:9f:87:b6:de: c5:6b:4e:49:83:63:a5:78:1a:1e:30:6d:2a:f5:ec:e1:ba:16: ab:6b:a8:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIRlBE1vuQL8Yc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWY3ZDUyZDktMGQzYy00OWVlLTlhMzgtY2E5YzNiNjc1Mzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhrMcUhWXReVuFLZrsW2QU7zrV7XlA/PzArS w/wGxGwwk9ASDfYNP8V4cfEC4vkEmsJjHygAPBw6WIOUOYF65pOldeyp0NJxAmmB PQDb/+PPPnE8n/2XIPEMQXWmOIuXOSzzWDQ3WJbEQa5+eK0VkqT7buqRayyPUSVl R6sHjsHH+pMtEWHV+ncUZLPFOzKBa9grpBZvxg/Y/Ii/TNn/Y5XHp5hN+lxXtcWw 93XXphBRXStlRy3c2DkgtAfM1VDpToNbk7ukO5v3vsm04x/MLvNdi7FyLkxGjPca E5fTOzXbYAEH8BWzqmyjCxwToNpV6h9cUgDfgpoGEkLKM+3pMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhXqF3+K6srnHW78CCPuXbIns/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTczOGJmM2EtOTI4Zi0z OGQ4LWFlN2EtMDQ0MTkzMGU2OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHvfIKh3BtN+IpsoexZ0LzUU9bYJPVEOTOXSBiZMOSv0IVehhNYAGmF BSm50kfQ/9zQ9m8uZnYvhRvMJcjP47cjYYVbkuK0UIrN3USk5R9Jc/olq8DfVHs2 R/CPw9o1Wm5FRgxVsiYyBkB6vg1dwbtjFIa+LwHM/a8Sa7SjUnfMhyOZZb98bral 73uy5ao3+3ST3qFJpHzH0wuhTFp55u669Cxlxya2/xxyMJH4fpaRj7gEu/q9F1M7 o+Em3/lcN2TiiwteO8rrLwg50mkWWxDkuXZJUtG4COr7hIk0u1JWHzUA4cGLn4e2 3sVrTkmDY6V4Gh4wbSr17OG6FqtrqBQ= -----END CERTIFICATE-----Generated at Wed Aug 6 19:23:47 2025 by rpki-client