$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b81b1ca9-e0e4-31eb-8d87-3b31fb3d4101.roa File: b81b1ca9-e0e4-31eb-8d87-3b31fb3d4101.roa (raw, json) Hash identifier: t/Ca+MOkJCbPSzU73GVdbSxI7ukiIwBQoeyKb/FoxOw= Subject key identifier: 37:A0:0C:8E:90:3C:8F:C6:FC:9C:00:2D:8D:16:84:62:F8:CB:33:59 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB22118753EEDA37E29C05E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b81b1ca9-e0e4-31eb-8d87-3b31fb3d4101.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 22258 IP address blocks: 76.123.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:18:75:3e:ed:a3:7e:29:c0:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=108459f9-06eb-4b56-9176-541a2d459105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:e5:d9:20:82:fc:15:47:29:ef:0b:55:74: 2b:82:36:1a:1d:0c:f3:59:78:4c:22:d9:c7:e0:e9: 31:5b:c8:69:98:d1:6e:6a:90:0e:d1:23:5a:85:fb: 0c:10:ab:9a:b0:3d:3c:69:48:68:75:d6:a6:56:15: ea:6a:57:83:be:c5:eb:ed:df:d7:12:42:9e:22:37: 61:03:67:c9:15:1f:0c:20:86:fc:f8:dc:bc:db:36: a9:ba:4b:18:01:b5:2e:2e:9e:0a:a6:7d:f0:4e:85: 13:1c:ba:04:a8:4c:55:9a:4b:21:7e:3a:91:95:98: 65:50:67:f6:39:93:9a:2a:1c:e3:5b:61:38:89:07: cf:09:97:03:55:29:ca:66:5f:0b:df:4f:87:9d:d4: 02:fd:39:e3:82:32:a1:9c:b0:26:81:2c:bb:59:62: 1e:7f:91:32:bb:55:0d:22:a1:37:88:c7:30:59:a6: 19:fa:cb:44:2f:fa:92:81:d2:f8:12:a0:6e:fb:8d: 78:9f:5d:4d:2c:de:f4:d1:b2:80:7e:2c:f1:fd:d7: 2a:81:86:2e:06:90:2a:80:e3:d1:7d:60:33:d6:b4: 76:3f:42:1b:e3:88:8b:bc:68:2d:c7:96:88:92:64: be:db:c6:95:44:1e:10:89:33:b2:3f:f0:7c:f8:56: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A0:0C:8E:90:3C:8F:C6:FC:9C:00:2D:8D:16:84:62:F8:CB:33:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b81b1ca9-e0e4-31eb-8d87-3b31fb3d4101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.123.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b4:15:32:ed:39:0c:c4:cb:22:9e:67:fe:6b:b7:0a:e8:59: 8c:23:99:8d:04:18:a8:08:63:02:c4:d6:b2:15:e6:a6:13:15: b8:0e:74:60:af:75:f8:b4:45:2f:71:50:63:db:56:83:21:eb: 57:63:f5:f7:0a:35:7a:38:27:d4:8e:15:55:11:a0:3f:d9:23: 0d:f4:f8:2b:03:47:93:db:d4:ff:d2:e6:28:0b:5f:5b:92:3d: a0:bc:56:7f:59:93:22:11:09:2f:1c:90:f8:69:35:76:e8:25: 99:7f:12:c4:67:45:8c:83:93:dc:e9:b4:30:4f:ba:4b:8c:18: cc:f2:61:b0:c0:ae:ba:4e:e2:37:1e:0d:40:c7:31:1e:72:bd: be:5a:e3:36:02:44:e8:0c:02:80:02:48:77:42:51:03:5b:f4: 5d:0a:f9:54:6f:49:48:16:2f:c0:cf:55:29:d2:25:b0:96:18: d7:01:ad:12:e6:6c:07:d9:a6:a5:50:fd:6b:37:ba:55:22:b1: ce:c1:19:89:d2:e3:08:5d:ae:26:f2:d5:af:8a:05:81:c1:e9: c1:06:36:01:a0:cc:e3:a9:b2:0b:43:aa:ef:6a:9c:c3:b0:df: a5:b1:72:0f:c7:e2:c7:4e:d7:42:18:5e:77:07:8c:0b:99:f2: d2:b5:a4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIRh1Pu2jfinAXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTA4NDU5ZjktMDZlYi00YjU2LTkxNzYtNTQxYTJkNDU5MTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVDl2SCC/BVHKe8LVXQrgjYaHQzzWXhMItnH 4OkxW8hpmNFuapAO0SNahfsMEKuasD08aUhoddamVhXqaleDvsXr7d/XEkKeIjdh A2fJFR8MIIb8+Ny82zapuksYAbUuLp4Kpn3wToUTHLoEqExVmkshfjqRlZhlUGf2 OZOaKhzjW2E4iQfPCZcDVSnKZl8L30+HndQC/TnjgjKhnLAmgSy7WWIef5Eyu1UN IqE3iMcwWaYZ+stEL/qSgdL4EqBu+414n11NLN700bKAfizx/dcqgYYuBpAqgOPR fWAz1rR2P0Ib44iLvGgtx5aIkmS+28aVRB4QiTOyP/B8+FZKOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDegDI6QPI/G/JwALY0WhGL4yzNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjgxYjFjYTktZTBlNC0z MWViLThkODctM2IzMWZiM2Q0MTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+0FTLtOQzEyyKeZ/5rtwroWYwjmY0EGKgIYwLE1rIV5qYTFbgOdGCv dfi0RS9xUGPbVoMh61dj9fcKNXo4J9SOFVURoD/ZIw30+CsDR5Pb1P/S5igLX1uS PaC8Vn9ZkyIRCS8ckPhpNXboJZl/EsRnRYyDk9zptDBPukuMGMzyYbDArrpO4jce DUDHMR5yvb5a4zYCROgMAoACSHdCUQNb9F0K+VRvSUgWL8DPVSnSJbCWGNcBrRLm bAfZpqVQ/Ws3ulUisc7BGYnS4whdriby1a+KBYHB6cEGNgGgzOOpsgtDqu9qnMOw 36Wxcg/H4sdO10IYXncHjAuZ8tK1pD8= -----END CERTIFICATE-----Generated at Wed Aug 6 19:26:55 2025 by rpki-client