$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5ef4e8-f344-30e1-a2c4-29f7df70207b.roa File: cf5ef4e8-f344-30e1-a2c4-29f7df70207b.roa (raw, json) Hash identifier: WdJaxtl/Sib5p3N2pa55Hl7F16keiFKWUongb+wY5BA= Subject key identifier: 41:9D:89:C5:E3:75:DE:3D:8C:55:4D:61:9F:A4:16:89:14:FE:40:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB22114AF3237A8B223687EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5ef4e8-f344-30e1-a2c4-29f7df70207b.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 22258 IP address blocks: 76.107.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:14:af:32:37:a8:b2:23:68:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=849f0365-f223-4eaf-b049-acfe586cb3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:9f:31:be:53:8d:5e:2e:c7:0c:db:38:f8: 53:7d:6c:39:90:a0:82:d8:2c:8e:0d:ae:c0:a5:6a: 79:49:cb:9d:ba:75:ed:25:0e:9a:52:90:32:89:ec: 9e:b4:75:8f:fe:34:ea:21:46:08:f5:58:43:d0:cc: de:0c:cc:e8:17:ce:3d:e4:e7:31:f7:30:19:51:ce: ca:9a:1d:9b:7e:47:49:35:7f:85:08:2c:fc:58:c4: f4:42:cb:86:09:c0:63:8e:9c:1e:f4:42:23:a8:ec: 98:9b:4a:96:4b:5e:8d:eb:dd:ea:ba:99:d3:04:53: e2:19:c0:85:0a:76:b6:88:a7:82:72:12:52:cf:05: 69:6e:00:ba:c2:6a:73:1a:18:9f:8e:3f:32:3d:1c: 36:35:17:f5:14:f9:a7:da:1a:51:fa:17:fe:d3:10: 33:14:95:f5:f0:a2:da:66:01:6d:83:50:d7:76:65: 1e:1c:ee:cf:f5:23:b6:32:4a:c5:30:63:8e:c4:4d: aa:8c:75:04:31:0e:dc:67:fc:29:5c:1d:e9:aa:b6: da:b2:d3:4c:a6:fa:3f:51:fd:13:24:13:b6:45:c1: cc:88:4d:cd:23:83:4c:3d:f5:47:69:ef:07:47:ac: fd:43:90:77:38:c3:fd:29:c9:35:d4:8d:0c:44:da: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:89:C5:E3:75:DE:3D:8C:55:4D:61:9F:A4:16:89:14:FE:40:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5ef4e8-f344-30e1-a2c4-29f7df70207b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.107.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:83:0a:5c:1b:cd:7a:73:7e:df:bc:35:76:d7:b0:8e:09:3a: 35:29:41:a7:20:dc:bf:06:43:05:52:fc:5f:f6:fc:bf:66:7b: f8:f3:fe:a3:d7:0f:1b:3e:de:3f:be:42:80:3d:a4:98:86:5d: 48:87:f1:5d:f5:ca:1e:ba:fb:65:e9:12:e8:a3:4e:14:91:4e: 68:29:df:af:c5:fc:67:e0:8f:3a:af:6e:66:ad:0f:13:41:6a: 72:e1:ce:2c:c7:d8:51:9f:86:c8:e2:0d:34:b8:76:64:71:cd: ae:e4:1a:9b:06:2c:64:0d:ed:18:a4:b0:28:0c:69:bd:34:99: c0:7e:89:98:31:51:d9:98:c9:4c:3c:4e:2a:0b:54:8e:f5:5d: 46:e4:d7:9d:1a:a5:bb:b7:2c:5b:f7:88:a2:88:4f:20:7f:63: f9:b5:a7:94:c7:46:5b:61:b8:8c:67:23:26:26:c9:62:83:14: 7f:6d:eb:b6:6b:2f:52:24:42:25:c9:25:40:c2:17:1d:6e:3c: 73:7e:90:a3:87:27:83:d1:c9:d9:15:07:79:e8:03:1c:34:ba: 41:7a:e3:85:2d:3d:56:1d:3c:9b:7b:dc:3e:8e:89:da:7e:db: 45:3c:33:56:87:d2:7e:13:57:93:d2:18:5f:fa:6a:11:97:de: 16:09:aa:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIRSvMjeosiNofsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODQ5ZjAzNjUtZjIyMy00ZWFmLWIwNDktYWNmZTU4NmNiM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBafMb5TjV4uxwzbOPhTfWw5kKCC2CyODa7A pWp5ScudunXtJQ6aUpAyieyetHWP/jTqIUYI9VhD0MzeDMzoF8495Ocx9zAZUc7K mh2bfkdJNX+FCCz8WMT0QsuGCcBjjpwe9EIjqOyYm0qWS16N693qupnTBFPiGcCF Cna2iKeCchJSzwVpbgC6wmpzGhifjj8yPRw2NRf1FPmn2hpR+hf+0xAzFJX18KLa ZgFtg1DXdmUeHO7P9SO2MkrFMGOOxE2qjHUEMQ7cZ/wpXB3pqrbastNMpvo/Uf0T JBO2RcHMiE3NI4NMPfVHae8HR6z9Q5B3OMP9Kck11I0MRNq7rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGdicXjdd49jFVNYZ+kFokU/kBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y1ZWY0ZTgtZjM0NC0z MGUxLWEyYzQtMjlmN2RmNzAyMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATGuPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeDClwbzXpzft+8NXbXsI4JOjUpQacg3L8GQwVS/F/2/L9me/jz/qPX Dxs+3j++QoA9pJiGXUiH8V31yh66+2XpEuijThSRTmgp36/F/GfgjzqvbmatDxNB anLhzizH2FGfhsjiDTS4dmRxza7kGpsGLGQN7RiksCgMab00mcB+iZgxUdmYyUw8 TioLVI71XUbk150apbu3LFv3iKKITyB/Y/m1p5THRlthuIxnIyYmyWKDFH9t67Zr L1IkQiXJJUDCFx1uPHN+kKOHJ4PRydkVB3noAxw0ukF644UtPVYdPJt73D6Oidp+ 20U8M1aH0n4TV5PSGF/6ahGX3hYJqsQ= -----END CERTIFICATE-----Generated at Wed Aug 6 18:36:00 2025 by rpki-client