$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf486c3-5c88-38d3-9f12-9b31f3e8e55a.roa File: faf486c3-5c88-38d3-9f12-9b31f3e8e55a.roa (raw, json) Hash identifier: cJx9euyV1iueJ4OetE0QvGhBunD3bSBp2UeLpf0iDXI= Subject key identifier: 72:7D:DF:9A:D8:4F:D6:48:8A:98:6B:FF:DA:2C:D6:BB:F4:CF:B4:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE821E4D5F0A6BE7247B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf486c3-5c88-38d3-9f12-9b31f3e8e55a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 76.112.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:82:1e:4d:5f:0a:6b:e7:24:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=ad41b55f-b87a-4eb7-bf34-6f98a488c570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:39:52:c5:58:5e:b0:5b:22:23:e0:2b:4f: f8:0e:f4:a4:14:21:1e:05:03:fd:c5:f6:f4:ca:0f: c1:9b:94:ac:95:18:9f:9a:25:d8:24:de:be:33:d7: ce:0e:78:22:79:51:7e:e8:e2:f7:6c:d9:88:df:58: cf:77:71:26:13:13:78:12:b9:59:2b:3a:28:2a:c4: 36:11:50:ba:42:e3:75:89:ac:a4:ba:e4:20:fd:97: 80:2f:42:46:41:21:0b:06:d0:4b:7a:36:95:04:fe: bd:c3:04:ff:3e:d0:34:3b:e4:8d:17:96:13:de:06: c6:8f:0d:8c:9e:bd:81:c2:3a:53:90:8d:1b:b0:f1: 4d:e1:a5:ea:c8:15:7c:a8:81:dd:04:33:b6:db:d1: 41:80:32:25:9e:92:94:69:b5:ee:51:85:b8:77:c3: 0e:41:35:66:9b:13:58:18:dc:9e:ae:7a:aa:3c:6d: 65:67:0f:49:3c:02:63:58:50:d5:44:41:eb:0f:a8: 05:cc:32:78:56:c6:40:48:c6:ef:67:a6:18:c7:03: 66:2f:c2:33:16:e1:81:4f:1d:c4:55:53:25:af:7a: 2d:1d:ef:e6:a1:99:a2:75:6a:1a:b1:23:c6:45:80: cb:79:ed:89:5d:6a:74:9b:a4:4d:89:ed:8a:66:2a: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7D:DF:9A:D8:4F:D6:48:8A:98:6B:FF:DA:2C:D6:BB:F4:CF:B4:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf486c3-5c88-38d3-9f12-9b31f3e8e55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.112.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e1:a0:40:cf:2f:4e:44:b5:0a:1f:6f:20:5e:4e:17:46:16: 8e:ac:21:08:26:98:d7:41:d3:94:57:d0:d3:67:4c:8e:a8:1d: e7:bd:f7:99:a0:9c:33:d7:4d:1a:63:a1:ed:63:82:9c:34:d4: a0:95:ca:67:4c:f2:c7:7f:6f:4e:1f:69:31:4d:dd:d1:1a:04: 8d:30:f5:83:90:5f:97:57:18:31:1e:25:e1:b6:ee:2c:eb:07: 36:90:21:89:78:b3:53:56:fe:fe:ea:98:5e:41:49:a1:bd:3f: 13:62:4e:97:82:78:79:27:7f:22:6e:5e:9e:e9:91:57:d3:dc: 0c:15:9f:4c:59:75:60:b0:26:99:d1:7e:ff:d6:e8:61:34:9e: 67:c1:32:c4:35:d1:91:b7:f6:82:3e:f9:80:da:9d:c4:0f:20: 5c:ae:89:ae:09:41:1c:84:f6:70:64:db:b6:3a:f4:2a:62:9d: b6:92:22:18:30:c1:7f:01:ed:b2:c4:ee:b2:3e:e1:7f:5e:48: 86:e1:4b:83:79:70:8d:a2:d3:b0:5a:c1:79:a6:fe:56:b2:92: 73:15:0d:20:2e:e8:f7:9a:d5:ce:ac:3f:e8:b6:70:5b:8f:2f: b3:4e:23:6c:fe:59:8f:41:97:27:44:13:2b:58:32:1d:bb:f6: 8e:a9:bd:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07oIeTV8Ka+cke0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YWQ0MWI1NWYtYjg3YS00ZWI3LWJmMzQtNmY5OGE0ODhjNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswg5UsVYXrBbIiPgK0/4DvSkFCEeBQP9xfb0 yg/Bm5SslRifmiXYJN6+M9fODngieVF+6OL3bNmI31jPd3EmExN4ErlZKzooKsQ2 EVC6QuN1iaykuuQg/ZeAL0JGQSELBtBLejaVBP69wwT/PtA0O+SNF5YT3gbGjw2M nr2BwjpTkI0bsPFN4aXqyBV8qIHdBDO229FBgDIlnpKUabXuUYW4d8MOQTVmmxNY GNyernqqPG1lZw9JPAJjWFDVREHrD6gFzDJ4VsZASMbvZ6YYxwNmL8IzFuGBTx3E VVMlr3otHe/moZmidWoasSPGRYDLee2JXWp0m6RNie2KZirG3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ935rYT9ZIiphr/9os1rv0z7TOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFmNDg2YzMtNWM4OC0z OGQzLTlmMTItOWIzMWYzZThlNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHDWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7hoEDPL05EtQofbyBeThdGFo6sIQgmmNdB05RX0NNnTI6oHee995mg nDPXTRpjoe1jgpw01KCVymdM8sd/b04faTFN3dEaBI0w9YOQX5dXGDEeJeG27izr BzaQIYl4s1NW/v7qmF5BSaG9PxNiTpeCeHknfyJuXp7pkVfT3AwVn0xZdWCwJpnR fv/W6GE0nmfBMsQ10ZG39oI++YDancQPIFyuia4JQRyE9nBk27Y69CpinbaSIhgw wX8B7bLE7rI+4X9eSIbhS4N5cI2i07BawXmm/layknMVDSAu6Pea1c6sP+i2cFuP L7NOI2z+WY9BlydEEytYMh279o6pvTA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:53:32 2025 by rpki-client