$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af0326c-ad54-3a93-8aeb-727f48dc7e09.roa File: 1af0326c-ad54-3a93-8aeb-727f48dc7e09.roa (raw, json) Hash identifier: ISMkoi4b53hdyEc1KkQvxX0/CNZTWhI582iS5zkXGBw= Subject key identifier: 6D:36:58:92:30:22:C7:68:D4:BA:1B:00:7F:92:BC:D5:BC:59:BB:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4CBFC22BFEE8E6E3A7C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af0326c-ad54-3a93-8aeb-727f48dc7e09.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.157.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:cb:fc:22:bf:ee:8e:6e:3a:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9a19789d-8332-4e85-b5d2-0a12d5a498c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:0f:d0:b3:67:7d:cb:ee:3b:64:7c:6b:24: 4a:b5:22:c6:0e:b6:e7:19:27:37:97:20:a7:56:4a: 27:99:9b:9e:98:0f:f4:c4:62:55:b2:43:90:e1:ac: 48:0d:65:7a:51:77:f7:84:3f:ae:01:29:bb:88:7f: 01:c6:20:5e:40:9f:9d:dd:4d:12:a9:b0:09:a5:f5: 62:63:7e:30:6a:7b:d5:49:f0:67:40:e2:8f:38:aa: e5:17:12:51:e4:cc:25:3c:fc:ad:ea:68:f1:19:c4: 36:cd:d9:ee:9b:b7:5a:52:16:81:db:36:38:e9:bb: 65:2c:03:db:ae:09:c5:74:9d:c0:43:ae:fe:be:67: 74:36:47:4c:f7:1b:9c:ce:0a:00:a4:d3:5e:d9:f4: 1e:28:7b:2a:ba:0e:b2:96:a0:e4:23:c2:a1:f5:c2: bd:ec:34:73:a1:d2:03:09:89:91:63:f7:12:4b:d0: ad:bc:35:c8:38:90:23:42:13:96:00:c2:57:70:cf: 27:89:7c:9f:d8:37:e9:ce:35:04:a8:c3:36:f5:71: 94:28:5b:ed:d3:42:25:80:fc:57:91:ed:a0:2d:5d: 50:93:8a:71:0f:ed:ed:e1:f6:2e:e6:74:45:de:3c: 2e:a9:05:95:fc:91:ff:f9:78:3e:24:69:81:59:6b: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:36:58:92:30:22:C7:68:D4:BA:1B:00:7F:92:BC:D5:BC:59:BB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af0326c-ad54-3a93-8aeb-727f48dc7e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b0:e1:e0:d2:79:4c:f2:64:0e:81:7f:77:3f:07:ab:f1:06: 4f:b0:6d:d4:ae:f7:24:e9:01:10:d6:a9:c6:59:20:1d:46:b2: 09:69:dc:3e:4f:07:9e:7f:c9:49:e9:c6:ef:17:5f:e1:02:2d: 62:41:3b:36:30:65:9e:21:a7:ac:c0:dc:c6:cf:3d:aa:10:76: ac:4a:dc:d2:4c:fa:d5:24:66:dd:a8:c9:c3:0d:7e:db:42:8b: 07:3b:2e:95:b5:d4:b0:8f:6d:0e:d9:5c:0c:b7:a9:17:ec:9d: 52:dd:92:67:dc:f8:f1:48:d6:a0:83:47:ab:64:28:a9:77:93: de:80:45:60:05:14:99:8a:d4:40:91:61:dd:be:82:69:c4:64: d1:3d:7e:86:be:1e:11:98:95:55:8d:ce:e4:50:13:a1:05:c9: 56:21:3f:38:b5:62:84:ff:49:27:fe:b9:68:a2:36:a4:e4:be: 48:8f:aa:67:00:02:05:54:ea:5a:31:a5:5d:48:42:c1:ff:49: ce:a2:15:60:f7:87:b5:db:64:b2:61:15:8e:85:9d:25:fd:c2: 71:44:c0:df:c8:21:8e:ee:d2:b3:b3:fb:52:91:3a:9a:2d:db: 88:3e:5f:6e:9c:fd:72:fa:4a:62:4e:30:2c:94:fa:84:0e:f4: ab:8b:d3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxMv8Ir/ujm46fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWExOTc4OWQtODMzMi00ZTg1LWI1ZDItMGExMmQ1YTQ5OGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso0P0LNnfcvuO2R8ayRKtSLGDrbnGSc3lyCn VkonmZuemA/0xGJVskOQ4axIDWV6UXf3hD+uASm7iH8BxiBeQJ+d3U0SqbAJpfVi Y34wanvVSfBnQOKPOKrlFxJR5MwlPPyt6mjxGcQ2zdnum7daUhaB2zY46btlLAPb rgnFdJ3AQ67+vmd0NkdM9xuczgoApNNe2fQeKHsqug6ylqDkI8Kh9cK97DRzodID CYmRY/cSS9CtvDXIOJAjQhOWAMJXcM8niXyf2DfpzjUEqMM29XGUKFvt00IlgPxX ke2gLV1Qk4pxD+3t4fYu5nRF3jwuqQWV/JH/+Xg+JGmBWWs9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG02WJIwIsdo1LobAH+SvNW8Wbs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFmMDMyNmMtYWQ1NC0z YTkzLThhZWItNzI3ZjQ4ZGM3ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJ1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASw4eDSeUzyZA6Bf3c/B6vxBk+wbdSu9yTpARDWqcZZIB1Gsglp3D5P B55/yUnpxu8XX+ECLWJBOzYwZZ4hp6zA3MbPPaoQdqxK3NJM+tUkZt2oycMNfttC iwc7LpW11LCPbQ7ZXAy3qRfsnVLdkmfc+PFI1qCDR6tkKKl3k96ARWAFFJmK1ECR Yd2+gmnEZNE9foa+HhGYlVWNzuRQE6EFyVYhPzi1YoT/SSf+uWiiNqTkvkiPqmcA AgVU6loxpV1IQsH/Sc6iFWD3h7XbZLJhFY6FnSX9wnFEwN/IIY7u0rOz+1KROpot 24g+X26c/XL6SmJOMCyU+oQO9KuL09A= -----END CERTIFICATE-----Generated at Sun Aug 24 05:42:16 2025 by rpki-client