$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2095b7e6-658c-33e7-8e0a-8b513e210762.roa File: 2095b7e6-658c-33e7-8e0a-8b513e210762.roa (raw, json) Hash identifier: slDGP9JjmxIyXswnEKtLi7h9gne5KjVBW/1zHIduEbI= Subject key identifier: 3A:CB:D0:B9:E7:98:80:47:A5:9E:E2:05:3F:A3:6D:53:22:F8:2D:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC16C388C84FCF99ADC4580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2095b7e6-658c-33e7-8e0a-8b513e210762.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 76.129.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:6c:38:8c:84:fc:f9:9a:dc:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=213e51fb-320c-44de-8f0a-35fbfa457002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a2:76:3a:dc:59:ba:a3:91:4f:63:d3:13:37: 75:46:be:6b:0a:d7:bc:88:f6:09:fe:71:c2:5b:33: 09:3a:4c:3d:c3:96:db:91:74:4a:c8:ec:6b:e2:17: c9:cb:b8:7f:5e:95:3e:3d:33:03:53:a4:9d:43:f3: 55:c5:99:90:f6:10:9f:90:d2:f3:a0:15:3a:b8:ac: 30:96:33:76:04:5c:e9:d4:3b:5c:0c:cd:fa:8a:0e: c5:0e:27:a8:91:fd:a9:f1:9b:d7:ba:b4:4b:e7:52: f1:ee:e2:bf:c7:33:98:b1:7f:95:58:73:84:8e:e0: 0a:22:3c:10:e1:d7:7c:c9:d6:7e:18:18:fa:8b:7e: b7:05:62:47:60:df:cd:71:77:17:8f:37:49:57:da: fc:8f:dd:57:e4:e7:e4:b1:da:e5:9c:43:f5:ec:33: 83:72:e1:9c:c9:07:b9:e0:39:d8:db:88:2a:e1:42: 07:eb:07:b3:be:eb:a8:bf:cf:78:99:b2:16:3b:6d: 55:f2:fa:ca:54:58:0a:a4:28:7d:aa:89:7d:7d:c2: 85:72:99:f1:b8:a9:f1:74:9c:63:76:c2:dc:e2:98: f6:8e:50:2d:d4:75:8a:c8:e2:8c:b6:6c:58:84:16: 45:89:81:36:3e:a7:51:94:6b:74:4c:0d:60:33:5d: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CB:D0:B9:E7:98:80:47:A5:9E:E2:05:3F:A3:6D:53:22:F8:2D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2095b7e6-658c-33e7-8e0a-8b513e210762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:d7:ab:7d:ba:5d:7c:d1:86:b4:eb:b0:ca:50:5c:fd:53:2b: 46:e4:41:97:fb:ea:de:9b:c1:e7:87:0b:7f:27:7b:26:f0:d7: 91:46:22:4c:a1:be:72:79:49:a3:ea:cd:da:50:07:26:92:6a: 27:f8:5c:a9:ec:b1:19:4d:e8:db:a4:2d:97:f5:60:44:e5:53: 07:73:8c:f8:84:8f:1d:a5:d8:4b:dd:d8:e3:fb:f0:72:9a:9d: c7:b9:fd:9d:b7:51:1f:57:9c:4f:32:b1:8f:20:4b:02:7e:23: a4:89:76:ed:ec:58:d3:59:c1:70:ed:f4:fd:29:2d:04:73:31: 16:95:32:0d:e7:46:8e:67:f5:6d:44:60:46:17:d3:44:93:3f: ac:bd:26:93:d6:e8:1c:c6:0c:1c:00:40:8b:91:72:dd:63:88: 2d:5c:e4:83:0e:5c:00:d1:c0:76:90:57:ac:7c:09:9b:32:cf: 19:2c:ed:1c:7a:19:48:cf:b6:15:f6:9c:a1:41:73:6a:f0:d0: 86:83:3f:e0:45:87:b6:4d:67:f0:da:43:af:a2:a6:24:10:7e: df:ec:42:6f:7a:ec:ee:2e:2e:5b:41:8e:75:41:fa:9b:1f:21: 3f:81:78:eb:de:b3:db:8f:e0:29:7b:67:15:59:27:bd:81:28: 62:71:99:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswWw4jIT8+ZrcRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjEzZTUxZmItMzIwYy00NGRlLThmMGEtMzVmYmZhNDU3MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6J2OtxZuqORT2PTEzd1Rr5rCte8iPYJ/nHC WzMJOkw9w5bbkXRKyOxr4hfJy7h/XpU+PTMDU6SdQ/NVxZmQ9hCfkNLzoBU6uKww ljN2BFzp1DtcDM36ig7FDieokf2p8ZvXurRL51Lx7uK/xzOYsX+VWHOEjuAKIjwQ 4dd8ydZ+GBj6i363BWJHYN/NcXcXjzdJV9r8j91X5OfksdrlnEP17DODcuGcyQe5 4DnY24gq4UIH6wezvuuov894mbIWO21V8vrKVFgKpCh9qol9fcKFcpnxuKnxdJxj dsLc4pj2jlAt1HWKyOKMtmxYhBZFiYE2PqdRlGt0TA1gM12eYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrL0LnnmIBHpZ7iBT+jbVMi+C0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjA5NWI3ZTYtNjU4Yy0z M2U3LThlMGEtOGI1MTNlMjEwNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTXq326XXzRhrTrsMpQXP1TK0bkQZf76t6bweeHC38neybw15FGIkyh vnJ5SaPqzdpQByaSaif4XKnssRlN6NukLZf1YETlUwdzjPiEjx2l2Evd2OP78HKa nce5/Z23UR9XnE8ysY8gSwJ+I6SJdu3sWNNZwXDt9P0pLQRzMRaVMg3nRo5n9W1E YEYX00STP6y9JpPW6BzGDBwAQIuRct1jiC1c5IMOXADRwHaQV6x8CZsyzxks7Rx6 GUjPthX2nKFBc2rw0IaDP+BFh7ZNZ/DaQ6+ipiQQft/sQm967O4uLltBjnVB+psf IT+BeOves9uP4Cl7ZxVZJ72BKGJxmSY= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:03 2025 by rpki-client