$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2275c972-8b47-395b-8555-df84094fe3f8.roa File: 2275c972-8b47-395b-8555-df84094fe3f8.roa (raw, json) Hash identifier: Tk3nB8E90AAmzsJEjQSpKU3ER7d4pJfhT+P7zqmSsVU= Subject key identifier: 4B:FC:6B:4D:44:EA:D7:F9:C7:0A:43:DA:BE:BC:3D:C8:8A:B2:9D:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4CA8727706B4E1F166F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2275c972-8b47-395b-8555-df84094fe3f8.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.157.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:ca:87:27:70:6b:4e:1f:16:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8caa031c-c5fd-40b1-8af9-5cc83b61d253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:f9:27:54:c6:34:8e:78:2d:8a:c5:21:6d: 3f:4b:b7:b0:14:8c:80:56:8f:c3:5b:f6:f6:03:aa: c2:47:2c:29:bb:6b:10:48:9f:48:9b:94:32:ed:39: 44:06:2b:a8:10:8a:2e:aa:c4:26:ba:62:05:f2:86: b7:98:3f:21:2d:c2:77:bc:df:5f:84:d0:13:26:cd: b7:70:88:a8:49:18:ef:fc:c5:e2:ec:39:fa:7a:02: 68:78:4a:5e:d0:ae:bf:71:4f:cf:7e:70:ea:df:f7: 50:e3:ed:ab:94:fb:b4:fe:9d:6a:fa:08:17:07:e9: ef:ed:22:11:ff:f6:93:dd:ea:17:3b:4f:c3:29:50: fa:fe:a7:09:1f:06:3a:16:20:e4:2d:35:63:70:77: d2:5e:c3:9a:aa:b0:6f:a6:dd:bd:5d:72:7c:4a:de: c5:65:b7:8b:0c:e9:5b:3b:cb:37:8a:57:c8:84:e7: 98:2e:e3:99:ce:4a:8e:7c:06:37:d0:a1:b8:ab:57: b8:48:6e:11:56:ee:66:dd:d6:31:07:a5:c8:e3:d3: b0:9a:20:a4:c2:11:9b:17:05:28:0b:e6:f7:ee:98: de:cc:05:60:4d:2c:cd:20:d8:1e:f1:be:69:d8:89: e5:9f:79:05:de:1e:1e:0c:bc:28:ad:bf:67:3d:c7: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FC:6B:4D:44:EA:D7:F9:C7:0A:43:DA:BE:BC:3D:C8:8A:B2:9D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2275c972-8b47-395b-8555-df84094fe3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:63:1e:d1:1b:d0:c4:d3:8f:51:96:16:4f:ed:f4:21:9c:6d: 28:fa:05:7a:0e:e0:20:21:f1:50:72:41:a4:e1:90:27:21:15: 00:f1:5c:7c:f3:36:06:e1:5d:39:83:31:50:89:19:6d:be:b9: da:d0:67:4f:30:98:6c:be:8f:b4:64:4e:b4:9f:76:0d:9c:bf: 91:ec:07:7b:61:ca:34:f5:4c:47:56:b6:a1:9c:5a:81:e7:bb: 49:f7:27:81:63:71:04:49:2b:71:55:de:3c:af:20:20:2d:8c: ed:f6:c2:e4:99:78:7b:95:de:3b:96:02:f9:8c:09:30:86:9f: e4:fb:88:7d:83:bc:c3:50:70:da:bf:f4:b4:7b:0a:9a:1b:9c: ec:2e:b7:cb:16:f7:32:81:d4:4d:50:25:5e:eb:68:50:a5:ed: 81:25:c3:58:ab:2b:a5:61:31:4a:07:a4:5a:e4:9e:aa:1e:4b: a6:e5:e6:14:02:96:05:d0:15:6f:9c:f1:ed:c3:3a:fc:13:5c: 94:ea:62:71:f0:48:31:6d:5c:31:5c:6b:0a:6b:9e:7a:06:e1: 40:b2:d8:14:cb:b5:eb:0f:2a:22:bc:da:44:8f:f1:82:2a:51: f0:e6:e5:a0:5e:95:2e:57:4d:c1:a1:23:f3:81:f6:0b:82:c9: 43:bb:10:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxMqHJ3BrTh8WbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGNhYTAzMWMtYzVmZC00MGIxLThhZjktNWNjODNiNjFkMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+j5J1TGNI54LYrFIW0/S7ewFIyAVo/DW/b2 A6rCRywpu2sQSJ9Im5Qy7TlEBiuoEIouqsQmumIF8oa3mD8hLcJ3vN9fhNATJs23 cIioSRjv/MXi7Dn6egJoeEpe0K6/cU/PfnDq3/dQ4+2rlPu0/p1q+ggXB+nv7SIR //aT3eoXO0/DKVD6/qcJHwY6FiDkLTVjcHfSXsOaqrBvpt29XXJ8St7FZbeLDOlb O8s3ilfIhOeYLuOZzkqOfAY30KG4q1e4SG4RVu5m3dYxB6XI49OwmiCkwhGbFwUo C+b37pjezAVgTSzNINge8b5p2Inln3kF3h4eDLworb9nPcdkLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv8a01E6tf5xwpD2r68PciKsp27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI3NWM5NzItOGI0Ny0z OTViLTg1NTUtZGY4NDA5NGZlM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJ2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVjHtEb0MTTj1GWFk/t9CGcbSj6BXoO4CAh8VByQaThkCchFQDxXHzz NgbhXTmDMVCJGW2+udrQZ08wmGy+j7RkTrSfdg2cv5HsB3thyjT1TEdWtqGcWoHn u0n3J4FjcQRJK3FV3jyvICAtjO32wuSZeHuV3juWAvmMCTCGn+T7iH2DvMNQcNq/ 9LR7CpobnOwut8sW9zKB1E1QJV7raFCl7YElw1irK6VhMUoHpFrknqoeS6bl5hQC lgXQFW+c8e3DOvwTXJTqYnHwSDFtXDFcawprnnoG4UCy2BTLtesPKiK82kSP8YIq UfDm5aBelS5XTcGhI/OB9guCyUO7EMA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:40:24 2025 by rpki-client