$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2704268f-5bbf-33c5-b520-e134be4fd5f1.roa File: 2704268f-5bbf-33c5-b520-e134be4fd5f1.roa (raw, json) Hash identifier: nf98cxQHbmCsOEwxnIHx8apAnNBHG4tykDSbUJIivdg= Subject key identifier: FC:D2:21:4D:7C:D1:82:68:D9:16:0E:82:75:48:BF:3B:22:CD:7E:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC565B08AE2D28F9BFB0480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2704268f-5bbf-33c5-b520-e134be4fd5f1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.21.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:65:b0:8a:e2:d2:8f:9b:fb:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b17e8b32-f9f0-4d10-81a9-3a2a0aec4afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9e:8d:e6:b9:1e:f7:f0:27:7f:9b:d9:11:49: ef:7b:90:11:62:f9:4f:bf:67:2f:c1:a0:81:56:1c: c2:25:51:e6:29:33:23:cd:0a:a1:a6:73:37:8d:bb: c5:a7:3d:dc:d7:93:00:ed:59:02:e1:d1:5f:45:d0: cf:bc:a7:cf:ec:a0:ed:b3:ff:8d:4b:00:27:1d:45: b1:a0:e5:97:17:90:17:43:d0:98:86:20:e5:d9:f3: 2f:2e:82:b2:c4:85:60:81:b9:3d:c3:76:25:71:d2: e9:76:60:b6:fe:21:9d:bf:f1:da:36:4c:67:01:9f: 31:f3:22:33:71:f2:a8:81:75:b1:8e:72:66:8d:98: 35:af:32:46:36:c2:7d:fa:fd:c5:76:bf:60:7f:5d: 9f:7a:ec:d2:50:24:2d:26:1d:76:84:af:89:99:b1: 0c:ca:85:29:9b:5f:df:a4:06:fd:50:75:62:68:43: 17:03:e1:24:36:cb:17:00:3b:d9:93:81:7a:4c:1b: 77:1c:04:c6:bf:3e:97:19:fa:8c:ad:2f:fd:77:96: d7:24:80:db:6d:44:49:32:4e:01:63:df:e4:63:77: fb:15:b6:9e:45:4e:be:cf:c7:75:93:57:59:f2:8e: b1:d8:c3:da:9e:71:59:0a:46:4e:5a:97:bd:f3:31: 53:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D2:21:4D:7C:D1:82:68:D9:16:0E:82:75:48:BF:3B:22:CD:7E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2704268f-5bbf-33c5-b520-e134be4fd5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.21.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ba:5e:26:62:cd:e4:76:0a:69:ea:bc:9e:40:b6:98:29:42: 63:cc:9e:91:45:c2:1c:4c:c0:23:93:05:c7:f4:32:67:21:f1: 84:d0:b9:20:1c:d7:db:56:77:43:d7:c9:ae:73:08:45:86:66: 0f:71:84:84:58:99:0b:71:c0:dc:46:4f:f0:a2:be:41:5c:c0: 13:94:05:2e:7c:e4:02:3e:92:7f:03:20:ce:03:cc:3a:7f:ab: d1:55:1c:ec:0f:0a:7f:7e:0e:02:ab:6e:f1:ed:9a:38:d3:cc: 18:6b:8e:af:43:9e:6a:66:40:ef:e9:ab:9f:77:24:07:86:09: d5:a9:81:9b:2a:9e:65:c7:36:fc:60:c5:06:7b:cf:f9:38:8e: 6d:d2:a3:d9:56:f6:25:f5:50:54:b8:d1:a7:2e:af:65:7a:6e: cf:88:b8:ac:29:dc:1f:66:12:05:ac:5c:0b:ef:34:8a:57:a5: aa:38:d5:e8:24:f3:a6:5c:b4:ed:46:76:e5:07:63:2e:dc:a5: 9e:a8:f2:a8:de:30:56:a7:16:8c:1b:b7:7e:51:5d:0d:c8:11: f6:27:9d:e6:5d:7c:56:52:7b:08:02:2c:47:24:c1:06:60:8c: 84:de:9c:6a:43:42:0d:f0:ed:f3:3b:21:7a:1b:05:78:eb:19: ca:0b:24:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWWwiuLSj5v7BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjE3ZThiMzItZjlmMC00ZDEwLTgxYTktM2EyYTBhZWM0YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp6N5rke9/Anf5vZEUnve5ARYvlPv2cvwaCB VhzCJVHmKTMjzQqhpnM3jbvFpz3c15MA7VkC4dFfRdDPvKfP7KDts/+NSwAnHUWx oOWXF5AXQ9CYhiDl2fMvLoKyxIVggbk9w3YlcdLpdmC2/iGdv/HaNkxnAZ8x8yIz cfKogXWxjnJmjZg1rzJGNsJ9+v3Fdr9gf12feuzSUCQtJh12hK+JmbEMyoUpm1/f pAb9UHViaEMXA+EkNssXADvZk4F6TBt3HATGvz6XGfqMrS/9d5bXJIDbbURJMk4B Y9/kY3f7FbaeRU6+z8d1k1dZ8o6x2MPannFZCkZOWpe98zFT5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzSIU180YJo2RYOgnVIvzsizX6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjcwNDI2OGYtNWJiZi0z M2M1LWI1MjAtZTEzNGJlNGZkNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy6XiZizeR2CmnqvJ5AtpgpQmPMnpFFwhxMwCOTBcf0Mmch8YTQuSAc 19tWd0PXya5zCEWGZg9xhIRYmQtxwNxGT/CivkFcwBOUBS585AI+kn8DIM4DzDp/ q9FVHOwPCn9+DgKrbvHtmjjTzBhrjq9DnmpmQO/pq593JAeGCdWpgZsqnmXHNvxg xQZ7z/k4jm3So9lW9iX1UFS40acur2V6bs+IuKwp3B9mEgWsXAvvNIpXpao41egk 86ZctO1GduUHYy7cpZ6o8qjeMFanFowbt35RXQ3IEfYnneZdfFZSewgCLEckwQZg jITenGpDQg3w7fM7IXobBXjrGcoLJOQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:27:27 2025 by rpki-client