$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28899a2a-58c3-32e8-92e2-ee64e38315b7.roa File: 28899a2a-58c3-32e8-92e2-ee64e38315b7.roa (raw, json) Hash identifier: 9lSTfZJ0CpbW8CeRLb62uB7y7ZZMROZRdRisnsWUAjI= Subject key identifier: 08:60:BB:C0:6B:A0:A5:43:A1:E5:66:0B:AE:71:48:6D:E0:F1:38:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1BE92D778C3FC10303580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28899a2a-58c3-32e8-92e2-ee64e38315b7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 76.117.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:be:92:d7:78:c3:fc:10:30:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5cc22636-195c-4b05-b0fa-cafa3b15dc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:47:6b:e0:85:16:83:a2:c5:26:3e:cc:45: 7e:13:72:09:cc:67:7d:86:d8:5e:d8:d3:ce:57:39: 5f:54:02:b6:2f:9a:ab:8b:22:0b:8f:fc:13:25:44: 47:26:7a:4f:99:79:cc:47:44:f5:2a:a4:c8:5e:28: 4c:6c:e9:d3:ee:24:b6:31:22:6d:2f:4d:5f:e7:c5: 72:2d:23:d7:31:57:a9:d2:a3:1a:ef:c6:bc:85:a5: 4f:91:3e:58:1a:28:ed:95:45:5d:70:a2:09:12:cd: 3a:0e:9b:c9:82:11:ab:04:ef:5e:0a:76:fe:a0:7a: 9d:2b:f3:6c:a1:fb:25:ae:c1:3d:2f:ce:31:cc:f7: 4f:7b:7a:f8:78:45:37:f3:28:5d:01:29:91:0c:b6: 50:b8:47:d3:33:ac:2b:69:16:9e:0c:81:61:d9:a9: 80:52:f2:48:25:30:6a:72:f9:ed:d6:03:de:dd:9b: 5a:a5:f5:e6:19:fd:7d:8f:ac:e6:44:98:da:18:ef: 92:31:62:7a:38:38:cd:96:41:45:37:63:e0:e6:41: c7:31:06:5b:cc:f6:24:66:6c:0e:fa:2e:15:ca:aa: 3b:90:72:69:59:d7:bc:4e:0a:3c:0b:58:d6:3a:a6: 67:89:a0:b3:30:cb:7c:1a:02:63:de:18:38:4a:64: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:60:BB:C0:6B:A0:A5:43:A1:E5:66:0B:AE:71:48:6D:E0:F1:38:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28899a2a-58c3-32e8-92e2-ee64e38315b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.117.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3c:86:9c:c1:a8:fe:fb:fc:ad:b4:d1:4f:5f:8a:51:58:ad: 63:94:12:04:55:4e:d2:c3:da:87:00:5c:3b:73:56:eb:35:e0: e2:9f:61:7f:bd:f2:58:bd:ff:e0:05:96:e5:6c:39:5f:0b:37: 7c:1e:5c:d1:5c:bf:6c:31:fe:42:ef:ef:2f:9e:b3:c9:d8:b4: 00:67:b1:e7:6f:91:0f:fc:b0:d8:d4:19:f3:e1:9a:3b:11:94: d4:f6:3f:12:f9:3e:b0:4d:25:9b:c1:9a:ce:8a:06:4c:77:92: a5:5a:06:ff:ae:6c:0b:dd:36:f8:6b:f3:cd:2e:5c:9b:d4:92: a8:0c:0e:cc:5e:d5:90:ce:05:f2:54:b8:b8:59:7d:84:f1:e0: f2:41:ac:e2:e9:cd:b6:7a:cd:c3:94:1d:6a:86:84:7e:34:c5: c6:5a:9b:64:f1:86:df:f2:e1:4e:f2:bf:01:37:89:99:ac:9a: e6:56:00:b2:6a:e9:7a:2b:5f:84:0a:00:d1:36:80:21:99:ac: f3:86:77:0f:c4:62:3e:ac:52:74:a8:84:49:30:ff:c0:3d:56: e1:4e:ca:cb:7d:da:56:73:24:75:f9:8e:9d:dd:53:ff:d5:77: 1e:92:eb:ff:bf:de:c7:a5:2b:5b:f3:c8:1a:cb:26:d5:3c:07: 91:26:1b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswb6S13jD/BAwNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWNjMjI2MzYtMTk1Yy00YjA1LWIwZmEtY2FmYTNiMTVkYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyxHa+CFFoOixSY+zEV+E3IJzGd9hthe2NPO VzlfVAK2L5qriyILj/wTJURHJnpPmXnMR0T1KqTIXihMbOnT7iS2MSJtL01f58Vy LSPXMVep0qMa78a8haVPkT5YGijtlUVdcKIJEs06DpvJghGrBO9eCnb+oHqdK/Ns ofslrsE9L84xzPdPe3r4eEU38yhdASmRDLZQuEfTM6wraRaeDIFh2amAUvJIJTBq cvnt1gPe3ZtapfXmGf19j6zmRJjaGO+SMWJ6ODjNlkFFN2Pg5kHHMQZbzPYkZmwO +i4Vyqo7kHJpWde8Tgo8C1jWOqZniaCzMMt8GgJj3hg4SmQebwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhgu8BroKVDoeVmC65xSG3g8ThWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg4OTlhMmEtNThjMy0z MmU4LTkyZTItZWU2NGUzODMxNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH48hpzBqP77/K200U9filFYrWOUEgRVTtLD2ocAXDtzVus14OKfYX+9 8li9/+AFluVsOV8LN3weXNFcv2wx/kLv7y+es8nYtABnsedvkQ/8sNjUGfPhmjsR lNT2PxL5PrBNJZvBms6KBkx3kqVaBv+ubAvdNvhr880uXJvUkqgMDsxe1ZDOBfJU uLhZfYTx4PJBrOLpzbZ6zcOUHWqGhH40xcZam2Txht/y4U7yvwE3iZmsmuZWALJq 6XorX4QKANE2gCGZrPOGdw/EYj6sUnSohEkw/8A9VuFOyst92lZzJHX5jp3dU//V dx6S6/+/3selK1vzyBrLJtU8B5EmG1E= -----END CERTIFICATE-----Generated at Sun Aug 24 04:04:49 2025 by rpki-client