$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33110d3a-e068-38c0-a436-4924bc7013d1.roa File: 33110d3a-e068-38c0-a436-4924bc7013d1.roa (raw, json) Hash identifier: KWzC013C2PcZUwUJmXeqWAOmDDJriD94dQhvEV4cqd0= Subject key identifier: 10:36:82:B1:33:F6:08:C7:68:8B:F8:ED:B7:05:A8:DC:68:FA:62:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC56430BD15A1691A6C5700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33110d3a-e068-38c0-a436-4924bc7013d1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.133.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:64:30:bd:15:a1:69:1a:6c:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=41a06533-57ac-4abc-8a0a-d71a5bf0a041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:17:9c:e9:42:ae:6c:d3:96:99:5d:6c:80: f3:2f:66:83:26:49:b4:87:c7:95:94:d9:89:17:6b: 62:a4:61:8d:cc:06:30:1e:c5:60:62:34:aa:44:cc: 82:a6:4f:a5:80:c3:b8:95:28:09:f7:a2:46:bd:45: 93:fe:10:f1:b7:94:08:b6:8b:ef:3c:2b:64:d4:b0: 17:77:38:eb:16:26:cd:d1:50:70:6f:c5:fe:3a:06: 33:b8:35:84:9c:d7:49:d4:e9:cb:e0:3f:b8:c6:b0: 2f:c2:d3:ad:30:bc:75:b5:52:ef:d9:d4:08:15:68: dd:cf:5f:9c:a8:be:27:b9:64:18:2b:61:1f:c4:58: f4:26:bd:3b:76:73:db:d1:ab:71:42:bb:fd:c8:71: 2a:72:b0:2f:45:f9:45:05:1e:b3:9e:2b:25:d8:0f: f7:b4:e6:8a:9e:f8:d7:78:e2:c9:42:b0:f5:3b:20: 2c:77:7b:10:f7:b9:38:8a:fa:4b:42:1a:cc:eb:44: 5a:a0:ff:8e:d3:5c:da:79:8f:5a:e1:3c:e1:71:92: 35:39:ed:59:5e:58:46:cf:42:f8:31:bb:0e:30:88: 5d:20:5e:ad:0f:67:ad:ff:6c:cf:23:5b:0c:2e:b8: 67:59:0d:d0:94:51:d6:ac:06:c8:2e:19:0c:89:3c: ea:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:36:82:B1:33:F6:08:C7:68:8B:F8:ED:B7:05:A8:DC:68:FA:62:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33110d3a-e068-38c0-a436-4924bc7013d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:ea:ca:e8:2a:04:66:7f:dc:c0:2a:ad:b3:ed:9d:ed:6b:ff: 1b:69:c6:3c:56:95:43:44:21:d6:6b:34:17:1a:ae:28:b2:13: ad:5a:5c:34:91:92:9b:16:53:b8:f8:fd:84:73:3f:2a:fc:f7: fc:ad:4e:f3:28:32:6c:38:4e:08:cd:30:10:42:d4:28:ef:52: 9d:d7:78:1d:eb:c3:34:f8:b5:7e:f5:c6:ef:85:03:56:ce:e4: 1f:eb:a6:f8:cc:b1:11:73:4a:34:2d:43:73:cd:5e:1f:34:59: ae:6c:03:bf:6e:cc:ae:79:99:16:6c:38:e9:34:95:6f:c9:3e: c8:74:0a:eb:d5:87:29:3d:2c:51:da:f6:36:9b:b0:c2:06:16: 7b:ac:56:6c:8c:0c:80:0a:4a:e8:b7:2b:d3:7d:b9:69:fd:0f: ce:6b:ea:56:a8:b4:5b:58:e0:bc:b7:21:f9:76:28:23:04:72: ac:f5:c9:e5:48:2a:97:00:a7:f7:a5:54:66:cf:f1:41:0e:28: 4a:c2:a6:9a:a9:eb:5e:98:c2:8b:ee:4e:3c:60:a7:1e:bb:3b: 17:0d:cb:0a:b0:a6:5a:dd:7b:a3:4e:36:61:ac:dc:36:de:31: 66:9c:8f:49:26:d6:f6:cf:57:17:fa:f8:ef:a2:4d:d9:19:84: cc:86:4e:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWQwvRWhaRpsVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDFhMDY1MzMtNTdhYy00YWJjLThhMGEtZDcxYTViZjBhMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyIXnOlCrmzTlpldbIDzL2aDJkm0h8eVlNmJ F2tipGGNzAYwHsVgYjSqRMyCpk+lgMO4lSgJ96JGvUWT/hDxt5QItovvPCtk1LAX dzjrFibN0VBwb8X+OgYzuDWEnNdJ1OnL4D+4xrAvwtOtMLx1tVLv2dQIFWjdz1+c qL4nuWQYK2EfxFj0Jr07dnPb0atxQrv9yHEqcrAvRflFBR6znisl2A/3tOaKnvjX eOLJQrD1OyAsd3sQ97k4ivpLQhrM60RaoP+O01zaeY9a4TzhcZI1Oe1ZXlhGz0L4 MbsOMIhdIF6tD2et/2zPI1sMLrhnWQ3QlFHWrAbILhkMiTzq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA2grEz9gjHaIv47bcFqNxo+mIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMxMTBkM2EtZTA2OC0z OGMwLWE0MzYtNDkyNGJjNzAxM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLqyugqBGZ/3MAqrbPtne1r/xtpxjxWlUNEIdZrNBcariiyE61aXDSR kpsWU7j4/YRzPyr89/ytTvMoMmw4TgjNMBBC1CjvUp3XeB3rwzT4tX71xu+FA1bO 5B/rpvjMsRFzSjQtQ3PNXh80Wa5sA79uzK55mRZsOOk0lW/JPsh0CuvVhyk9LFHa 9jabsMIGFnusVmyMDIAKSui3K9N9uWn9D85r6laotFtY4Ly3Ifl2KCMEcqz1yeVI KpcAp/elVGbP8UEOKErCppqp616YwovuTjxgpx67OxcNywqwplrde6NONmGs3Dbe MWacj0km1vbPVxf6+O+iTdkZhMyGTjI= -----END CERTIFICATE-----Generated at Sun Aug 24 06:26:29 2025 by rpki-client