$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3586ba5e-a3b0-3110-9da9-4aa9f5fcd784.roa File: 3586ba5e-a3b0-3110-9da9-4aa9f5fcd784.roa (raw, json) Hash identifier: ZDmE06tHztCM0K5e2kcKD2cJhsYmou03GB+0tFCYwn8= Subject key identifier: 43:42:84:B4:60:14:2C:79:FF:30:4B:71:1D:AA:77:28:A8:E1:52:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2A601A13CBAE25BE92080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3586ba5e-a3b0-3110-9da9-4aa9f5fcd784.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.136.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:a6:01:a1:3c:ba:e2:5b:e9:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=642717fc-3e99-4034-96d8-5fd83d2e6fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:41:d6:92:d4:dd:fb:fb:77:ba:88:a2:ea:47: 39:bb:f7:38:44:cf:ef:fc:92:22:3f:d1:1b:03:1b: 2b:6c:ba:cb:e2:22:4c:6d:ba:24:94:68:45:75:67: a9:2a:f9:8c:18:b3:99:8f:d0:bc:70:28:70:da:e0: 8c:69:9c:6b:52:ee:55:87:1e:c8:e3:5e:32:9f:77: cb:96:57:70:d8:09:d5:58:e6:7c:42:09:3f:26:6d: e7:00:3c:99:17:2f:a9:a1:25:8c:d3:50:34:53:74: d4:21:f4:8b:b5:94:b6:a7:fd:f3:75:5f:78:5b:f6: 3a:fd:2c:2c:43:5b:2a:26:67:ed:32:b2:f2:64:c4: 13:36:5c:3f:6a:5e:4f:b4:cc:e4:a6:fb:f5:cc:c7: 85:58:99:5c:fe:f2:a7:e3:35:4a:90:c4:f2:f4:ab: 67:2e:02:26:43:20:97:dd:30:b1:55:25:5f:bc:1b: cf:1c:d5:44:02:49:76:33:51:26:fc:6c:a2:24:12: f0:ed:29:2f:87:45:9f:ea:fd:85:0a:a1:39:df:84: ec:92:d7:6f:7e:20:15:38:0d:be:b5:8b:43:d9:d8: 2c:0c:95:10:42:e2:f1:8c:ec:03:20:4c:71:54:0c: 7f:7a:01:29:9f:fc:70:e8:6c:85:21:64:7c:de:82: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:42:84:B4:60:14:2C:79:FF:30:4B:71:1D:AA:77:28:A8:E1:52:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3586ba5e-a3b0-3110-9da9-4aa9f5fcd784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3b:9d:cf:f7:b2:41:a1:e8:fe:6d:7d:90:48:34:f4:ea:7e: a8:cc:67:9b:97:55:8e:1a:93:98:da:4c:25:c1:f6:e5:91:99: 59:3c:f5:5c:51:08:b4:88:5a:17:53:6f:bc:16:77:ca:ae:48: e5:fb:dd:c9:5b:a6:05:4c:0c:d4:5a:a7:08:9b:d0:7e:c7:d7: fa:b0:68:fb:0d:82:85:f6:03:43:38:5b:6e:1c:a0:13:34:fb: d6:9f:d0:5a:dd:f9:ff:14:9b:43:30:ba:61:8a:8f:94:9f:90: 7b:89:2b:c7:b9:db:dd:90:0c:86:61:0f:d1:4e:f6:69:da:b2: 3a:51:0c:47:89:64:b8:15:6d:c4:7c:4a:4d:40:e5:9b:24:44: cf:d6:d3:af:69:56:7d:16:e4:6e:b5:d8:73:b5:95:fb:3c:b8: 24:9d:f5:5f:b3:ea:ba:48:71:7b:2e:42:db:bc:54:1f:4d:7b: e3:f6:2d:1d:65:09:0e:49:7a:90:36:6d:a9:e0:98:40:06:04: 48:b6:29:bb:55:c0:86:64:75:2b:64:cd:9b:dc:be:51:bb:86: 27:dc:08:42:d4:f2:04:4a:bb:0b:e9:c3:6c:cb:c7:d3:f5:5e: 82:5a:57:62:38:ec:0b:dc:fc:84:0b:bf:7f:ee:c5:95:0b:6f: 4c:21:3a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswqYBoTy64lvpIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjQyNzE3ZmMtM2U5OS00MDM0LTk2ZDgtNWZkODNkMmU2ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0HWktTd+/t3uoii6kc5u/c4RM/v/JIiP9Eb AxsrbLrL4iJMbboklGhFdWepKvmMGLOZj9C8cChw2uCMaZxrUu5Vhx7I414yn3fL lldw2AnVWOZ8Qgk/Jm3nADyZFy+poSWM01A0U3TUIfSLtZS2p/3zdV94W/Y6/Sws Q1sqJmftMrLyZMQTNlw/al5PtMzkpvv1zMeFWJlc/vKn4zVKkMTy9KtnLgImQyCX 3TCxVSVfvBvPHNVEAkl2M1Em/GyiJBLw7Skvh0Wf6v2FCqE534TsktdvfiAVOA2+ tYtD2dgsDJUQQuLxjOwDIExxVAx/egEpn/xw6GyFIWR83oK0IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENChLRgFCx5/zBLcR2qdyio4VKvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzU4NmJhNWUtYTNiMC0z MTEwLTlkYTktNGFhOWY1ZmNkNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII7nc/3skGh6P5tfZBINPTqfqjMZ5uXVY4ak5jaTCXB9uWRmVk89VxR CLSIWhdTb7wWd8quSOX73clbpgVMDNRapwib0H7H1/qwaPsNgoX2A0M4W24coBM0 +9af0Frd+f8Um0MwumGKj5SfkHuJK8e5292QDIZhD9FO9mnasjpRDEeJZLgVbcR8 Sk1A5ZskRM/W069pVn0W5G612HO1lfs8uCSd9V+z6rpIcXsuQtu8VB9Ne+P2LR1l CQ5JepA2bangmEAGBEi2KbtVwIZkdStkzZvcvlG7hifcCELU8gRKuwvpw2zLx9P1 XoJaV2I47Avc/IQLv3/uxZULb0whOsM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:04:55 2025 by rpki-client