$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38787bc0-a5e0-3db6-ac02-73653b1d86a3.roa File: 38787bc0-a5e0-3db6-ac02-73653b1d86a3.roa (raw, json) Hash identifier: NmjBvtm4vKv1wlWcvCiqXbHErM/3+LgFFpNAr1/vVs8= Subject key identifier: FE:7C:2F:D0:15:2D:1F:78:E3:55:B6:F3:88:0C:E1:C5:7C:8F:05:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC56315BB4B85E909D06180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38787bc0-a5e0-3db6-ac02-73653b1d86a3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.133.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:63:15:bb:4b:85:e9:09:d0:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4ba16e1d-3b84-4205-95c9-d33fa2423fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:0f:2a:8d:b9:2b:8b:22:1c:27:7c:64:e2: 19:3f:6a:01:28:c8:06:a1:9f:70:8e:7d:ee:63:7c: 73:ad:93:ad:7c:53:05:cc:8e:75:49:44:24:49:95: 28:45:d6:3c:5a:d2:be:9d:60:62:2d:20:db:cb:92: 43:c6:8a:53:75:6a:87:bf:de:cf:d2:2c:2b:d7:c6: 13:57:4d:5d:55:7a:d8:52:b9:d0:f8:e1:25:96:ad: c3:7d:92:70:15:24:65:d0:f5:42:03:a3:c4:36:7d: 7d:e8:ff:aa:7c:b7:b2:b9:20:de:74:70:e6:1a:8b: f4:85:50:17:c6:86:1b:e1:e6:ad:cf:ca:31:e4:af: f8:ec:27:33:15:44:e8:a4:92:c3:bb:a1:04:65:4e: 12:a7:70:62:e2:11:17:80:19:ce:f7:56:46:98:e9: 76:e1:57:07:91:5f:16:12:14:67:ab:d2:3d:c0:9d: b8:92:e5:83:74:f0:fe:61:0a:ef:98:9a:a5:a9:cd: c7:03:df:61:bd:cb:4a:f2:06:b1:58:42:ba:f1:c9: 12:4f:df:24:b5:cb:78:ff:91:11:80:f6:0f:dc:68: 6b:8d:65:69:24:cc:7b:c6:79:19:e0:7b:2a:3d:f6: 9c:95:a3:39:d2:02:20:7a:8b:d8:2c:75:52:25:63: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:2F:D0:15:2D:1F:78:E3:55:B6:F3:88:0C:E1:C5:7C:8F:05:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38787bc0-a5e0-3db6-ac02-73653b1d86a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ae:41:50:9a:b8:f1:34:78:9b:4f:ec:6d:b7:89:60:aa:db: fb:86:54:1f:db:9b:00:1a:20:bb:51:cf:88:4f:ac:70:24:d2: 14:6b:bb:63:0c:c0:ed:87:58:41:d8:a8:68:c0:e1:31:6d:19: 2f:77:1d:18:09:8d:dc:fa:72:ed:43:0f:e5:7d:7a:60:50:20: 1b:4c:b1:be:83:cb:f4:5a:2d:10:e2:17:87:f0:93:6f:89:6a: 8f:6b:f5:42:86:25:c0:53:5a:27:fa:ba:5a:bc:1b:85:c5:4a: a7:bc:f0:64:02:d5:7c:48:c9:ca:9b:cc:0b:2c:18:43:3f:2d: 0b:d2:0f:9a:4b:fc:bd:7c:e9:5f:77:0f:02:1c:4b:b4:73:ea: f9:e7:b6:c0:22:c8:e4:d4:38:8c:87:bd:44:0f:8f:eb:60:51: 80:a1:5b:9c:77:8b:33:ce:1a:a1:51:03:77:22:5e:5d:d9:f3: 56:be:4d:3d:0a:9e:78:25:65:6a:af:a0:ab:08:9b:4e:58:e5: 93:c8:a3:94:c9:1a:bb:80:24:b7:45:40:e5:cd:40:b5:7f:3d: 4d:2a:ce:d3:a6:ba:fc:41:11:5e:5e:e2:d1:28:d5:98:3a:28: 45:f0:ad:2c:33:0b:b0:00:1b:6f:7a:b1:fd:77:2a:88:0f:59: 4d:be:3d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWMVu0uF6QnQYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGJhMTZlMWQtM2I4NC00MjA1LTk1YzktZDMzZmEyNDIzZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NEPKo25K4siHCd8ZOIZP2oBKMgGoZ9wjn3u Y3xzrZOtfFMFzI51SUQkSZUoRdY8WtK+nWBiLSDby5JDxopTdWqHv97P0iwr18YT V01dVXrYUrnQ+OEllq3DfZJwFSRl0PVCA6PENn196P+qfLeyuSDedHDmGov0hVAX xoYb4eatz8ox5K/47CczFUTopJLDu6EEZU4Sp3Bi4hEXgBnO91ZGmOl24VcHkV8W EhRnq9I9wJ24kuWDdPD+YQrvmJqlqc3HA99hvctK8gaxWEK68ckST98ktct4/5ER gPYP3GhrjWVpJMx7xnkZ4HsqPfaclaM50gIgeovYLHVSJWOmaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP58L9AVLR9441W284gM4cV8jwXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg3ODdiYzAtYTVlMC0z ZGI2LWFjMDItNzM2NTNiMWQ4NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIW+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyuQVCauPE0eJtP7G23iWCq2/uGVB/bmwAaILtRz4hPrHAk0hRru2MM wO2HWEHYqGjA4TFtGS93HRgJjdz6cu1DD+V9emBQIBtMsb6Dy/RaLRDiF4fwk2+J ao9r9UKGJcBTWif6ulq8G4XFSqe88GQC1XxIycqbzAssGEM/LQvSD5pL/L186V93 DwIcS7Rz6vnntsAiyOTUOIyHvUQPj+tgUYChW5x3izPOGqFRA3ciXl3Z81a+TT0K nnglZWqvoKsIm05Y5ZPIo5TJGruAJLdFQOXNQLV/PU0qztOmuvxBEV5e4tEo1Zg6 KEXwrSwzC7AAG296sf13KogPWU2+PeA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:21:46 2025 by rpki-client