$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4084d7f1-ffa6-3a35-a1c5-f7d0493092f9.roa File: 4084d7f1-ffa6-3a35-a1c5-f7d0493092f9.roa (raw, json) Hash identifier: i7MZARzlEfIsRDcNVRRAgrueIY0uGDM9RsQvdFsmork= Subject key identifier: 0F:DF:F3:A4:A4:C0:CC:FE:1A:4C:A7:42:BC:DE:48:6D:5B:2D:F8:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2A7A4A8B6B98CC7D90D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4084d7f1-ffa6-3a35-a1c5-f7d0493092f9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.136.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:a7:a4:a8:b6:b9:8c:c7:d9:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=13aacf14-2f17-4c1f-a67a-b241b54f8b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:54:10:1a:68:57:ba:da:d6:38:8e:06:b6:dd: 48:6e:55:d1:b6:cf:ad:97:70:9d:30:07:4d:8d:6b: 79:ac:d3:b0:b2:5b:39:08:de:d6:49:a0:81:c9:9f: 10:28:d7:55:b7:64:f1:3a:36:4e:73:3d:e1:aa:ab: ed:d1:35:a2:54:f4:e8:52:d8:b4:fb:10:0d:9d:92: cc:6f:74:89:93:6b:97:02:77:d1:a9:5f:f0:57:d4: 55:70:2a:19:c4:c6:06:bf:6b:12:b2:34:e3:02:9c: d6:89:81:e7:9b:45:17:da:37:10:5a:d3:0c:9e:ef: 84:f9:e2:b5:8d:7c:f0:5f:6e:f1:52:94:79:c6:5f: 43:10:db:b6:3d:46:97:e5:57:b3:97:7c:6c:1f:09: c4:ed:e6:2d:ed:7a:6d:8b:fb:65:5d:70:0e:33:66: 08:38:d8:4b:db:34:d0:a6:74:69:da:85:c6:85:95: 89:7c:dc:c6:68:54:be:19:5b:de:7e:8b:ce:9b:43: 45:59:79:2f:54:07:96:b9:d1:d5:75:bc:ad:d0:d9: 3a:26:fe:b2:16:45:4b:41:61:5d:0a:53:47:6d:d9: 98:5b:1f:12:fc:31:84:ce:76:b9:45:64:89:1e:42: 28:b2:8f:bf:f7:ad:cc:b7:e5:cd:60:d4:0e:1f:8a: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DF:F3:A4:A4:C0:CC:FE:1A:4C:A7:42:BC:DE:48:6D:5B:2D:F8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4084d7f1-ffa6-3a35-a1c5-f7d0493092f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ac:cc:a5:d9:64:a4:49:6a:39:d2:da:dc:d1:90:91:af:5f: 65:09:90:9b:63:fa:7f:cf:f4:0d:57:2c:42:a0:18:38:9f:f0: 16:f5:f8:4c:53:80:0e:09:40:1b:9c:3b:86:fc:59:23:83:82: 90:22:c0:3f:a9:f7:f3:19:d1:01:33:49:3e:d0:b1:13:f6:9d: 0b:18:6a:5b:67:58:4b:65:04:a7:2a:39:72:0a:3a:e1:5d:c8: 22:63:3e:76:8c:61:43:e7:d9:11:5d:1d:3d:ad:87:44:fe:ae: c6:98:33:8e:3f:57:1f:ad:6f:a6:ce:70:32:e7:ec:16:56:c5: cb:13:5e:14:2e:6d:ac:a6:b8:cb:f0:41:de:5e:97:63:48:a9: 8e:63:95:97:cc:29:44:c1:c8:0d:ca:bc:68:fe:a3:e0:4a:f6: 90:30:bd:61:0e:e3:bc:b1:b3:8e:82:2c:6c:1e:d9:41:fd:fc: 9a:d9:6c:92:ab:7a:6b:64:2a:f6:11:f7:19:46:28:2e:dd:83: 34:d4:01:56:32:a0:32:64:34:cc:d4:a5:79:e8:7e:70:9f:59: 36:de:5c:11:05:dc:1b:8f:1f:75:d3:61:78:96:d3:48:65:a6: 19:b9:cc:40:58:e2:51:42:ee:31:1f:13:c2:81:48:0d:b4:b7: 09:dd:b0:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswqekqLa5jMfZDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTNhYWNmMTQtMmYxNy00YzFmLWE2N2EtYjI0MWI1NGY4YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVQQGmhXutrWOI4Gtt1IblXRts+tl3CdMAdN jWt5rNOwsls5CN7WSaCByZ8QKNdVt2TxOjZOcz3hqqvt0TWiVPToUti0+xANnZLM b3SJk2uXAnfRqV/wV9RVcCoZxMYGv2sSsjTjApzWiYHnm0UX2jcQWtMMnu+E+eK1 jXzwX27xUpR5xl9DENu2PUaX5Vezl3xsHwnE7eYt7Xpti/tlXXAOM2YIONhL2zTQ pnRp2oXGhZWJfNzGaFS+GVvefovOm0NFWXkvVAeWudHVdbyt0Nk6Jv6yFkVLQWFd ClNHbdmYWx8S/DGEzna5RWSJHkIoso+/963Mt+XNYNQOH4oKVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/f86SkwMz+GkynQrzeSG1bLfiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA4NGQ3ZjEtZmZhNi0z YTM1LWExYzUtZjdkMDQ5MzA5MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOszKXZZKRJajnS2tzRkJGvX2UJkJtj+n/P9A1XLEKgGDif8Bb1+ExT gA4JQBucO4b8WSODgpAiwD+p9/MZ0QEzST7QsRP2nQsYaltnWEtlBKcqOXIKOuFd yCJjPnaMYUPn2RFdHT2th0T+rsaYM44/Vx+tb6bOcDLn7BZWxcsTXhQubaymuMvw Qd5el2NIqY5jlZfMKUTByA3KvGj+o+BK9pAwvWEO47yxs46CLGwe2UH9/JrZbJKr emtkKvYR9xlGKC7dgzTUAVYyoDJkNMzUpXnofnCfWTbeXBEF3BuPH3XTYXiW00hl phm5zEBY4lFC7jEfE8KBSA20twndsJw= -----END CERTIFICATE-----Generated at Sat Aug 23 23:13:51 2025 by rpki-client