$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b9e3dc-05ce-333c-b349-41a2b2244b7a.roa File: 48b9e3dc-05ce-333c-b349-41a2b2244b7a.roa (raw, json) Hash identifier: Q6twTsBbZOmpirzLagVJjT7txArT+agABz+ApedS6No= Subject key identifier: 65:D5:ED:90:EB:64:30:AF:2A:41:BF:67:5E:14:41:8D:6A:D9:07:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1BFC51CBB8B587D9FE3A8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b9e3dc-05ce-333c-b349-41a2b2244b7a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 76.117.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:bf:c5:1c:bb:8b:58:7d:9f:e3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c1d4128f-7bab-4eda-b899-c7c5d0e9446c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1c:e0:97:62:cb:d2:b1:97:7f:1b:55:6f:f5: d7:80:dc:e6:f8:34:3a:a5:92:88:b8:b0:ca:3c:29: 55:a3:6a:29:81:c0:c5:ab:87:76:9f:9e:73:c0:76: 2c:99:e0:97:c4:4a:66:7a:69:da:bb:b7:35:9e:05: f0:61:b9:4e:ce:81:1b:e4:e1:31:64:64:0c:3f:90: 5f:f3:d1:0e:1e:5f:ea:c2:4a:a4:a7:cb:de:94:1b: f6:bc:79:44:e0:dc:e8:ab:08:79:2e:93:b2:44:0b: 47:b8:dd:d9:97:60:5d:c5:05:a2:5a:e2:b6:7a:24: d9:d7:53:8d:cc:6a:fc:80:b6:03:9d:d4:46:4f:5b: 3c:02:48:29:8d:b3:fa:51:5d:1f:4d:44:4c:85:d0: 7b:5a:bd:32:65:60:da:7c:07:84:bf:40:8e:78:82: 46:d8:6c:75:cc:97:bd:b6:41:47:c1:6e:4e:98:48: b0:21:16:ba:32:5f:d3:de:12:07:be:04:e2:5b:8a: bd:8e:72:39:79:0d:2d:50:79:21:61:ea:07:a3:71: f0:16:36:46:44:13:e7:d9:4a:87:f0:99:cf:ca:dc: ec:89:26:cc:e5:2c:6b:02:69:37:7d:26:37:8f:83: a3:90:15:c3:55:25:b8:4f:d6:0c:af:e6:69:c2:24: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:ED:90:EB:64:30:AF:2A:41:BF:67:5E:14:41:8D:6A:D9:07:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48b9e3dc-05ce-333c-b349-41a2b2244b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.117.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:98:d5:e4:11:c7:63:59:32:ba:13:a6:98:63:64:a0:78:63: 48:a7:8c:40:a7:b1:c2:f9:60:33:30:08:0d:9a:20:49:3f:b5: a0:bc:ba:bf:65:2f:56:de:85:1e:c5:d7:31:c6:e8:de:74:f0: e4:7c:d3:67:84:97:1f:ca:9a:30:9d:7b:10:9b:d0:d8:c6:b4: ef:8b:f4:73:b9:3b:71:ae:14:a7:22:8d:83:ca:b7:33:23:da: ad:d8:eb:1e:cb:c0:c9:04:e7:ff:47:77:7d:43:6c:d4:b0:7a: 86:c7:c5:82:e3:c7:5f:fa:7d:eb:3b:f8:ae:98:87:db:74:40: 63:d3:52:c4:ba:e5:a4:a5:bf:37:8d:1a:89:87:da:04:56:90: 8f:f6:2e:6c:63:47:06:02:25:33:d6:ae:ed:bd:d0:31:a8:d0: f6:1a:d1:e2:0d:ee:97:f0:ed:76:53:43:ed:05:c8:f6:7d:66: ff:1d:9b:6a:3e:9c:06:7d:09:d5:4b:17:ff:55:06:64:89:14: 59:16:8b:eb:c0:ca:d2:01:1b:10:48:21:8f:73:2c:32:06:a8: 57:df:b7:4c:85:b0:a1:9d:52:2c:d5:9b:b1:43:80:2a:df:fd: e7:44:77:74:b1:89:1f:18:28:20:24:b0:82:39:09:4c:fb:58: a0:a1:f3:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswb/FHLuLWH2f46gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzFkNDEyOGYtN2JhYi00ZWRhLWI4OTktYzdjNWQwZTk0NDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBzgl2LL0rGXfxtVb/XXgNzm+DQ6pZKIuLDK PClVo2opgcDFq4d2n55zwHYsmeCXxEpmemnau7c1ngXwYblOzoEb5OExZGQMP5Bf 89EOHl/qwkqkp8velBv2vHlE4Nzoqwh5LpOyRAtHuN3Zl2BdxQWiWuK2eiTZ11ON zGr8gLYDndRGT1s8AkgpjbP6UV0fTURMhdB7Wr0yZWDafAeEv0COeIJG2Gx1zJe9 tkFHwW5OmEiwIRa6Ml/T3hIHvgTiW4q9jnI5eQ0tUHkhYeoHo3HwFjZGRBPn2UqH 8JnPytzsiSbM5SxrAmk3fSY3j4OjkBXDVSW4T9YMr+ZpwiSALQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXV7ZDrZDCvKkG/Z14UQY1q2Qc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDhiOWUzZGMtMDVjZS0z MzNjLWIzNDktNDFhMmIyMjQ0YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHX2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2Y1eQRx2NZMroTpphjZKB4Y0injECnscL5YDMwCA2aIEk/taC8ur9l L1behR7F1zHG6N508OR802eElx/KmjCdexCb0NjGtO+L9HO5O3GuFKcijYPKtzMj 2q3Y6x7LwMkE5/9Hd31DbNSweobHxYLjx1/6fes7+K6Yh9t0QGPTUsS65aSlvzeN GomH2gRWkI/2LmxjRwYCJTPWru290DGo0PYa0eIN7pfw7XZTQ+0FyPZ9Zv8dm2o+ nAZ9CdVLF/9VBmSJFFkWi+vAytIBGxBIIY9zLDIGqFfft0yFsKGdUizVm7FDgCrf /edEd3SxiR8YKCAksII5CUz7WKCh89g= -----END CERTIFICATE-----Generated at Sun Aug 24 04:04:14 2025 by rpki-client