$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52291ff3-6f9f-3fd2-800a-4943182f3f54.roa File: 52291ff3-6f9f-3fd2-800a-4943182f3f54.roa (raw, json) Hash identifier: cPYidQc4rf71YqtwXDzX2KmUwGGXfgePo4GP1Pc8a5g= Subject key identifier: 09:0D:A6:38:52:E4:45:B4:61:19:0C:58:11:4F:75:CE:80:5A:C1:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3700B7B6FCC7CDE34EF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52291ff3-6f9f-3fd2-800a-4943182f3f54.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 76.149.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:70:0b:7b:6f:cc:7c:de:34:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0ac51704-04c2-4a5f-b7dc-261b5cb8d07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:20:67:e5:bc:b8:44:41:fc:d9:b0:00:21: e3:9d:14:a9:83:48:29:e7:ae:82:a1:5e:97:58:3a: c2:ca:8f:cc:6e:98:7e:d3:e0:6d:26:a8:f8:f9:7f: a5:da:d7:ee:df:c8:86:df:c7:c9:46:71:2f:a3:16: 39:47:b4:d6:6b:e2:4c:e6:e9:1f:25:cd:a5:ad:3d: aa:82:fc:99:e4:4c:3b:fa:e7:a0:41:cb:e6:06:c2: 82:98:4c:e4:81:5a:ef:8a:93:f0:84:9d:e0:50:12: f8:7e:fe:70:15:18:e1:d0:6c:ae:de:84:04:8b:a4: 0d:37:11:4e:0f:3e:17:35:ea:a4:58:62:5d:8b:f1: 8e:20:15:a8:91:92:39:df:22:dc:af:c5:b6:b1:af: 72:32:c0:a7:c8:91:1d:45:fb:e6:39:c3:30:cf:9c: 48:fa:bf:02:0f:44:c9:c1:f0:0d:ac:d1:b9:03:e2: 9e:20:96:85:30:74:87:a3:45:9e:c8:05:60:29:39: 9d:7f:34:11:ed:5a:e5:19:e9:fb:ce:9d:66:87:71: e4:fb:f3:d1:84:b5:70:69:3d:b4:26:00:21:73:24: 93:ee:19:40:90:eb:10:87:3d:b6:33:ad:4e:65:98: df:2b:f6:8c:86:33:6f:f3:2e:a5:c6:5f:46:32:a1: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:A6:38:52:E4:45:B4:61:19:0C:58:11:4F:75:CE:80:5A:C1:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52291ff3-6f9f-3fd2-800a-4943182f3f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.149.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:73:c7:08:c8:9b:e5:ff:23:20:75:29:65:01:b1:1a:ae:ae: d5:a6:0c:c7:23:c9:3e:07:af:b1:af:0e:86:d8:a2:e4:5b:ed: aa:22:30:a0:89:2f:c2:99:b9:20:02:96:1d:4d:6b:58:77:7e: 87:5c:f0:f3:77:96:2d:76:ec:0b:f1:ba:2e:7e:33:55:5e:6b: f3:77:19:7d:2b:0f:04:dc:b7:c5:7c:70:52:ff:d8:85:97:23: b7:64:cd:62:f7:50:89:c7:f3:a9:66:63:44:97:24:cd:1f:38: 2f:9c:e7:0f:fe:27:66:dd:79:d4:a3:ab:c4:7b:c6:21:39:75: 9f:99:82:a4:5a:d4:07:e1:44:04:3d:f1:6f:0e:e7:2e:93:c8: ad:a5:ed:ee:07:4f:67:27:f4:e9:93:5d:7b:39:91:b9:0d:d9: 59:65:18:a7:6d:c6:2e:0f:25:c9:2d:e2:16:1f:f1:33:b7:4c: 69:77:8d:f8:29:d8:a2:ce:da:87:f3:5b:58:80:f0:0a:5e:5c: c4:13:ec:39:fe:06:55:0b:8e:df:f9:c5:f6:75:8f:70:77:d7: 59:6a:cc:89:90:35:26:a9:ef:48:0c:94:f1:54:9c:9e:fe:4f: eb:be:ca:33:6e:fb:3c:e2:8c:0e:a8:c2:8d:43:60:0c:40:cf: 59:94:b0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw3ALe2/MfN407wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGFjNTE3MDQtMDRjMi00YTVmLWI3ZGMtMjYxYjVjYjhkMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+4gZ+W8uERB/NmwACHjnRSpg0gp566CoV6X WDrCyo/Mbph+0+BtJqj4+X+l2tfu38iG38fJRnEvoxY5R7TWa+JM5ukfJc2lrT2q gvyZ5Ew7+uegQcvmBsKCmEzkgVrvipPwhJ3gUBL4fv5wFRjh0Gyu3oQEi6QNNxFO Dz4XNeqkWGJdi/GOIBWokZI53yLcr8W2sa9yMsCnyJEdRfvmOcMwz5xI+r8CD0TJ wfANrNG5A+KeIJaFMHSHo0WeyAVgKTmdfzQR7VrlGen7zp1mh3Hk+/PRhLVwaT20 JgAhcyST7hlAkOsQhz22M61OZZjfK/aMhjNv8y6lxl9GMqHnVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkNpjhS5EW0YRkMWBFPdc6AWsG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTIyOTFmZjMtNmY5Zi0z ZmQyLTgwMGEtNDk0MzE4MmYzZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJXSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINzxwjIm+X/IyB1KWUBsRqurtWmDMcjyT4Hr7GvDobYouRb7aoiMKCJ L8KZuSAClh1Na1h3fodc8PN3li127Avxui5+M1Vea/N3GX0rDwTct8V8cFL/2IWX I7dkzWL3UInH86lmY0SXJM0fOC+c5w/+J2bdedSjq8R7xiE5dZ+ZgqRa1AfhRAQ9 8W8O5y6TyK2l7e4HT2cn9OmTXXs5kbkN2VllGKdtxi4PJckt4hYf8TO3TGl3jfgp 2KLO2ofzW1iA8ApeXMQT7Dn+BlULjt/5xfZ1j3B311lqzImQNSap70gMlPFUnJ7+ T+u+yjNu+zzijA6owo1DYAxAz1mUsCE= -----END CERTIFICATE-----Generated at Sun Aug 24 04:03:01 2025 by rpki-client