$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6349e693-77e5-3d40-b633-c2d34d7f5c1d.roa File: 6349e693-77e5-3d40-b633-c2d34d7f5c1d.roa (raw, json) Hash identifier: UjtZiT2wKDQAP9dLzQ6yhl2s4JXkUUWGPz3Cm2CW7Nc= Subject key identifier: D4:3C:A5:FD:03:3F:7D:73:1F:AB:88:01:DB:15:46:56:A9:40:6F:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3366F139419BABFD71B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6349e693-77e5-3d40-b633-c2d34d7f5c1d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.126.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:36:6f:13:94:19:ba:bf:d7:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7d1aac8b-7ca5-41a0-bdbf-d2c486f687ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:28:1a:91:b1:67:ca:a9:98:e1:25:04:25: 5b:02:ec:35:ed:94:73:47:3a:8b:48:d2:e1:c8:1a: a3:ea:d1:1d:b1:db:5b:1b:7c:75:8e:40:82:76:68: 31:78:66:c3:27:3a:cb:3b:7f:9f:89:28:5e:15:7d: fb:43:53:21:85:c9:19:b6:f3:a8:91:e5:80:f1:47: c2:8b:94:42:73:44:41:29:ca:0b:3b:9b:e7:a1:38: ec:f2:89:9e:da:55:d6:b2:59:fb:2c:be:a7:d1:bb: f7:b3:bd:e2:b4:c3:7f:f0:84:0f:62:d6:d5:03:56: 8a:58:cd:b1:d9:8b:01:69:0b:e9:01:36:e1:e2:ce: 45:16:54:25:46:6e:0b:97:cd:b7:41:a3:e1:2c:7a: 1c:2b:1d:46:29:f1:59:11:a2:55:f5:84:cb:a6:c4: ef:0b:3d:7d:e3:e6:de:26:35:35:eb:09:50:5e:a4: 7a:70:4e:fd:70:61:44:1b:83:af:9f:e0:ba:c7:c0: 24:1a:ae:a5:fb:4d:c7:55:54:aa:79:1a:1b:63:88: 88:87:db:a5:2c:12:09:b6:5d:30:ba:07:40:5f:c4: 36:64:ca:54:47:a7:4e:3b:8c:83:61:b3:d4:08:18: e5:1e:25:37:8c:51:d4:42:c7:9f:1d:48:89:e6:b0: 47:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3C:A5:FD:03:3F:7D:73:1F:AB:88:01:DB:15:46:56:A9:40:6F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6349e693-77e5-3d40-b633-c2d34d7f5c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.126.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:cc:9c:94:c4:34:43:89:5b:f1:0c:4f:ae:84:44:12:78:b6: e9:13:5b:7f:09:ad:45:44:11:bc:26:b2:da:3b:58:83:4c:20: de:93:e3:c9:c2:b3:10:40:e8:4e:5b:04:31:2f:07:87:e2:8b: 16:ff:e6:25:2c:a5:e8:78:15:d1:19:ce:b8:31:be:4d:0d:be: a4:e5:2d:a1:fe:08:6c:45:94:cd:36:e2:a4:8d:8f:6f:1c:59: b3:10:f0:9b:d0:26:55:d1:38:23:b5:a5:1d:ef:1e:4f:0d:0e: dc:fe:9e:49:d1:e6:e4:8e:fc:3e:17:b4:5b:97:02:ed:86:46: 1d:f9:4b:c7:33:aa:fd:3e:e5:e4:a9:3c:5f:21:7b:dc:36:56: 92:49:d4:05:54:24:98:50:98:27:44:05:fa:1f:73:cb:d8:62: fc:bf:05:a5:3d:ee:e9:9d:b1:4a:6b:18:58:2d:0e:5f:22:0f: 94:3a:91:84:75:e8:36:0e:89:8d:c8:d0:9c:d1:b4:74:ce:4e: a3:fc:f9:ea:d9:d5:71:9d:4e:68:89:70:b1:c2:1c:de:d7:40: 24:a3:e7:0a:14:67:a7:aa:4c:25:dd:fe:98:e9:30:3b:23:77: 62:d9:fe:fc:b5:a6:71:6b:3e:3c:e3:15:e0:a4:73:5b:61:07: 12:dd:f5:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswzZvE5QZur/XGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2QxYWFjOGItN2NhNS00MWEwLWJkYmYtZDJjNDg2ZjY4N2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuwoGpGxZ8qpmOElBCVbAuw17ZRzRzqLSNLh yBqj6tEdsdtbG3x1jkCCdmgxeGbDJzrLO3+fiSheFX37Q1MhhckZtvOokeWA8UfC i5RCc0RBKcoLO5vnoTjs8ome2lXWsln7LL6n0bv3s73itMN/8IQPYtbVA1aKWM2x 2YsBaQvpATbh4s5FFlQlRm4Ll823QaPhLHocKx1GKfFZEaJV9YTLpsTvCz194+be JjU16wlQXqR6cE79cGFEG4Ovn+C6x8AkGq6l+03HVVSqeRobY4iIh9ulLBIJtl0w ugdAX8Q2ZMpUR6dOO4yDYbPUCBjlHiU3jFHUQsefHUiJ5rBH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ8pf0DP31zH6uIAdsVRlapQG+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjM0OWU2OTMtNzdlNS0z ZDQwLWI2MzMtYzJkMzRkN2Y1YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTH5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLMnJTENEOJW/EMT66ERBJ4tukTW38JrUVEEbwmsto7WINMIN6T48nC sxBA6E5bBDEvB4fiixb/5iUspeh4FdEZzrgxvk0NvqTlLaH+CGxFlM024qSNj28c WbMQ8JvQJlXROCO1pR3vHk8NDtz+nknR5uSO/D4XtFuXAu2GRh35S8czqv0+5eSp PF8he9w2VpJJ1AVUJJhQmCdEBfofc8vYYvy/BaU97umdsUprGFgtDl8iD5Q6kYR1 6DYOiY3I0JzRtHTOTqP8+erZ1XGdTmiJcLHCHN7XQCSj5woUZ6eqTCXd/pjpMDsj d2LZ/vy1pnFrPjzjFeCkc1thBxLd9ew= -----END CERTIFICATE-----Generated at Sat Aug 23 23:11:49 2025 by rpki-client