$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/682551e3-2a95-3903-9085-a327a3db50e8.roa File: 682551e3-2a95-3903-9085-a327a3db50e8.roa (raw, json) Hash identifier: I0MjZokRBxfEg7aYN7pbDu0VNptlxkJWLbKKz3yZP2U= Subject key identifier: 9C:E0:AD:67:94:02:F9:D5:91:AA:10:E5:31:4A:CF:2D:20:69:DB:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3B79319F97F7E3CB6CCC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/682551e3-2a95-3903-9085-a327a3db50e8.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 76.116.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:b7:93:19:f9:7f:7e:3c:b6:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f2c3fee7-9333-429d-87b5-1b52575984e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9a:15:de:cb:38:10:fd:3c:44:f5:de:03:97: 61:67:39:5c:4f:df:32:50:08:2a:2c:79:c9:29:2b: 27:d9:f5:8a:a6:8f:35:3c:e8:74:ad:9a:07:63:60: d2:37:0d:99:69:d8:dd:d1:d5:6c:10:8f:6a:09:36: d6:05:61:31:ad:77:a1:b3:a7:56:40:2f:77:61:4c: b4:45:f9:aa:43:ad:40:43:19:ec:fc:4e:5d:5c:b0: ff:58:12:69:80:b1:cd:78:39:f1:c9:cb:0f:c5:d1: 70:44:90:48:88:01:45:05:4c:a9:25:87:4a:b8:d6: 61:24:4f:60:66:7e:8a:7f:36:3f:b2:01:d8:e3:05: 72:6e:81:26:9e:68:94:f4:b5:4c:05:a4:5a:56:fa: a6:37:ed:67:07:2e:8d:50:f4:fd:d3:6a:6b:59:95: a6:cc:2d:03:3d:45:61:a4:b9:54:ef:6f:49:df:02: bd:dd:48:16:e1:a9:59:17:16:1e:bb:f9:4f:34:bb: cb:7c:01:54:00:d0:60:02:86:ee:46:24:49:4b:fd: a6:f4:65:11:8e:a6:6a:97:1b:d2:91:8b:a1:35:f3: c9:29:bb:4b:de:45:db:ff:09:13:71:77:9f:37:06: 98:0e:67:fe:1b:6b:24:3b:8e:6c:49:7d:81:82:a8: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:AD:67:94:02:F9:D5:91:AA:10:E5:31:4A:CF:2D:20:69:DB:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/682551e3-2a95-3903-9085-a327a3db50e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.116.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:47:73:5a:b7:48:5f:af:14:f6:e5:93:53:a8:43:e4:3b:58: 70:70:c8:0c:8a:82:d7:e1:21:b8:b8:91:be:5f:9a:31:86:7e: ef:94:14:ad:3a:0b:b1:5c:9d:f1:bd:46:35:3c:f3:15:c0:4f: 95:35:4a:10:b5:32:98:75:cd:66:91:9d:e8:ad:0d:de:da:f2: c3:43:0a:cd:c7:ae:8e:d1:a5:e9:de:ad:a3:e9:f8:3f:8a:9e: 77:e2:51:ec:0e:d7:69:19:97:7e:5b:d2:1c:ae:ff:07:ff:d5: e6:e4:66:1e:a4:bf:4c:92:6d:f8:4b:9a:b9:32:65:1e:11:4e: e0:36:b8:49:a2:4b:75:ff:8f:67:07:e7:f0:8c:bb:6d:ac:c3: e6:9e:56:0b:eb:76:56:d0:64:37:31:e5:44:52:8c:2c:2e:1b: 2e:f4:3f:3e:c6:29:33:e7:a0:0e:b5:b0:8f:39:87:54:2b:27: 36:77:e3:e3:f8:f7:3b:f5:ca:4f:40:c0:b0:18:12:bc:da:21: ad:ba:9d:db:4f:fa:45:87:fd:2f:43:1e:47:6c:99:70:34:19: 4c:6c:7a:f3:10:ff:11:06:b4:bd:25:10:3b:36:bd:97:af:d6: 46:1b:6e:86:41:1d:c2:24:fe:45:22:da:26:28:6e:fa:4d:b0: 72:84:3e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw7eTGfl/fjy2zMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjJjM2ZlZTctOTMzMy00MjlkLTg3YjUtMWI1MjU3NTk4NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpoV3ss4EP08RPXeA5dhZzlcT98yUAgqLHnJ KSsn2fWKpo81POh0rZoHY2DSNw2Zadjd0dVsEI9qCTbWBWExrXehs6dWQC93YUy0 RfmqQ61AQxns/E5dXLD/WBJpgLHNeDnxycsPxdFwRJBIiAFFBUypJYdKuNZhJE9g Zn6KfzY/sgHY4wVyboEmnmiU9LVMBaRaVvqmN+1nBy6NUPT902prWZWmzC0DPUVh pLlU729J3wK93UgW4alZFxYeu/lPNLvLfAFUANBgAobuRiRJS/2m9GURjqZqlxvS kYuhNfPJKbtL3kXb/wkTcXefNwaYDmf+G2skO45sSX2Bgqg5pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzgrWeUAvnVkaoQ5TFKzy0gadtgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjgyNTUxZTMtMmE5NS0z OTAzLTkwODUtYTMyN2EzZGI1MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9Hc1q3SF+vFPblk1OoQ+Q7WHBwyAyKgtfhIbi4kb5fmjGGfu+UFK06 C7FcnfG9RjU88xXAT5U1ShC1Mph1zWaRneitDd7a8sNDCs3Hro7RpeneraPp+D+K nnfiUewO12kZl35b0hyu/wf/1ebkZh6kv0ySbfhLmrkyZR4RTuA2uEmiS3X/j2cH 5/CMu22sw+aeVgvrdlbQZDcx5URSjCwuGy70Pz7GKTPnoA61sI85h1QrJzZ34+P4 9zv1yk9AwLAYErzaIa26ndtP+kWH/S9DHkdsmXA0GUxsevMQ/xEGtL0lEDs2vZev 1kYbboZBHcIk/kUi2iYobvpNsHKEPqA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:28:50 2025 by rpki-client