$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7599121f-3672-3de7-951e-70ab6823ec13.roa File: 7599121f-3672-3de7-951e-70ab6823ec13.roa (raw, json) Hash identifier: hMsMLuy2Lb6Jp8dJOGKS3w2Htk9l89XJXeTTAtz4Hc4= Subject key identifier: 77:F1:25:C3:C7:5B:4A:87:9A:8F:2A:6C:C2:78:DB:57:A4:9C:B2:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2AF38DBD9B882D0BB6F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7599121f-3672-3de7-951e-70ab6823ec13.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.150.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:af:38:db:d9:b8:82:d0:bb:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6cf3d88c-5c29-42e9-9fb5-ff3ad7b1a707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:3f:3b:fa:58:cd:20:82:ff:f0:e4:1d:02: 77:58:1a:fa:be:ab:90:6a:e8:c5:28:23:7d:db:be: c7:35:79:a2:f5:4f:64:a0:77:a4:16:49:5a:61:f1: ff:b2:40:d1:fb:12:33:ea:21:0d:70:38:6e:11:ef: c3:7c:72:60:b0:12:a4:0e:97:b7:71:b5:90:31:4a: b2:35:ab:3f:37:6a:96:33:da:a7:6f:b8:ff:0d:bc: 59:dc:3a:85:70:b0:30:8c:73:e1:96:40:d0:5b:0e: df:d0:ca:81:e3:6f:41:b6:50:7b:b5:92:5b:a5:b0: c3:c2:40:b9:79:de:f8:bb:d7:51:ae:fe:c5:ea:55: bf:7d:70:32:77:cb:57:7f:e3:74:fe:1e:73:42:17: eb:17:9e:af:ae:13:fa:aa:1f:bd:97:7f:60:d2:7f: 4d:86:10:5c:c8:8c:bc:92:3f:44:f0:5f:05:62:d1: a8:cc:61:e5:7a:aa:47:46:f2:54:ef:52:3c:3e:24: d3:05:e8:79:60:69:56:57:d3:22:40:76:03:10:c7: 8b:7e:57:7e:87:58:60:ec:ef:28:36:ab:4e:34:a9: 14:1a:bc:87:6e:10:79:1b:04:fb:c3:b9:2d:22:5c: 7e:cf:81:df:06:45:e5:5d:1a:49:45:82:9a:b7:11: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F1:25:C3:C7:5B:4A:87:9A:8F:2A:6C:C2:78:DB:57:A4:9C:B2:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7599121f-3672-3de7-951e-70ab6823ec13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.150.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:22:f5:cf:7a:ac:53:8e:a1:67:53:e9:fb:9b:56:11:f1:bd: 28:ed:51:0b:ec:de:6d:13:35:12:22:d7:87:65:cf:d6:19:02: 58:2b:ad:6f:e7:5b:bf:99:ca:19:5e:c5:eb:00:81:d3:0e:13: 32:f1:74:b0:f5:7d:b6:30:aa:60:60:1e:ab:d7:4e:24:ec:d4: c8:45:94:fa:57:b8:a0:f8:9d:75:04:24:72:cc:97:46:5d:ac: 0d:fa:2a:c9:96:0e:4d:35:a2:84:91:67:08:a2:27:f2:7e:78: 2f:05:c9:13:67:b7:c3:a8:5c:cb:1b:d3:da:8a:5e:54:e9:ed: dd:f6:9e:76:38:7f:d2:1f:5e:52:ba:4d:d7:8d:9d:20:6b:c3: 2b:b4:3b:7c:11:a5:42:81:00:a9:4d:e6:4d:1d:dc:05:d3:8b: fd:1d:9d:23:14:ba:11:3b:90:3a:87:41:9f:a6:ef:81:47:a9: 09:50:7b:d6:1b:13:9b:5e:53:fc:01:c0:c8:aa:5e:61:b5:69: d4:02:58:46:4c:68:27:7f:b5:7c:e5:55:51:92:7a:40:38:16: 4f:b6:cc:e6:53:1f:a1:59:df:63:8b:b0:ea:c8:31:e2:44:86: d5:c1:c1:cb:86:35:54:09:76:93:23:da:97:65:bd:32:59:29: d2:ba:65:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswq8429m4gtC7b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmNmM2Q4OGMtNWMyOS00MmU5LTlmYjUtZmYzYWQ3YjFhNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWI/O/pYzSCC//DkHQJ3WBr6vquQaujFKCN9 277HNXmi9U9koHekFklaYfH/skDR+xIz6iENcDhuEe/DfHJgsBKkDpe3cbWQMUqy Nas/N2qWM9qnb7j/DbxZ3DqFcLAwjHPhlkDQWw7f0MqB429BtlB7tZJbpbDDwkC5 ed74u9dRrv7F6lW/fXAyd8tXf+N0/h5zQhfrF56vrhP6qh+9l39g0n9NhhBcyIy8 kj9E8F8FYtGozGHleqpHRvJU71I8PiTTBeh5YGlWV9MiQHYDEMeLfld+h1hg7O8o NqtONKkUGryHbhB5GwT7w7ktIlx+z4HfBkXlXRpJRYKatxHqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfxJcPHW0qHmo8qbMJ421eknLK8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzU5OTEyMWYtMzY3Mi0z ZGU3LTk1MWUtNzBhYjY4MjNlYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgi9c96rFOOoWdT6fubVhHxvSjtUQvs3m0TNRIi14dlz9YZAlgrrW/n W7+ZyhlexesAgdMOEzLxdLD1fbYwqmBgHqvXTiTs1MhFlPpXuKD4nXUEJHLMl0Zd rA36KsmWDk01ooSRZwiiJ/J+eC8FyRNnt8OoXMsb09qKXlTp7d32nnY4f9IfXlK6 TdeNnSBrwyu0O3wRpUKBAKlN5k0d3AXTi/0dnSMUuhE7kDqHQZ+m74FHqQlQe9Yb E5teU/wBwMiqXmG1adQCWEZMaCd/tXzlVVGSekA4Fk+2zOZTH6FZ32OLsOrIMeJE htXBwcuGNVQJdpMj2pdlvTJZKdK6ZSI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:31:50 2025 by rpki-client