$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a1e22d7-51ae-385f-8e4f-22441e25920e.roa File: 7a1e22d7-51ae-385f-8e4f-22441e25920e.roa (raw, json) Hash identifier: 2WEkHlWAUK70Q7HjDqU+KH9DqacZAL+zXFMvI2SMZLI= Subject key identifier: 87:03:A5:FF:5C:4F:2A:F3:CD:3B:F2:23:3E:45:DE:53:9A:27:FA:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2AA4BE4987A08680FAE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a1e22d7-51ae-385f-8e4f-22441e25920e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.141.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:aa:4b:e4:98:7a:08:68:0f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=51530887-14e8-4bd4-8be6-eab321c76d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:11:48:0c:82:b7:19:66:09:a1:d3:79:59: 55:b8:5d:65:d7:5b:1b:23:27:08:bd:13:7d:74:8d: 0a:19:33:be:c1:b4:b7:02:de:66:ef:89:17:8e:19: 49:ab:29:99:ad:66:09:a4:53:f2:5a:ca:3b:60:49: 50:ad:74:c5:8d:2f:a0:90:fd:d9:d4:db:25:bd:df: e6:e2:c8:f0:c1:a3:dc:ca:f6:50:90:8f:38:c7:b0: 39:8c:7b:4c:28:07:6a:c2:f1:b0:c3:ca:9d:f0:27: 83:dc:e6:02:8c:f4:eb:04:b7:9b:dd:0c:1a:21:01: 20:2f:62:05:59:7f:37:9a:98:5b:18:6d:22:ad:63: a4:44:8b:de:5e:00:e7:d0:b8:5d:49:51:f3:09:86: b0:22:5e:a9:66:18:3b:7e:df:78:93:da:c8:ef:2a: 42:a0:ba:c3:48:11:48:22:97:be:a6:d8:d5:23:b3: b8:78:53:ec:56:2f:a9:10:ef:7b:86:5d:61:c2:b1: 3a:67:e7:65:03:59:9f:c4:6d:2d:e6:d4:a5:1e:2d: cc:42:e7:b0:70:bc:7e:d6:d7:9a:5b:4c:9d:c9:1d: 9d:05:e7:92:e2:1c:c1:47:af:29:ab:54:1d:bf:d2: 21:55:91:99:4a:5d:f8:36:76:82:43:48:02:8c:4d: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:03:A5:FF:5C:4F:2A:F3:CD:3B:F2:23:3E:45:DE:53:9A:27:FA:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a1e22d7-51ae-385f-8e4f-22441e25920e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.141.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:dd:41:20:ad:db:ea:a3:a8:f6:fc:9e:f7:78:bb:95:78:bf: 20:ff:16:e4:89:c3:45:25:06:a2:3e:4a:b4:44:8a:3b:9d:12: b3:c3:98:ab:d0:c6:5f:b9:69:e5:08:70:25:06:e1:ff:2f:e8: 5c:9b:3c:ef:5e:7e:7d:5e:9f:9a:aa:50:9d:5e:e7:e6:3c:98: a5:58:cd:94:db:cc:77:17:41:ca:1b:f9:85:b9:c8:a6:5f:85: 74:47:e1:ad:45:25:55:f4:55:a8:19:6a:3a:09:97:04:c9:d5: 9b:12:85:ab:48:33:fc:17:cf:ca:73:a6:09:6f:8d:0d:b3:4d: fd:d4:93:6a:fb:4d:0a:9c:c6:a1:e9:0f:19:fb:37:03:75:31: 4e:3a:b7:5d:19:64:f5:95:5c:55:d9:e7:7e:63:ad:99:b7:38: 73:49:e2:12:74:eb:7d:51:d4:c9:c2:f5:b3:bd:6f:58:7b:ab: 13:8b:da:65:07:e4:26:91:fc:84:b8:e9:54:a8:e8:b6:06:7b: 7d:97:0b:5d:42:1e:af:9f:bc:d2:ec:f2:9d:0c:90:2f:ba:f9: d4:8a:4b:ac:1e:3b:eb:41:de:92:31:46:12:a5:32:11:98:0d: 51:2b:d8:56:89:50:bf:f4:a2:54:49:dd:22:a3:c9:f7:30:c4: 25:32:1f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswqpL5Jh6CGgProAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTE1MzA4ODctMTRlOC00YmQ0LThiZTYtZWFiMzIxYzc2ZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfURSAyCtxlmCaHTeVlVuF1l11sbIycIvRN9 dI0KGTO+wbS3At5m74kXjhlJqymZrWYJpFPyWso7YElQrXTFjS+gkP3Z1Nslvd/m 4sjwwaPcyvZQkI84x7A5jHtMKAdqwvGww8qd8CeD3OYCjPTrBLeb3QwaIQEgL2IF WX83mphbGG0irWOkRIveXgDn0LhdSVHzCYawIl6pZhg7ft94k9rI7ypCoLrDSBFI Ipe+ptjVI7O4eFPsVi+pEO97hl1hwrE6Z+dlA1mfxG0t5tSlHi3MQuewcLx+1tea W0ydyR2dBeeS4hzBR68pq1Qdv9IhVZGZSl34NnaCQ0gCjE28nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcDpf9cTyrzzTvyIz5F3lOaJ/rDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2ExZTIyZDctNTFhZS0z ODVmLThlNGYtMjI0NDFlMjU5MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLdQSCt2+qjqPb8nvd4u5V4vyD/FuSJw0UlBqI+SrREijudErPDmKvQ xl+5aeUIcCUG4f8v6FybPO9efn1en5qqUJ1e5+Y8mKVYzZTbzHcXQcob+YW5yKZf hXRH4a1FJVX0VagZajoJlwTJ1ZsShatIM/wXz8pzpglvjQ2zTf3Uk2r7TQqcxqHp Dxn7NwN1MU46t10ZZPWVXFXZ535jrZm3OHNJ4hJ0631R1MnC9bO9b1h7qxOL2mUH 5CaR/IS46VSo6LYGe32XC11CHq+fvNLs8p0MkC+6+dSKS6weO+tB3pIxRhKlMhGY DVEr2FaJUL/0olRJ3SKjyfcwxCUyH2c= -----END CERTIFICATE-----Generated at Sat Aug 23 23:21:47 2025 by rpki-client