$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7357f4-718c-31b7-addb-7b5191c93b54.roa File: 8a7357f4-718c-31b7-addb-7b5191c93b54.roa (raw, json) Hash identifier: RlEMCM0w6QcyguCeatti0Ai10QAtuVvSdq6VFwCfoc0= Subject key identifier: 20:0A:8C:88:D4:0D:1E:42:75:C7:D2:C0:EA:3C:71:DD:05:37:D1:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2B499CB807F74FC324F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7357f4-718c-31b7-addb-7b5191c93b54.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.29.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:b4:99:cb:80:7f:74:fc:32:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6cee6f85-6ab6-448d-8b68-50f417098cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:8e:fc:03:39:69:15:ce:ed:87:e8:af:76: 2c:ea:21:e5:a9:3e:cb:78:15:89:44:63:89:41:c2: 18:88:30:fc:7a:67:79:d6:0e:f4:9e:a5:21:ab:4f: 78:42:ec:e7:c6:31:92:96:7d:e5:02:5c:33:81:e7: d7:d5:f6:34:f5:ae:cf:b9:41:32:64:09:5d:fe:1a: dc:17:32:15:ea:3d:c4:19:2f:44:7b:71:02:bf:bc: 20:49:55:05:43:e3:f7:be:54:dd:5f:79:2d:95:09: 3e:f6:f7:d7:b6:d1:80:95:ea:09:ca:74:d5:0c:49: 8d:ef:ff:f9:29:9c:c9:c5:f7:28:34:17:7b:7d:ac: 58:6d:38:5b:8c:31:ce:75:cd:74:a2:4b:e1:0e:b3: e5:b4:88:a4:5f:e3:78:91:cc:a2:93:50:0e:15:47: 18:f6:3e:ab:9c:18:8d:c1:97:3e:8c:71:c0:c1:66: db:e1:8f:d9:cf:bb:3f:89:6e:37:16:5a:41:5e:2e: 8f:ae:76:66:52:91:e9:78:52:f3:08:98:a8:cf:c2: 46:40:ae:29:df:3f:28:85:36:9f:a6:c4:9e:96:67: 96:11:fb:ad:b8:83:8c:73:1f:fe:c9:88:04:83:ba: da:24:f8:f5:f0:8f:34:d1:8e:0e:e8:16:d7:18:9d: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0A:8C:88:D4:0D:1E:42:75:C7:D2:C0:EA:3C:71:DD:05:37:D1:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7357f4-718c-31b7-addb-7b5191c93b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.29.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:88:c4:05:1f:3a:17:7b:b6:b1:b7:fe:4c:d3:d6:94:5a:a2: 1c:b4:df:07:df:e2:b7:8b:31:4a:54:bf:d1:78:a8:1a:48:4c: ec:dc:2b:61:b9:bd:96:bb:45:97:fd:58:45:47:ab:3a:ba:2c: 60:e8:f3:b1:a8:64:9b:d2:01:25:a4:0c:ab:37:09:bc:2e:56: ac:4e:5a:7b:2a:41:8e:e9:56:4c:52:5f:55:bc:75:aa:1c:38: d1:53:21:98:f1:e0:bf:bf:c8:01:cc:f2:5f:e8:8c:4c:d4:71: be:c5:e4:52:00:78:95:15:ee:0e:c4:ec:01:93:27:7e:ab:b9: 5a:ee:33:f7:b8:58:2a:a5:38:4c:0a:20:72:45:bc:98:08:ba: 2c:a6:12:20:9c:df:82:bd:10:3f:5c:1d:ca:ec:83:6f:b2:ee: 88:0b:0c:d4:28:8c:16:30:8d:6c:c2:cc:89:32:1d:7d:87:9a: 4b:ac:2a:1b:81:c1:bc:d7:c8:6d:b4:8f:cd:2a:53:1f:76:cd: be:06:cb:ba:e4:99:d3:05:e8:cb:bb:db:6f:d7:5b:c6:33:14: a2:a1:1b:63:39:1c:18:40:76:74:74:18:40:37:76:99:38:2b: a6:ad:90:d8:e2:51:21:b5:0f:bf:18:23:eb:02:17:88:05:26: 36:9b:17:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswrSZy4B/dPwyTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmNlZTZmODUtNmFiNi00NDhkLThiNjgtNTBmNDE3MDk4Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNmO/AM5aRXO7Yfor3Ys6iHlqT7LeBWJRGOJ QcIYiDD8emd51g70nqUhq094QuznxjGSln3lAlwzgefX1fY09a7PuUEyZAld/hrc FzIV6j3EGS9Ee3ECv7wgSVUFQ+P3vlTdX3ktlQk+9vfXttGAleoJynTVDEmN7//5 KZzJxfcoNBd7faxYbThbjDHOdc10okvhDrPltIikX+N4kcyik1AOFUcY9j6rnBiN wZc+jHHAwWbb4Y/Zz7s/iW43FlpBXi6PrnZmUpHpeFLzCJioz8JGQK4p3z8ohTaf psSelmeWEfutuIOMcx/+yYgEg7raJPj18I800Y4O6BbXGJ1GPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAKjIjUDR5CdcfSwOo8cd0FN9GXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE3MzU3ZjQtNzE4Yy0z MWI3LWFkZGItN2I1MTkxYzkzYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTB12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmIxAUfOhd7trG3/kzT1pRaohy03wff4reLMUpUv9F4qBpITOzcK2G5 vZa7RZf9WEVHqzq6LGDo87GoZJvSASWkDKs3CbwuVqxOWnsqQY7pVkxSX1W8daoc ONFTIZjx4L+/yAHM8l/ojEzUcb7F5FIAeJUV7g7E7AGTJ36ruVruM/e4WCqlOEwK IHJFvJgIuiymEiCc34K9ED9cHcrsg2+y7ogLDNQojBYwjWzCzIkyHX2HmkusKhuB wbzXyG20j80qUx92zb4Gy7rkmdMF6Mu722/XW8YzFKKhG2M5HBhAdnR0GEA3dpk4 K6atkNjiUSG1D78YI+sCF4gFJjabF4k= -----END CERTIFICATE-----Generated at Sat Aug 23 22:56:41 2025 by rpki-client