$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99f81b3e-3a28-3dfc-b963-fbca3700e17f.roa File: 99f81b3e-3a28-3dfc-b963-fbca3700e17f.roa (raw, json) Hash identifier: y2U/Iy+takyj6Q6jglIDXnRH+uHbuhfyjTuzgjg8VfU= Subject key identifier: 62:0B:40:57:F2:C6:11:1B:31:07:66:75:04:29:B7:14:78:71:7F:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC33A48134BD083D0FFD800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99f81b3e-3a28-3dfc-b963-fbca3700e17f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.133.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:3a:48:13:4b:d0:83:d0:ff:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a89ffa04-a13b-4aea-a926-b0991fc92d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:1c:21:d6:27:23:0b:11:ca:7b:a2:0b:f2: 04:81:42:64:e9:58:b6:59:ab:12:d3:55:a8:7f:31: ec:f8:87:24:81:aa:f8:8d:91:05:fa:eb:14:d6:cd: 37:a1:10:7e:f0:c2:2c:6c:13:2c:11:4b:c6:db:c5: ae:24:6a:20:24:aa:12:0f:dc:36:fe:0b:04:0d:92: f3:27:36:03:15:6f:3e:f2:98:f4:7c:a4:5d:2e:7f: 27:c6:e9:a2:4f:76:ff:e8:1b:19:ac:ae:6d:85:44: 34:97:0d:1b:db:fd:0a:e0:c0:4e:bb:27:73:e8:0b: 92:b7:12:35:eb:b9:5d:f0:e8:06:6d:20:b8:f3:9e: 27:2e:8b:97:ef:c9:51:82:63:03:ec:db:f6:ec:1d: e4:e5:62:84:49:62:7f:f8:93:9f:f1:01:d5:86:92: 79:7c:1f:e7:be:9d:f1:6d:fc:16:17:a3:c3:47:b9: a2:d5:20:0d:a0:fb:33:a6:e2:20:1f:d4:be:2f:25: aa:1e:37:da:42:03:71:17:f4:5c:11:d1:f6:d8:b2: a0:ca:4e:94:3b:a3:85:d4:8b:2b:5e:a7:48:97:b9: 77:9f:16:17:fa:0d:b5:d7:94:51:88:ad:34:7e:97: 2b:e8:89:c0:94:22:bf:48:b5:6f:d8:30:d3:22:9a: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0B:40:57:F2:C6:11:1B:31:07:66:75:04:29:B7:14:78:71:7F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99f81b3e-3a28-3dfc-b963-fbca3700e17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:70:d2:b5:ae:26:a3:be:00:c9:c7:e6:ba:f9:56:5e:b9:83: f4:3f:1d:66:55:de:75:00:5a:82:81:b2:d0:df:91:45:43:c1: 39:00:1b:d2:f4:43:56:88:e6:0b:4b:00:41:63:1a:dc:58:14: 0f:4e:b2:7a:eb:23:93:84:1b:40:25:fb:b1:b3:83:c1:4f:29: 95:7d:a0:cb:42:ad:80:4f:ec:1e:3c:34:70:b8:34:22:88:b1: 59:f9:98:e7:86:df:5d:e3:c1:44:50:50:97:9e:b6:0f:cb:bd: ed:11:97:ec:c6:b0:4c:d0:12:4c:7f:87:5a:fa:4b:45:73:f4: e9:d4:fe:83:95:1f:6a:c1:79:9a:38:78:29:5a:fe:76:b2:cb: 37:41:c1:f3:5e:85:38:54:96:43:be:7c:b0:3c:0a:3d:5d:51: 60:94:94:d3:3e:e0:38:0a:b4:11:74:43:df:91:be:c8:09:84: 0d:6d:de:6e:31:44:b2:54:09:c0:5f:b1:7c:cf:40:50:34:6e: 22:57:7d:b4:11:2f:f9:ed:ce:43:1e:87:3f:bc:0d:40:b2:d9: cc:6d:5a:db:fc:05:e0:43:a8:6b:17:4d:d3:3c:4d:a4:f0:95: 15:99:e8:3e:23:fc:a9:3f:e7:b0:d4:50:24:18:c3:7c:f5:a0: 58:87:dd:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswzpIE0vQg9D/2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTg5ZmZhMDQtYTEzYi00YWVhLWE5MjYtYjA5OTFmYzkyZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L4cIdYnIwsRynuiC/IEgUJk6Vi2WasS01Wo fzHs+Ickgar4jZEF+usU1s03oRB+8MIsbBMsEUvG28WuJGogJKoSD9w2/gsEDZLz JzYDFW8+8pj0fKRdLn8nxumiT3b/6BsZrK5thUQ0lw0b2/0K4MBOuydz6AuStxI1 67ld8OgGbSC4854nLouX78lRgmMD7Nv27B3k5WKESWJ/+JOf8QHVhpJ5fB/nvp3x bfwWF6PDR7mi1SANoPszpuIgH9S+LyWqHjfaQgNxF/RcEdH22LKgyk6UO6OF1Isr XqdIl7l3nxYX+g2115RRiK00fpcr6InAlCK/SLVv2DDTIppsVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGILQFfyxhEbMQdmdQQptxR4cX9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTlmODFiM2UtM2EyOC0z ZGZjLWI5NjMtZmJjYTM3MDBlMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIV2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABw0rWuJqO+AMnH5rr5Vl65g/Q/HWZV3nUAWoKBstDfkUVDwTkAG9L0 Q1aI5gtLAEFjGtxYFA9OsnrrI5OEG0Al+7Gzg8FPKZV9oMtCrYBP7B48NHC4NCKI sVn5mOeG313jwURQUJeetg/Lve0Rl+zGsEzQEkx/h1r6S0Vz9OnU/oOVH2rBeZo4 eCla/nayyzdBwfNehThUlkO+fLA8Cj1dUWCUlNM+4DgKtBF0Q9+RvsgJhA1t3m4x RLJUCcBfsXzPQFA0biJXfbQRL/ntzkMehz+8DUCy2cxtWtv8BeBDqGsXTdM8TaTw lRWZ6D4j/Kk/57DUUCQYw3z1oFiH3Sw= -----END CERTIFICATE-----Generated at Sat Aug 23 23:01:20 2025 by rpki-client