$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa File: 9cc09b8b-3d2b-385e-a9ac-443094369442.roa (raw, json) Hash identifier: WCsoUP5H4Tmi3aqnaMUV5RC3ymyvm7TpdfN5m0Ic2uw= Subject key identifier: BB:B3:D8:EF:33:F7:B3:88:E8:BF:63:4A:1C:5B:1B:23:E1:0A:5F:18 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4BEBB185BE630355DA940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.136.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:be:bb:18:5b:e6:30:35:5d:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4c311d8b-dad5-4d43-9dfb-83d09d011c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:17:d3:d1:56:e5:02:9f:22:67:81:5b:77:af: 90:6f:54:15:ba:9d:10:e3:fb:47:d8:91:46:ce:cb: e8:cd:0d:1c:a7:88:b8:8c:3e:e1:4c:e9:a6:4d:2e: b2:99:b4:3f:d3:4a:c6:36:a1:64:69:44:58:46:43: 43:57:e3:66:02:eb:f1:d3:a0:8c:d8:c4:b7:25:3c: 42:57:e8:f5:0a:cd:ba:f0:56:ed:a3:11:a8:ad:57: 2d:d8:d1:2d:87:70:0c:be:ad:ef:c7:bf:6e:75:45: 8a:bc:9a:ef:1e:7e:f4:02:3f:48:8b:d8:16:ce:18: cd:e1:f3:58:6c:08:3c:85:40:63:f1:0b:c8:f1:0d: a2:34:6d:b2:0f:2f:f1:89:62:28:66:64:8c:e2:b5: 7b:00:e1:18:53:e8:5b:af:67:6d:5a:5a:28:06:54: 2d:68:9d:12:08:1a:31:82:8d:5a:68:3a:d7:90:3b: 6f:e2:5e:36:93:fd:36:bf:ea:89:9f:af:be:33:cd: f5:26:5d:64:01:89:9a:7e:a2:c2:48:c0:97:e7:84: 9f:2d:5f:7e:5e:f8:54:1b:7f:c7:66:4a:59:8a:14: a3:7c:8a:fb:eb:fc:bc:b3:e7:0e:7d:d5:62:7e:fa: 0b:9b:39:7f:8c:f9:2d:f5:9c:c5:2b:d9:7b:ee:d3: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B3:D8:EF:33:F7:B3:88:E8:BF:63:4A:1C:5B:1B:23:E1:0A:5F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cc09b8b-3d2b-385e-a9ac-443094369442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e0:23:9a:62:9e:fd:92:0d:a2:f0:9b:4f:5f:63:73:85:93: 26:19:c6:56:8e:5d:08:61:f8:29:35:88:40:62:58:86:a9:d2: c2:b1:13:7a:87:46:75:76:20:fb:26:10:51:e4:88:69:81:bf: 5b:0c:db:aa:2e:6a:86:7d:3c:65:08:4e:55:5a:42:65:cb:0d: 6b:0e:21:d1:e7:0c:7d:57:ba:ad:61:05:05:af:09:97:7f:e9: 86:1c:8a:08:1a:03:ee:8d:d1:26:66:f8:03:46:18:f3:6f:d1: 26:95:78:05:f5:ea:a3:01:e6:a6:30:25:65:c8:16:92:72:bb: 19:61:e1:ef:66:31:c9:ca:a1:03:07:1d:89:0a:d0:27:ae:fe: 6a:f9:69:eb:ac:76:ed:5b:fd:d5:6b:8f:66:64:14:26:46:45: 32:ee:56:8e:3b:8e:9f:f3:a9:ef:2f:f6:9d:35:d8:31:cf:2e: e9:33:fd:9b:22:16:e1:98:56:ed:97:60:e0:7b:1a:f7:be:41: 28:1a:8d:71:99:7a:81:ce:61:25:81:46:3d:15:df:42:48:2a: bc:26:39:ea:43:3e:c9:36:81:0d:01:55:09:2f:39:e9:ef:fb: b6:e5:56:03:34:f5:03:7a:90:7c:d9:97:b7:02:52:9c:a8:7b: 4c:c6:f9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxL67GFvmMDVdqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGMzMTFkOGItZGFkNS00ZDQzLTlkZmItODNkMDlkMDExYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxfT0VblAp8iZ4Fbd6+Qb1QVup0Q4/tH2JFG zsvozQ0cp4i4jD7hTOmmTS6ymbQ/00rGNqFkaURYRkNDV+NmAuvx06CM2MS3JTxC V+j1Cs268FbtoxGorVct2NEth3AMvq3vx79udUWKvJrvHn70Aj9Ii9gWzhjN4fNY bAg8hUBj8QvI8Q2iNG2yDy/xiWIoZmSM4rV7AOEYU+hbr2dtWlooBlQtaJ0SCBox go1aaDrXkDtv4l42k/02v+qJn6++M831Jl1kAYmafqLCSMCX54SfLV9+XvhUG3/H ZkpZihSjfIr76/y8s+cOfdVifvoLmzl/jPkt9ZzFK9l77tNg1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuz2O8z97OI6L9jShxbGyPhCl8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWNjMDliOGItM2QyYi0z ODVlLWE5YWMtNDQzMDk0MzY5NDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7gI5pinv2SDaLwm09fY3OFkyYZxlaOXQhh+Ck1iEBiWIap0sKxE3qH RnV2IPsmEFHkiGmBv1sM26ouaoZ9PGUITlVaQmXLDWsOIdHnDH1Xuq1hBQWvCZd/ 6YYciggaA+6N0SZm+ANGGPNv0SaVeAX16qMB5qYwJWXIFpJyuxlh4e9mMcnKoQMH HYkK0Ceu/mr5aeusdu1b/dVrj2ZkFCZGRTLuVo47jp/zqe8v9p012DHPLukz/Zsi FuGYVu2XYOB7Gve+QSgajXGZeoHOYSWBRj0V30JIKrwmOepDPsk2gQ0BVQkvOenv +7blVgM09QN6kHzZl7cCUpyoe0zG+fI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:30:00 2025 by rpki-client