$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cd9832f-9ebc-3c3a-9932-8ec1f2764de1.roa File: 9cd9832f-9ebc-3c3a-9932-8ec1f2764de1.roa (raw, json) Hash identifier: plcOTcshC2mmNtQdr+Z1/fNnYhXMI2QoB9clkOAZcr4= Subject key identifier: B7:AB:85:06:EE:F3:35:F9:78:AC:D9:A1:29:32:71:FC:12:19:32:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC36D6ABFA00AD260C0F680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cd9832f-9ebc-3c3a-9932-8ec1f2764de1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 76.129.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:6d:6a:bf:a0:0a:d2:60:c0:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=691e4a61-d3f7-4522-930d-b71ce65100f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b2:5b:bb:39:30:4e:23:4e:b5:62:b6:4f:29: 88:02:f5:b3:2b:e6:7b:fd:6b:86:26:9e:6f:0f:31: 5e:7a:c5:1f:b2:a0:fd:45:18:f2:84:ee:f1:27:73: 2e:75:e8:c3:ac:f4:ea:67:7d:f0:d2:10:2b:77:a2: 05:84:c5:03:18:a2:1b:ab:5e:46:99:59:a8:14:5f: 4c:6e:9d:f0:c7:02:17:81:9e:5c:03:6f:08:9a:d8: 4d:5c:99:2e:b6:ca:6b:e9:c5:bd:82:3e:7a:85:6b: 4f:d7:8d:0d:d1:0f:da:64:56:95:c6:26:1f:d2:49: 95:9e:74:77:9f:6f:e2:f6:d8:78:fe:d1:a8:f7:d0: 9e:ed:1a:42:89:76:06:01:c0:a5:84:03:1a:96:91: c3:33:11:76:22:da:fb:a5:c7:3c:3b:6c:d3:e4:42: 84:dd:48:03:d2:5a:18:31:73:d4:46:c6:64:03:bf: b7:35:71:74:32:10:44:b0:c8:9a:6d:d8:41:a5:7d: 78:a6:f0:c2:e2:56:0b:cf:1d:95:00:3a:36:1d:95: a2:6b:15:97:77:32:ab:31:a1:ed:26:31:db:7f:1c: 3f:48:27:28:2a:fc:37:af:ab:42:f2:09:3a:f2:87: 93:5a:a6:84:46:a9:e6:77:64:e6:49:67:a1:57:f6: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AB:85:06:EE:F3:35:F9:78:AC:D9:A1:29:32:71:FC:12:19:32:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cd9832f-9ebc-3c3a-9932-8ec1f2764de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:24:9f:bf:29:2d:96:5f:60:bb:f3:48:81:7e:d1:ae:2c:f3: 0f:69:6b:db:bd:34:6c:48:38:d9:c5:ab:0b:0a:7b:a0:cd:97: 6f:a5:d6:11:0d:93:e6:7f:c9:df:09:db:2b:9b:6a:dd:38:a3: 12:83:3c:73:c2:0c:03:22:a1:e1:c5:76:ca:03:81:14:e9:ac: 91:69:5c:b5:a4:66:b0:df:01:54:c5:c1:a4:f4:f4:0a:0e:47: c4:33:b7:4e:a0:b1:11:61:94:c2:a2:f3:4e:d8:10:f7:a6:87: d5:c8:a7:0c:0a:3d:b6:35:7f:cc:19:50:c8:c3:60:56:df:7d: 51:72:cb:46:07:84:cf:e5:6c:18:72:ba:ef:e9:84:8a:6c:3a: e6:1f:3b:53:cd:a6:4a:17:ad:12:e6:7a:dd:28:cd:ea:4f:b2: 20:d1:af:ca:96:1b:45:63:f7:ce:dd:ec:8e:55:90:b8:f2:bd: 16:c1:24:23:f1:01:d1:0e:57:dc:a7:1e:ad:24:d9:a0:f5:69: 89:62:e2:d6:0f:13:b7:9c:d7:d3:7e:5d:69:1a:3a:5c:c4:d6: 7a:28:09:65:4f:89:28:38:54:5c:b7:ed:bc:37:67:50:35:41: 2a:68:fb:e0:0a:2d:03:4d:38:f6:51:83:4b:28:e5:0b:b3:47: b5:eb:64:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw21qv6AK0mDA9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjkxZTRhNjEtZDNmNy00NTIyLTkzMGQtYjcxY2U2NTEwMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7JbuzkwTiNOtWK2TymIAvWzK+Z7/WuGJp5v DzFeesUfsqD9RRjyhO7xJ3MudejDrPTqZ33w0hArd6IFhMUDGKIbq15GmVmoFF9M bp3wxwIXgZ5cA28ImthNXJkutspr6cW9gj56hWtP140N0Q/aZFaVxiYf0kmVnnR3 n2/i9th4/tGo99Ce7RpCiXYGAcClhAMalpHDMxF2Itr7pcc8O2zT5EKE3UgD0loY MXPURsZkA7+3NXF0MhBEsMiabdhBpX14pvDC4lYLzx2VADo2HZWiaxWXdzKrMaHt JjHbfxw/SCcoKvw3r6tC8gk68oeTWqaERqnmd2TmSWehV/aURwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLerhQbu8zX5eKzZoSkycfwSGTJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWNkOTgzMmYtOWViYy0z YzNhLTk5MzItOGVjMWYyNzY0ZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYkn78pLZZfYLvzSIF+0a4s8w9pa9u9NGxIONnFqwsKe6DNl2+l1hEN k+Z/yd8J2yubat04oxKDPHPCDAMioeHFdsoDgRTprJFpXLWkZrDfAVTFwaT09AoO R8Qzt06gsRFhlMKi807YEPemh9XIpwwKPbY1f8wZUMjDYFbffVFyy0YHhM/lbBhy uu/phIpsOuYfO1PNpkoXrRLmet0ozepPsiDRr8qWG0Vj987d7I5VkLjyvRbBJCPx AdEOV9ynHq0k2aD1aYli4tYPE7ec19N+XWkaOlzE1nooCWVPiSg4VFy37bw3Z1A1 QSpo++AKLQNNOPZRg0so5QuzR7XrZE0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:15:29 2025 by rpki-client