$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa File: a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa (raw, json) Hash identifier: Ylf6ROLqImqoSshntMQlroShL0QB5OSHMx+Qr6upPoo= Subject key identifier: C8:09:BC:7A:BB:CE:DD:4C:CA:22:C2:6A:06:8A:CC:BD:50:E5:3A:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2B3A4C313D25E383BB500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.16.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:b3:a4:c3:13:d2:5e:38:3b:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5bd9b687-f4b7-4e33-93e2-d4e1e8cb6f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:22:0a:2e:9d:59:ef:ae:ed:b2:49:02:48:77: 8f:25:85:75:f6:52:b4:25:f7:45:20:fc:51:ac:35: 51:d7:88:62:7d:e8:1d:eb:00:8f:19:8b:3a:9b:f0: bf:6a:b9:3d:91:6e:0c:49:9e:15:97:29:49:13:72: d7:ba:9c:bc:85:09:90:a8:6d:bb:84:12:b4:f8:5c: fa:5b:e1:b8:b5:c0:5d:e3:1d:36:74:6d:5d:01:fb: 04:f0:aa:86:4b:a0:29:16:46:d3:74:89:83:88:49: c7:b2:5e:ed:23:f4:7e:fa:3a:24:fa:47:33:b1:92: 6c:cc:9b:20:c8:bb:67:0c:52:a9:2e:c8:d8:73:eb: 28:56:f5:75:a5:8d:d7:52:f7:97:71:f8:f8:b6:a3: 61:75:6d:68:55:c7:83:83:11:4e:d6:33:e4:ee:c5: d6:03:10:a6:a4:61:79:0d:11:6c:5f:8c:b9:ab:41: b6:68:5a:51:e0:b6:a8:38:81:46:aa:16:1a:90:9f: d3:d2:65:d0:b4:ee:41:49:b1:e6:cb:03:49:64:c1: 14:57:8e:69:77:89:7a:fd:9a:5b:d1:2b:a9:7e:e2: f4:a2:d9:88:3e:26:95:59:c1:d5:7b:df:0b:cf:d2: be:92:86:af:84:3b:ba:f3:76:eb:25:b3:e9:77:5a: 35:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:09:BC:7A:BB:CE:DD:4C:CA:22:C2:6A:06:8A:CC:BD:50:E5:3A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:3e:46:0a:94:bc:02:6d:f8:16:2b:a9:6b:af:a6:60:61:0a: 73:6f:35:44:8d:6f:db:1c:c7:fa:e2:af:d8:82:f6:b4:e8:01: 0d:cb:82:09:73:d0:89:a8:a7:bc:58:42:68:00:e8:b7:3b:31: 11:6b:d3:53:7f:d0:77:1c:49:e2:ec:f0:61:d8:95:9d:99:46: d4:8b:3d:42:28:3d:cd:20:3d:0b:e5:f8:14:36:af:32:04:4c: 36:c4:c2:cc:bf:de:76:3d:b3:e5:75:10:9f:3a:47:e1:7b:b2: 9a:b8:80:3b:08:cd:9c:e4:2d:fb:ab:ca:4f:07:0b:99:cb:cc: c5:da:f8:73:1f:1e:2b:b8:12:8a:4b:f7:61:26:4d:e2:fa:0e: cf:86:93:be:0b:f8:0b:5b:cd:82:c6:90:d7:5d:cc:d9:34:3c: dc:13:09:db:77:4e:90:f3:63:25:0f:41:9b:20:60:af:e6:15: 1b:21:39:a3:af:b4:bf:1d:20:0d:e8:57:5d:b3:56:6e:c6:ac: fa:8c:a4:e0:ef:fe:23:d2:24:e7:b2:77:6b:a4:67:cd:ae:68: 24:c9:9b:85:c1:7f:ac:59:ab:1a:f5:ed:b8:17:2b:7d:01:45: 42:ee:56:2e:61:41:71:e2:d7:74:50:e4:7f:08:93:0f:df:5b: 30:c1:75:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswrOkwxPSXjg7tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWJkOWI2ODctZjRiNy00ZTMzLTkzZTItZDRlMWU4Y2I2ZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyIKLp1Z767tskkCSHePJYV19lK0JfdFIPxR rDVR14hifegd6wCPGYs6m/C/ark9kW4MSZ4VlylJE3LXupy8hQmQqG27hBK0+Fz6 W+G4tcBd4x02dG1dAfsE8KqGS6ApFkbTdImDiEnHsl7tI/R++jok+kczsZJszJsg yLtnDFKpLsjYc+soVvV1pY3XUveXcfj4tqNhdW1oVceDgxFO1jPk7sXWAxCmpGF5 DRFsX4y5q0G2aFpR4LaoOIFGqhYakJ/T0mXQtO5BSbHmywNJZMEUV45pd4l6/Zpb 0SupfuL0otmIPiaVWcHVe98Lz9K+koavhDu683brJbPpd1o1LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgJvHq7zt1MyiLCagaKzL1Q5TrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNiMDZlNjgtZjE4OC0z YjY3LWE0MGUtNWRiZThkNjUwNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMs+RgqUvAJt+BYrqWuvpmBhCnNvNUSNb9scx/rir9iC9rToAQ3Lgglz 0Imop7xYQmgA6Lc7MRFr01N/0HccSeLs8GHYlZ2ZRtSLPUIoPc0gPQvl+BQ2rzIE TDbEwsy/3nY9s+V1EJ86R+F7spq4gDsIzZzkLfuryk8HC5nLzMXa+HMfHiu4EopL 92EmTeL6Ds+Gk74L+AtbzYLGkNddzNk0PNwTCdt3TpDzYyUPQZsgYK/mFRshOaOv tL8dIA3oV12zVm7GrPqMpODv/iPSJOeyd2ukZ82uaCTJm4XBf6xZqxr17bgXK30B RULuVi5hQXHi13RQ5H8Ikw/fWzDBdYA= -----END CERTIFICATE-----Generated at Sun Aug 24 03:56:12 2025 by rpki-client