$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d038bf-b7e8-33cc-8939-72de394f6210.roa File: a7d038bf-b7e8-33cc-8939-72de394f6210.roa (raw, json) Hash identifier: FYdiSnlEcYFC04vwzSFND3Ad6mIACsSs7xJAd2zgJPs= Subject key identifier: C0:60:AB:28:97:EC:97:AF:16:D3:AF:D1:BA:66:C4:78:C9:FE:FF:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE031985B5875749DC5EA8D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d038bf-b7e8-33cc-8939-72de394f6210.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 33287 IP address blocks: 76.99.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:98:5b:58:75:74:9d:c5:ea:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=7112775c-7b68-44f3-9e75-1e370f4672c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3d:0a:58:6e:37:ef:d8:bb:82:5b:36:06:88: 17:70:ce:e3:60:76:69:a1:5d:da:12:0d:23:d3:d1: 98:a7:8a:84:7a:91:e9:b5:f3:f4:6c:5b:2e:7b:84: e7:85:38:b7:1a:6f:0c:03:09:53:85:ba:c2:e0:e0: 97:eb:cc:d1:67:33:a0:dc:d4:90:66:b6:e0:68:5b: 5b:59:06:aa:aa:d9:e3:85:47:52:85:42:87:76:6c: 30:56:eb:9e:ae:7e:3a:85:22:4d:da:39:bd:b7:2e: 34:a0:4a:90:60:d0:6e:da:29:4a:48:71:ff:12:37: a0:38:d1:c1:41:ae:1a:b0:ec:07:45:de:9d:b7:43: 6d:4e:12:b9:d3:31:8f:41:85:a5:c1:b8:b7:15:c3: 3c:94:fe:d1:aa:b1:1d:da:b1:3d:66:3c:cb:85:09: fa:0f:0e:29:d5:bf:86:e7:53:30:0e:33:6f:bf:1d: bb:00:71:0d:b0:1d:ad:c1:f2:81:c2:85:da:f9:fc: 47:f3:0a:aa:7c:df:33:ae:84:5f:09:85:61:d6:77: cb:ab:da:28:31:21:a2:0c:c6:d9:f0:aa:31:7c:bd: 20:16:78:5d:7c:1a:94:9a:f1:16:a0:6b:d9:20:b2: 54:a5:51:a6:81:0f:41:a9:b6:05:ac:72:bb:df:c2: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:60:AB:28:97:EC:97:AF:16:D3:AF:D1:BA:66:C4:78:C9:FE:FF:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7d038bf-b7e8-33cc-8939-72de394f6210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.99.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:47:2e:85:e3:8e:34:16:e8:b6:d2:1a:04:4f:82:67:99:7d: 7b:d7:2a:1f:a9:04:5b:1c:63:36:ad:f1:42:09:6d:f6:d0:b9: 6a:1d:8c:8b:f5:23:1b:4c:39:66:3d:97:9f:b7:eb:db:b3:4e: 56:fe:67:42:3c:8b:a8:3d:93:84:89:e1:ac:12:43:9d:e8:ce: 2d:50:d5:ec:21:05:bd:4b:bb:7a:b5:af:17:63:96:3a:e9:af: 86:b2:ce:13:91:bc:7a:4b:86:d6:39:bb:a4:c2:95:11:3f:cb: d4:3f:b7:69:8e:46:1a:ec:45:e1:19:f1:25:04:36:6a:a2:75: 03:68:47:62:9b:be:88:6f:24:76:20:03:18:4a:f8:83:2b:d8: f4:f6:28:94:7a:26:21:11:a0:91:57:17:3a:09:48:e7:fa:e9: 57:82:b1:74:e0:9b:6d:76:6e:b6:1e:37:f0:d7:2b:ef:cf:c4: 9e:88:1f:66:84:f7:c5:04:b8:d6:67:74:97:35:7c:f7:06:59: b2:8d:58:1d:3e:fe:20:51:e7:fe:89:db:f5:f3:a4:38:cc:cf: e9:e9:f2:09:ba:b0:4f:f7:16:ff:4d:fd:a4:7f:38:b7:96:ec: 55:3a:da:a6:79:77:d8:c5:7d:92:17:8d:6b:dc:36:e2:99:4d: 12:36:98:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMZhbWHV0ncXqjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NzExMjc3NWMtN2I2OC00NGYzLTllNzUtMWUzNzBmNDY3MmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT0KWG4379i7gls2BogXcM7jYHZpoV3aEg0j 09GYp4qEepHptfP0bFsue4TnhTi3Gm8MAwlThbrC4OCX68zRZzOg3NSQZrbgaFtb WQaqqtnjhUdShUKHdmwwVuuern46hSJN2jm9ty40oEqQYNBu2ilKSHH/EjegONHB Qa4asOwHRd6dt0NtThK50zGPQYWlwbi3FcM8lP7RqrEd2rE9ZjzLhQn6Dw4p1b+G 51MwDjNvvx27AHENsB2twfKBwoXa+fxH8wqqfN8zroRfCYVh1nfLq9ooMSGiDMbZ 8KoxfL0gFnhdfBqUmvEWoGvZILJUpVGmgQ9BqbYFrHK738IbZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBgqyiX7JevFtOv0bpmxHjJ/v8BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdkMDM4YmYtYjdlOC0z M2NjLTg5MzktNzJkZTM5NGY2MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATGPSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVHLoXjjjQW6LbSGgRPgmeZfXvXKh+pBFscYzat8UIJbfbQuWodjIv1 IxtMOWY9l5+369uzTlb+Z0I8i6g9k4SJ4awSQ53ozi1Q1ewhBb1Lu3q1rxdjljrp r4ayzhORvHpLhtY5u6TClRE/y9Q/t2mORhrsReEZ8SUENmqidQNoR2KbvohvJHYg AxhK+IMr2PT2KJR6JiERoJFXFzoJSOf66VeCsXTgm212brYeN/DXK+/PxJ6IH2aE 98UEuNZndJc1fPcGWbKNWB0+/iBR5/6J2/XzpDjMz+np8gm6sE/3Fv9N/aR/OLeW 7FU62qZ5d9jFfZIXjWvcNuKZTRI2mMA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:40:09 2025 by rpki-client