$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad9c2ea0-9528-3c67-b981-c33fcaac061d.roa File: ad9c2ea0-9528-3c67-b981-c33fcaac061d.roa (raw, json) Hash identifier: lsuc9P3WS5AjuHDx1vCnIaEq7jpy0rF2HU4nAK3g9LA= Subject key identifier: 34:50:A7:81:66:23:7B:69:4E:A9:BA:FD:3B:86:EE:71:AA:7B:65:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5606A22BC2E45C0D9E980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad9c2ea0-9528-3c67-b981-c33fcaac061d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.132.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:60:6a:22:bc:2e:45:c0:d9:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=27be6dda-38af-4749-a262-479b63e95609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:5f:ed:81:d8:9e:9f:72:6e:9a:b2:c5:a9: ca:88:32:16:37:16:11:46:b1:d8:35:12:d3:53:6d: cd:f5:5a:c5:b1:0a:bf:9a:46:a1:2e:65:4b:81:3c: 17:03:e4:46:15:03:29:37:0e:a9:5f:59:d4:fb:c3: ae:7f:16:18:1e:48:f3:c7:d2:1a:9d:70:bb:42:91: ea:8a:e0:ed:21:34:08:8f:3d:df:91:52:71:bc:93: b2:47:2f:f6:53:2c:97:3c:96:25:ef:1a:d1:8d:17: e9:62:db:e2:7a:b8:96:28:4f:60:60:dd:c0:17:d9: 56:ba:91:1f:86:21:a8:18:27:bf:3d:f3:44:7e:d3: 7c:17:d0:b0:77:a1:38:0a:5d:3e:5b:3f:65:65:63: f9:b1:4e:e4:08:92:74:ad:a6:c3:a5:2f:fa:04:09: ef:b7:fa:9d:9e:2a:33:8e:8c:cd:93:7b:96:fc:d5: 19:e4:3a:de:52:d9:4c:ae:6d:cf:ef:22:98:d4:aa: fa:b9:d8:53:95:04:cf:8c:13:c5:a6:ab:4e:0b:00: c8:4f:c9:a4:a5:36:10:f6:0d:46:20:35:3b:c0:f5: 1d:da:f4:8e:8e:03:d7:64:c5:07:64:e1:6a:64:dd: 2e:86:f9:5c:39:6d:d2:86:d8:3e:f3:77:4e:04:56: ad:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:50:A7:81:66:23:7B:69:4E:A9:BA:FD:3B:86:EE:71:AA:7B:65:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad9c2ea0-9528-3c67-b981-c33fcaac061d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:93:b5:dd:8e:f2:48:e5:ab:70:46:88:1d:1b:80:57:fc:3a: c9:67:9d:e0:f4:b0:4c:d9:02:fa:b0:7b:7d:d5:ca:f3:e8:07: 6c:48:22:5a:40:1b:19:28:72:27:a4:73:dc:f7:bb:70:e3:b6: b6:74:c5:34:1c:54:a6:46:03:ea:14:ab:e7:3a:0b:8f:a6:71: 11:9a:c9:89:b5:a2:51:e2:7d:49:ba:19:59:19:7b:73:42:92: 2f:af:a0:a0:24:91:a2:0d:7d:3d:ce:b8:d1:4f:02:e7:5a:44: 4e:40:f8:19:69:c2:60:d3:f1:75:b8:b2:ae:60:c4:17:26:75: 31:a3:70:ec:b2:20:43:a0:87:49:09:dc:00:cf:e7:a6:50:e7: c5:11:c8:66:22:dc:dd:ab:54:3e:ab:70:d9:e5:b0:ee:aa:6b: 98:d4:b9:26:28:02:ce:53:17:81:41:15:e5:1b:2f:49:2b:9e: 01:70:e2:4b:53:2f:f4:39:7e:5a:11:d8:75:19:05:ff:7e:d4: 5a:50:44:a7:54:d5:b6:19:1d:64:9b:7e:42:82:70:da:4d:3b: 7c:28:8f:65:53:b5:42:72:4f:2e:5c:64:23:1b:c8:d4:39:60: 55:cd:a6:43:1d:53:95:b5:61:e4:85:7d:77:84:06:c8:3d:6f: 59:88:71:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWBqIrwuRcDZ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjdiZTZkZGEtMzhhZi00NzQ5LWEyNjItNDc5YjYzZTk1NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi51f7YHYnp9ybpqyxanKiDIWNxYRRrHYNRLT U23N9VrFsQq/mkahLmVLgTwXA+RGFQMpNw6pX1nU+8OufxYYHkjzx9IanXC7QpHq iuDtITQIjz3fkVJxvJOyRy/2UyyXPJYl7xrRjRfpYtvieriWKE9gYN3AF9lWupEf hiGoGCe/PfNEftN8F9Cwd6E4Cl0+Wz9lZWP5sU7kCJJ0rabDpS/6BAnvt/qdnioz jozNk3uW/NUZ5DreUtlMrm3P7yKY1Kr6udhTlQTPjBPFpqtOCwDIT8mkpTYQ9g1G IDU7wPUd2vSOjgPXZMUHZOFqZN0uhvlcOW3Shtg+83dOBFat4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRQp4FmI3tpTqm6/TuG7nGqe2XkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQ5YzJlYTAtOTUyOC0z YzY3LWI5ODEtYzMzZmNhYWMwNjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKTtd2O8kjlq3BGiB0bgFf8OslnneD0sEzZAvqwe33VyvPoB2xIIlpA Gxkociekc9z3u3DjtrZ0xTQcVKZGA+oUq+c6C4+mcRGayYm1olHifUm6GVkZe3NC ki+voKAkkaINfT3OuNFPAudaRE5A+BlpwmDT8XW4sq5gxBcmdTGjcOyyIEOgh0kJ 3ADP56ZQ58URyGYi3N2rVD6rcNnlsO6qa5jUuSYoAs5TF4FBFeUbL0krngFw4ktT L/Q5floR2HUZBf9+1FpQRKdU1bYZHWSbfkKCcNpNO3woj2VTtUJyTy5cZCMbyNQ5 YFXNpkMdU5W1YeSFfXeEBsg9b1mIcbU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:36:19 2025 by rpki-client