$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b07c3cf6-f125-3d92-898f-8754c4d02ecd.roa File: b07c3cf6-f125-3d92-898f-8754c4d02ecd.roa (raw, json) Hash identifier: V2jO9g/CvzgF8riNnJ57ilzoJdQ/jnRtCtF+oAWOBeM= Subject key identifier: 3E:17:B8:B4:4E:91:28:A6:8C:E9:FC:60:34:16:75:27:F1:F3:4D:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1BF84A280C26E6BA94500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b07c3cf6-f125-3d92-898f-8754c4d02ecd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 76.117.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:bf:84:a2:80:c2:6e:6b:a9:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d6db73f8-dff4-433e-a4c9-47dd4d4867e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:00:d6:09:5b:2a:d1:1d:ac:b0:c9:a7:25: b0:f0:b0:2c:33:05:b1:ef:72:80:58:54:62:1c:b3: b1:15:fb:b6:86:cc:13:3e:45:9b:2f:4d:7a:a2:7b: 5f:a3:01:72:ba:23:3f:d2:3c:70:ce:77:86:79:da: ff:1a:9e:80:d1:9a:d5:00:7b:95:0d:0b:51:0b:e5: 3a:d9:7d:7d:27:34:6d:d4:65:5a:5d:a9:ef:da:ee: 80:cf:03:38:48:a6:17:96:d9:81:e8:ff:09:f2:c6: 37:ec:af:ac:a1:31:b8:b0:4b:c2:c8:61:66:86:41: fb:64:c0:62:1f:e3:7c:71:51:f1:a3:45:76:de:97: 00:a2:34:eb:20:e5:fc:b0:4e:46:d9:2b:0d:fb:9c: 68:c4:b4:93:7d:15:ca:4e:75:41:d5:ec:1c:3a:f4: c6:40:75:39:ad:36:e0:0b:c3:3b:53:77:fa:ee:08: 84:9e:98:d7:3d:f0:43:d3:c2:c8:38:10:a1:44:dc: 2a:92:8b:82:42:63:96:8e:55:c9:cf:f4:d9:71:e5: 33:5d:f2:aa:ec:71:62:3d:66:16:c2:c4:82:52:90: 42:3b:f3:0a:48:37:9c:35:1e:d7:cc:7c:47:35:9a: 43:74:78:bc:54:b3:5a:4e:17:d9:38:12:db:fb:e3: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:17:B8:B4:4E:91:28:A6:8C:E9:FC:60:34:16:75:27:F1:F3:4D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b07c3cf6-f125-3d92-898f-8754c4d02ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.117.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7f:5a:89:8c:f0:bb:8c:61:62:62:91:e5:ae:93:1b:0d:e3: b7:9b:90:14:91:89:be:9a:ef:7b:9a:71:4e:0d:a9:b1:b8:d4: d5:c2:e9:2d:3b:41:aa:d1:3f:0d:0f:c7:0e:3e:16:2a:b5:a3: c2:c8:60:46:a0:c3:93:43:ad:69:e5:c1:a3:2d:e3:85:85:5b: 04:d6:a4:73:0f:b6:b0:bb:1f:7f:6e:40:4b:e5:df:cf:bf:3a: fc:78:68:31:56:f9:d9:c2:c3:49:9f:ef:5d:15:a2:75:17:b0: 86:46:38:c5:fa:5c:80:0e:7e:74:ff:c2:d5:3d:7b:a0:1c:cc: 96:3f:14:af:d9:bd:eb:a2:72:72:81:46:f2:0b:6c:0f:06:38: 97:99:64:27:01:76:04:4a:c4:16:02:cb:8d:d1:97:eb:e6:51: 80:f8:25:05:c2:ed:8d:fa:04:82:77:87:b1:f7:c9:28:4d:f2: 5d:dc:b3:cf:ab:eb:d1:04:22:0d:df:79:54:05:e4:49:f9:29: cf:7b:2b:55:15:74:00:a8:d3:71:59:17:1d:d3:9a:3d:29:31: f5:93:3e:b9:f3:d8:7f:fa:9b:dc:e4:50:53:e0:53:4a:f1:e9: a9:4f:ad:a8:85:c8:59:aa:2c:5f:97:2a:e2:93:b7:be:e5:20: 7b:be:d5:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswb+EooDCbmupRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDZkYjczZjgtZGZmNC00MzNlLWE0YzktNDdkZDRkNDg2N2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+4A1glbKtEdrLDJpyWw8LAsMwWx73KAWFRi HLOxFfu2hswTPkWbL016ontfowFyuiM/0jxwzneGedr/Gp6A0ZrVAHuVDQtRC+U6 2X19JzRt1GVaXanv2u6AzwM4SKYXltmB6P8J8sY37K+soTG4sEvCyGFmhkH7ZMBi H+N8cVHxo0V23pcAojTrIOX8sE5G2SsN+5xoxLSTfRXKTnVB1ewcOvTGQHU5rTbg C8M7U3f67giEnpjXPfBD08LIOBChRNwqkouCQmOWjlXJz/TZceUzXfKq7HFiPWYW wsSCUpBCO/MKSDecNR7XzHxHNZpDdHi8VLNaThfZOBLb++Mx7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4XuLROkSimjOn8YDQWdSfx800oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjA3YzNjZjYtZjEyNS0z ZDkyLTg5OGYtODc1NGM0ZDAyZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN/WomM8LuMYWJikeWukxsN47ebkBSRib6a73uacU4NqbG41NXC6S07 QarRPw0Pxw4+Fiq1o8LIYEagw5NDrWnlwaMt44WFWwTWpHMPtrC7H39uQEvl38+/ Ovx4aDFW+dnCw0mf710VonUXsIZGOMX6XIAOfnT/wtU9e6AczJY/FK/ZveuicnKB RvILbA8GOJeZZCcBdgRKxBYCy43Rl+vmUYD4JQXC7Y36BIJ3h7H3yShN8l3cs8+r 69EEIg3feVQF5En5Kc97K1UVdACo03FZFx3Tmj0pMfWTPrnz2H/6m9zkUFPgU0rx 6alPraiFyFmqLF+XKuKTt77lIHu+1ZM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:08:25 2025 by rpki-client