$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2725d6a-6857-3613-941c-03c0a0ded740.roa File: b2725d6a-6857-3613-941c-03c0a0ded740.roa (raw, json) Hash identifier: 52WhPD/nvlK1u/FB2Jr/yWj0qN4KcHAJM9Ny1DzmwcI= Subject key identifier: 0C:AF:65:02:D2:F6:E7:26:57:48:E0:E2:CD:E4:E3:48:DD:E9:74:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC36F72A01D16EF96510A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2725d6a-6857-3613-941c-03c0a0ded740.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 76.149.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:6f:72:a0:1d:16:ef:96:51:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=63c18f52-c87b-46fd-85aa-6ede830453e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:da:ed:f0:bb:2a:48:0e:cf:82:6a:a4:0d:af: 1f:c3:f9:66:0f:d9:90:d5:36:48:7b:86:e4:6b:f2: 10:ac:55:fd:14:63:46:84:f0:f2:dd:0f:f8:c9:46: 5b:94:31:67:7d:5a:e7:d3:03:58:1b:e0:81:bd:13: 04:67:1a:cb:a1:b2:c0:7f:be:80:80:9a:9e:7d:d0: 57:9f:3b:6e:72:5a:e5:ce:7a:0e:ae:63:49:db:bf: 7a:28:6a:20:bc:11:ec:a6:8d:7b:38:4e:ef:16:e4: b7:09:e1:81:77:0f:3c:c7:fe:33:62:51:83:51:a0: 5a:db:78:27:b0:97:7b:89:e1:98:6e:4c:e4:da:09: b0:9e:b2:0d:48:70:b5:45:8a:34:19:1f:f5:cd:26: 6f:5b:0d:73:84:53:ab:a3:d5:c9:2f:8f:be:79:9e: 54:97:91:00:86:8a:b9:6c:e3:29:81:82:b4:4d:8c: 23:2a:f7:ec:8d:92:29:52:d1:f6:b0:24:8b:48:9d: 40:e2:fb:0d:b6:2d:2d:69:57:89:e3:e0:13:43:9c: 41:d0:ba:ca:54:e2:75:86:2b:94:60:d4:c6:1c:79: 4b:3e:8e:dc:e9:e8:cf:47:c2:a2:3a:ee:d1:cf:b2: 83:6e:c5:16:50:f9:1d:46:50:71:f2:66:6e:cb:b9: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AF:65:02:D2:F6:E7:26:57:48:E0:E2:CD:E4:E3:48:DD:E9:74:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2725d6a-6857-3613-941c-03c0a0ded740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.149.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:18:ea:90:fd:28:52:66:74:1d:72:8b:05:0a:b8:85:1f:b6: 48:02:65:6f:9d:a6:34:bc:6e:44:02:c1:f0:b0:45:42:ab:48: 88:cb:ed:69:50:13:0d:39:b1:e2:53:f8:28:5f:64:70:9e:31: a3:9d:78:36:87:56:11:66:d3:c7:e7:b8:13:3d:e1:59:1b:4a: 2c:88:87:d5:e1:b3:16:26:a5:56:fd:e8:71:b5:95:0b:2d:78: 3a:cd:d4:e2:89:fd:4f:44:fe:0c:05:28:06:92:e4:3d:b2:3d: 17:04:15:a2:2d:69:6b:e8:c1:10:a0:1f:a3:c5:13:60:cc:b8: ca:7c:ce:d7:2e:e2:cc:b8:94:b9:19:cc:64:37:9c:b5:02:97: 09:ae:32:49:be:86:8d:77:a8:fc:14:3b:f6:97:f0:0e:d1:5b: be:4e:a7:86:10:e6:ee:ee:b7:f3:4d:02:0d:40:12:e9:fc:43: 59:f7:f2:93:21:c0:55:4e:8a:11:8b:f6:b0:1d:06:b2:b3:d6: 66:78:34:cc:d9:29:d2:aa:7b:58:d1:a7:06:96:2f:b8:22:b8: 36:6a:50:fa:a1:1a:47:4b:8f:07:7e:fc:79:7e:08:49:c7:f2: 2e:51:1a:85:a1:6f:33:8f:c7:98:eb:fb:46:ae:94:72:97:73: 0f:17:51:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw29yoB0W75ZRCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjNjMThmNTItYzg3Yi00NmZkLTg1YWEtNmVkZTgzMDQ1M2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNrt8LsqSA7PgmqkDa8fw/lmD9mQ1TZIe4bk a/IQrFX9FGNGhPDy3Q/4yUZblDFnfVrn0wNYG+CBvRMEZxrLobLAf76AgJqefdBX nztuclrlznoOrmNJ2796KGogvBHspo17OE7vFuS3CeGBdw88x/4zYlGDUaBa23gn sJd7ieGYbkzk2gmwnrINSHC1RYo0GR/1zSZvWw1zhFOro9XJL4++eZ5Ul5EAhoq5 bOMpgYK0TYwjKvfsjZIpUtH2sCSLSJ1A4vsNti0taVeJ4+ATQ5xB0LrKVOJ1hiuU YNTGHHlLPo7c6ejPR8KiOu7Rz7KDbsUWUPkdRlBx8mZuy7nsOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyvZQLS9ucmV0jg4s3k40jd6XRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjI3MjVkNmEtNjg1Ny0z NjEzLTk0MWMtMDNjMGEwZGVkNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJWiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgY6pD9KFJmdB1yiwUKuIUftkgCZW+dpjS8bkQCwfCwRUKrSIjL7WlQ Ew05seJT+ChfZHCeMaOdeDaHVhFm08fnuBM94VkbSiyIh9XhsxYmpVb96HG1lQst eDrN1OKJ/U9E/gwFKAaS5D2yPRcEFaItaWvowRCgH6PFE2DMuMp8ztcu4sy4lLkZ zGQ3nLUClwmuMkm+ho13qPwUO/aX8A7RW75Op4YQ5u7ut/NNAg1AEun8Q1n38pMh wFVOihGL9rAdBrKz1mZ4NMzZKdKqe1jRpwaWL7giuDZqUPqhGkdLjwd+/Hl+CEnH 8i5RGoWhbzOPx5jr+0aulHKXcw8XUUQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:50 2025 by rpki-client