$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2b84474-ac84-3050-ab49-8937effb39ac.roa File: b2b84474-ac84-3050-ab49-8937effb39ac.roa (raw, json) Hash identifier: 3ZNAQizAOnptsl7z+oHOkOf9QdGUsTpkbHjZMCevmGI= Subject key identifier: B9:21:9F:88:93:04:EB:3D:01:78:86:B9:28:85:65:62:9F:4F:49:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4CD21EDA1AF1ABFD356C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2b84474-ac84-3050-ab49-8937effb39ac.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.16.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:cd:21:ed:a1:af:1a:bf:d3:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b7f141c4-cfb0-41fd-b2e8-8a2cbc17dc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:30:70:a1:f8:00:8c:27:b9:ea:01:70:36: 54:20:ec:95:50:91:0d:dc:48:b4:fb:f4:ed:45:ac: 62:5f:04:9b:ad:b8:71:bc:29:c4:44:2a:5f:63:b3: 28:01:82:47:50:7a:ad:e2:69:eb:6a:18:84:ff:dc: de:24:47:d8:2a:46:59:dc:48:f7:44:c2:fb:4e:24: 30:dc:81:2a:f8:61:9d:2b:8b:0d:3d:f1:5e:e8:8a: 63:ad:42:c7:7b:d1:f4:2e:1a:f2:68:91:4c:4f:ad: f7:53:2e:de:06:61:a2:11:3f:6f:a1:17:96:dd:16: 3b:38:19:89:3a:ec:f5:85:87:2d:92:ff:51:0a:03: ea:5c:52:b4:45:ec:69:8e:63:6c:5b:c4:5e:16:ad: 72:d0:bc:a3:b8:17:fc:d1:d4:90:12:5e:b4:32:55: e3:b2:ee:bb:0c:46:84:14:e2:84:25:6c:a9:85:af: 9e:9b:5a:dc:15:84:1c:bd:4f:a0:a8:7c:50:07:85: 57:d0:f9:06:a6:d9:b7:fc:e0:c1:9d:6c:06:52:94: 37:ed:1f:89:49:5b:bd:3e:f2:8e:58:d5:6b:2a:1c: 53:7b:93:e7:d8:90:f3:62:6a:b7:72:d3:8d:c4:cf: 65:bd:b4:4b:eb:a3:9c:6a:77:2b:58:d5:f3:c6:ab: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:21:9F:88:93:04:EB:3D:01:78:86:B9:28:85:65:62:9F:4F:49:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2b84474-ac84-3050-ab49-8937effb39ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:fa:63:3c:93:e9:90:5f:57:16:4b:bc:dc:c9:67:e5:6b:a7: 9f:83:ec:a5:c0:51:49:9e:45:88:8c:8c:2c:93:4c:33:e1:d4: 8f:c6:8a:e9:8c:ff:16:d3:f1:16:96:89:07:2d:0d:7a:85:73: 1f:66:d0:22:c2:3c:03:93:0f:e5:06:d1:11:5a:a5:12:f7:c1: bc:7a:2e:9b:c0:89:db:af:cb:6d:43:02:1e:6a:b1:3e:96:90: 07:be:e9:e8:d8:c6:bd:5a:26:18:eb:8b:e4:73:50:71:a4:04: 99:f7:ee:f8:18:13:47:f3:1b:0e:5b:f7:56:58:02:5d:2e:7c: f0:80:f9:83:78:eb:b2:e1:24:a2:6c:88:4d:24:e3:8f:5b:04: c9:ec:41:43:0e:b4:c9:86:70:b5:22:54:6f:77:14:de:b2:46: f3:e1:71:97:f9:42:ac:fe:dc:e6:60:35:10:7f:2c:f1:e9:83: 2e:ac:07:af:9c:07:cc:48:ed:89:48:be:3a:57:89:8c:df:96: f8:ab:15:7b:be:22:e7:3e:d6:49:4d:12:1a:c3:d7:3f:20:4a: 49:45:1f:6d:27:5e:30:f0:57:8a:0a:2e:ef:73:fe:e1:05:2a: 31:7f:bb:0d:4d:78:ff:e0:3a:fa:51:f5:b4:5f:eb:43:4e:32: b0:89:e8:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxM0h7aGvGr/TVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjdmMTQxYzQtY2ZiMC00MWZkLWIyZTgtOGEyY2JjMTdkYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCAwcKH4AIwnueoBcDZUIOyVUJEN3Ei0+/Tt RaxiXwSbrbhxvCnERCpfY7MoAYJHUHqt4mnrahiE/9zeJEfYKkZZ3Ej3RML7TiQw 3IEq+GGdK4sNPfFe6IpjrULHe9H0LhryaJFMT633Uy7eBmGiET9voReW3RY7OBmJ Ouz1hYctkv9RCgPqXFK0RexpjmNsW8ReFq1y0LyjuBf80dSQEl60MlXjsu67DEaE FOKEJWypha+em1rcFYQcvU+gqHxQB4VX0PkGptm3/ODBnWwGUpQ37R+JSVu9PvKO WNVrKhxTe5Pn2JDzYmq3ctONxM9lvbRL66OcancrWNXzxqsg/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkhn4iTBOs9AXiGuSiFZWKfT0lDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJiODQ0NzQtYWM4NC0z MDUwLWFiNDktODkzN2VmZmIzOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv6YzyT6ZBfVxZLvNzJZ+Vrp5+D7KXAUUmeRYiMjCyTTDPh1I/GiumM /xbT8RaWiQctDXqFcx9m0CLCPAOTD+UG0RFapRL3wbx6LpvAiduvy21DAh5qsT6W kAe+6ejYxr1aJhjri+RzUHGkBJn37vgYE0fzGw5b91ZYAl0ufPCA+YN467LhJKJs iE0k449bBMnsQUMOtMmGcLUiVG93FN6yRvPhcZf5Qqz+3OZgNRB/LPHpgy6sB6+c B8xI7YlIvjpXiYzflvirFXu+Iuc+1klNEhrD1z8gSklFH20nXjDwV4oKLu9z/uEF KjF/uw1NeP/gOvpR9bRf60NOMrCJ6HI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:57:18 2025 by rpki-client