$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa File: ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa (raw, json) Hash identifier: xL3jYLP0YcxLwXz6HEtJ77KgR4LqlLWKTm6+kNMM0dc= Subject key identifier: 03:8F:BD:F4:E5:18:23:4C:E7:0A:A2:9E:21:69:77:CE:27:04:BD:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1FC1CD881B05741348F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 76.124.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:fc:1c:d8:81:b0:57:41:34:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4f9bd520-f8ba-4310-8165-c599fa844683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:27:d4:d6:8e:de:eb:55:97:73:2b:1a:1d: c4:de:b3:12:28:0c:07:fb:49:f5:73:28:c2:a8:a3: 21:58:b2:1b:88:8e:b4:06:51:4e:00:8a:38:37:8f: 2c:e9:d7:40:41:da:86:96:66:cc:d6:f4:45:a2:45: ba:13:63:84:c9:c4:a1:d6:19:6b:8b:b6:fa:c2:73: fd:70:19:4b:47:3c:55:b9:52:81:7c:f6:a5:9d:40: f2:7a:71:78:0c:78:79:e1:4a:6f:c1:24:09:95:13: 55:81:c4:c5:0f:9c:c4:1f:71:e8:88:de:ea:d2:cb: dc:94:66:2c:e4:25:00:4d:c8:10:3f:5f:9d:c9:1f: 35:0d:0a:35:70:76:d1:61:08:7a:f8:0d:ff:fd:ed: 9b:c6:47:c2:d8:79:0e:6e:55:9b:63:8b:9e:c3:d5: bf:86:10:66:03:70:eb:48:63:40:41:61:86:8e:0c: 9b:52:e2:c9:d4:7b:dd:70:63:d8:ad:4f:20:b6:26: 9e:e2:30:3c:8a:10:db:08:7d:42:e2:e3:82:30:98: 7b:6d:c9:32:61:92:63:5d:d3:4c:44:11:cc:14:04: 7c:33:ec:a8:2e:d5:fe:b7:a4:b4:d0:50:c8:7a:64: a6:20:ee:b6:54:c3:2e:06:fe:c8:e7:aa:aa:4c:39: 08:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8F:BD:F4:E5:18:23:4C:E7:0A:A2:9E:21:69:77:CE:27:04:BD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:19:af:07:85:84:4b:ad:7a:f5:be:5d:4f:11:5c:27:ca:5b: 06:28:ab:c3:07:e6:f0:5e:00:e9:65:e0:62:1e:4a:9f:19:4e: 68:6b:81:31:56:b6:01:a0:19:af:89:b1:35:63:49:46:5d:9b: f4:e0:95:2e:2d:17:14:c4:ce:b4:17:15:5d:49:08:ac:3b:76: 9d:6b:18:cc:c4:13:d5:69:53:b0:b4:58:6f:b7:2f:a5:10:ed: 4d:fb:d3:bf:b9:e2:63:48:a2:9d:d4:d7:e0:4c:71:bc:59:10: 76:ba:8d:f4:23:70:7d:f7:df:2d:23:9f:69:fc:7e:dc:53:39: a9:4b:8b:b6:f1:48:f5:94:48:c6:dd:fe:03:e3:af:74:7b:36: 80:63:33:95:07:7f:ff:55:1c:3c:81:bf:73:7e:7d:9f:d8:e8: 01:1b:fc:3a:78:2b:a7:0c:1f:1c:6b:1b:b0:b7:fe:29:79:11: b3:ff:cc:4f:ab:69:fc:1b:3d:33:32:06:42:55:cd:59:cf:8f: 41:b4:c3:db:d5:0b:e5:a9:50:56:28:6e:d2:7c:d9:4e:9c:98: 31:59:7d:86:c7:9e:42:0d:ce:70:2f:dc:28:05:19:a6:a1:56: ab:79:80:8f:81:73:cb:3c:66:14:b4:3f:88:7f:70:a5:c5:46: ff:ea:0b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswfwc2IGwV0E0j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGY5YmQ1MjAtZjhiYS00MzEwLTgxNjUtYzU5OWZhODQ0NjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroUn1NaO3utVl3MrGh3E3rMSKAwH+0n1cyjC qKMhWLIbiI60BlFOAIo4N48s6ddAQdqGlmbM1vRFokW6E2OEycSh1hlri7b6wnP9 cBlLRzxVuVKBfPalnUDyenF4DHh54UpvwSQJlRNVgcTFD5zEH3HoiN7q0svclGYs 5CUATcgQP1+dyR81DQo1cHbRYQh6+A3//e2bxkfC2HkOblWbY4uew9W/hhBmA3Dr SGNAQWGGjgybUuLJ1HvdcGPYrU8gtiae4jA8ihDbCH1C4uOCMJh7bckyYZJjXdNM RBHMFAR8M+yoLtX+t6S00FDIemSmIO62VMMuBv7I56qqTDkItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOPvfTlGCNM5wqiniFpd84nBL12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmExM2IwOWUtNzczZC0z NGJhLWJmZTktMWYxYzI4YzVkNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcZrweFhEutevW+XU8RXCfKWwYoq8MH5vBeAOll4GIeSp8ZTmhrgTFW tgGgGa+JsTVjSUZdm/TglS4tFxTEzrQXFV1JCKw7dp1rGMzEE9VpU7C0WG+3L6UQ 7U3707+54mNIop3U1+BMcbxZEHa6jfQjcH333y0jn2n8ftxTOalLi7bxSPWUSMbd /gPjr3R7NoBjM5UHf/9VHDyBv3N+fZ/Y6AEb/Dp4K6cMHxxrG7C3/il5EbP/zE+r afwbPTMyBkJVzVnPj0G0w9vVC+WpUFYobtJ82U6cmDFZfYbHnkINznAv3CgFGaah Vqt5gI+Bc8s8ZhS0P4h/cKXFRv/qC/c= -----END CERTIFICATE-----Generated at Sun Aug 24 01:18:05 2025 by rpki-client