$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c51a1eb3-a236-39d9-a103-ee9e2779f913.roa File: c51a1eb3-a236-39d9-a103-ee9e2779f913.roa (raw, json) Hash identifier: if3bo1M+e4lPX5LGptY92s7zt6rM1VCSuacPN8naXTA= Subject key identifier: 78:A3:EE:0C:AE:E9:40:A9:20:80:9D:64:E9:DA:86:CC:F2:A5:49:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1FBB9188F89E37AE30A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c51a1eb3-a236-39d9-a103-ee9e2779f913.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 76.124.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:fb:b9:18:8f:89:e3:7a:e3:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e611f6f1-1be5-46aa-9c83-59753d6e50ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:c8:3d:7a:49:fc:b8:37:a9:6f:e4:2b:fb: 29:75:ba:75:71:6e:14:ed:55:07:21:c0:8f:be:83: 0c:7e:0a:8c:c7:eb:bd:f7:7d:c2:b8:31:6f:f8:60: d7:ad:e1:a6:71:7d:8f:0f:63:19:ce:cb:2e:ca:44: 81:27:6f:fb:f1:29:dd:27:5a:fb:01:44:70:b9:73: 56:0c:b3:1c:66:59:14:d0:93:c0:53:8f:5a:8c:fe: 9e:f3:c3:53:06:0e:6f:5c:f9:e8:61:81:5d:07:df: 57:f9:e4:1a:5b:36:61:86:c2:05:d5:a4:1d:40:df: 46:a3:66:0f:d3:3e:34:a3:04:3b:5e:fb:80:c6:a0: 94:56:15:89:f3:59:e3:8c:25:a3:d9:e4:9e:78:97: f1:1a:5d:3c:ac:22:86:ec:dd:b2:ac:67:2e:b8:c7: cf:9f:f7:0b:45:00:eb:53:01:20:1d:52:d8:e6:7f: 1c:c7:65:71:92:5d:dd:61:2b:31:56:dc:3c:51:d2: 21:84:ec:01:f2:8b:73:70:f5:61:f4:de:98:4b:c6: f4:31:40:14:3e:cf:fd:a9:64:31:d2:7f:2a:b1:f9: c0:82:06:e8:52:43:71:b6:2b:2d:3b:14:d7:54:90: e7:60:45:35:7b:13:db:a5:77:43:aa:82:85:c5:d1: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A3:EE:0C:AE:E9:40:A9:20:80:9D:64:E9:DA:86:CC:F2:A5:49:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c51a1eb3-a236-39d9-a103-ee9e2779f913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e2:e8:45:fd:d1:ed:a8:0e:9b:53:97:9c:7e:84:bc:a8:63: ff:21:c4:49:a1:b2:00:3a:ba:8f:f4:72:2a:4a:c0:10:b0:f2: cc:54:04:3e:97:59:dd:9e:2c:b3:c6:36:e4:6e:e5:d8:d0:dc: a5:54:ea:6d:5d:42:dd:0a:34:2d:54:f0:7d:6b:d9:a8:0e:69: fa:ff:e3:60:0a:71:10:6e:44:87:4c:2f:15:67:9d:5d:e1:09: c9:06:6b:15:57:83:1e:fb:76:4e:c4:79:a4:c0:e9:76:d1:c7: fb:b6:59:69:4c:ed:10:ea:d9:ef:e9:3c:d1:1c:ca:dc:ca:1f: c1:91:a2:e8:39:77:80:3f:fe:59:0a:7e:c6:d6:32:8b:81:bf: 21:5e:e3:da:18:f1:92:5c:b9:72:0d:0a:55:5d:2f:4c:14:66: 7f:da:f1:1b:7b:09:c6:f4:0f:79:41:ad:f0:aa:f6:1b:65:9b: 11:48:b0:70:54:0e:59:cf:48:23:ac:27:d0:4c:aa:00:21:31: 87:f8:b9:ba:7a:67:fc:04:90:46:35:30:77:73:96:89:0f:b9: 74:06:96:1f:e0:6a:c6:2c:8b:b5:d4:9d:69:37:73:28:e3:1f: 11:09:fc:a3:2f:b3:9b:27:07:90:fc:5d:e3:8b:4f:bf:19:78: 97:9c:0a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswfu5GI+J43rjCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTYxMWY2ZjEtMWJlNS00NmFhLTljODMtNTk3NTNkNmU1MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgzIPXpJ/Lg3qW/kK/spdbp1cW4U7VUHIcCP voMMfgqMx+u9933CuDFv+GDXreGmcX2PD2MZzssuykSBJ2/78SndJ1r7AURwuXNW DLMcZlkU0JPAU49ajP6e88NTBg5vXPnoYYFdB99X+eQaWzZhhsIF1aQdQN9Go2YP 0z40owQ7XvuAxqCUVhWJ81njjCWj2eSeeJfxGl08rCKG7N2yrGcuuMfPn/cLRQDr UwEgHVLY5n8cx2Vxkl3dYSsxVtw8UdIhhOwB8otzcPVh9N6YS8b0MUAUPs/9qWQx 0n8qsfnAggboUkNxtistOxTXVJDnYEU1exPbpXdDqoKFxdEzuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHij7gyu6UCpIICdZOnahszypUl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzUxYTFlYjMtYTIzNi0z OWQ5LWExMDMtZWU5ZTI3NzlmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACri6EX90e2oDptTl5x+hLyoY/8hxEmhsgA6uo/0cipKwBCw8sxUBD6X Wd2eLLPGNuRu5djQ3KVU6m1dQt0KNC1U8H1r2agOafr/42AKcRBuRIdMLxVnnV3h CckGaxVXgx77dk7EeaTA6XbRx/u2WWlM7RDq2e/pPNEcytzKH8GRoug5d4A//lkK fsbWMouBvyFe49oY8ZJcuXINClVdL0wUZn/a8Rt7Ccb0D3lBrfCq9htlmxFIsHBU DlnPSCOsJ9BMqgAhMYf4ubp6Z/wEkEY1MHdzlokPuXQGlh/gasYsi7XUnWk3cyjj HxEJ/KMvs5snB5D8XeOLT78ZeJecClU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:57:11 2025 by rpki-client