$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac81c68-6960-3c30-92bf-a1d5a180e911.roa File: cac81c68-6960-3c30-92bf-a1d5a180e911.roa (raw, json) Hash identifier: 2PwdN5gGI8HnbqU+qhl7/0h3ZYS6P41EU/9FJT41ANs= Subject key identifier: 7A:8A:24:9C:B7:26:99:68:8A:CE:C2:1F:4E:F5:1F:26:4B:72:8D:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC561C03AA7FE1E284E1880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac81c68-6960-3c30-92bf-a1d5a180e911.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.133.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:61:c0:3a:a7:fe:1e:28:4e:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=59e34a94-4e38-49af-9da2-30bbaf723eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:46:64:10:3c:02:f9:72:91:0a:d4:14:c4: 2c:2f:09:ef:f4:d6:34:6c:26:36:ed:d1:ca:db:75: e1:87:0e:67:4f:66:da:91:1b:2c:d1:4d:b3:45:62: cb:aa:85:08:80:6f:ff:69:b7:a2:e3:6b:ed:68:17: e8:4e:da:e4:95:31:62:34:ae:54:51:22:70:eb:17: 89:d4:1d:e4:e7:32:f1:12:fc:aa:b4:37:41:f7:a6: 48:23:1c:d2:5d:4a:51:9c:c2:2a:57:aa:b5:84:b9: 87:57:22:ad:e8:b4:b0:81:8e:69:4c:d5:24:22:d7: 61:f2:82:19:ff:49:3c:9c:24:f4:7d:17:59:ad:52: 7c:04:4c:d6:7f:ea:8f:50:6e:26:95:00:d0:c5:ce: 9e:32:b2:68:b8:6f:26:b4:5e:12:2b:f7:df:7c:22: 15:f0:30:43:6d:af:d2:63:83:f3:7d:11:5e:9e:f6: 8e:f5:14:49:e9:1b:07:af:88:aa:7a:39:c4:35:a6: f1:13:52:0b:df:d8:91:a4:39:b6:85:a6:52:3d:e5: 4c:2d:68:08:d4:d9:a3:b3:36:f9:ff:20:a9:13:e0: 26:c1:cc:78:50:f3:20:3d:12:92:d9:ae:b9:86:b1: 12:77:91:80:39:35:80:7c:57:62:d9:a5:bd:b1:60: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8A:24:9C:B7:26:99:68:8A:CE:C2:1F:4E:F5:1F:26:4B:72:8D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac81c68-6960-3c30-92bf-a1d5a180e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f1:c9:34:54:48:4a:4d:16:41:56:81:51:66:84:21:d2:d6: f8:31:8e:75:73:28:47:96:3b:89:48:8a:9e:8f:c8:a0:36:7a: bd:7a:4b:0d:97:ec:b3:3a:02:b7:e0:be:b8:ad:91:44:f6:3c: 76:a6:ac:0b:ee:fc:6a:c4:0d:21:2e:c1:4e:78:e5:5e:0f:32: 0b:86:5c:36:02:ed:58:5a:a3:2c:87:21:17:74:11:2c:56:87: c6:73:1f:3e:43:c6:d4:c0:98:42:48:29:96:ce:a6:89:5a:85: b3:2e:10:c4:80:be:bf:4d:6e:6a:ab:19:eb:72:f8:11:6f:13: b6:7f:5a:bf:00:8e:9d:0b:1a:d3:ff:79:bd:9a:7f:aa:e4:46: 2a:19:a4:40:88:ff:8b:30:09:76:3b:e0:24:aa:32:44:22:cf: 36:a2:3d:f5:37:c3:db:f2:22:ea:03:f0:ff:cc:ee:2c:26:ca: b6:14:b2:91:76:bc:d6:8a:e9:6e:08:a4:b2:61:e5:20:a3:b6: c6:f9:ba:0d:7e:67:dc:b1:7a:8e:38:44:b8:f4:c2:48:cc:cc: ba:c4:1a:11:40:98:ce:6d:13:12:75:dd:7d:22:e1:07:5d:b1: dc:9e:45:af:d7:a0:da:5e:39:a9:b2:29:87:d1:47:30:a8:ed: 6a:df:4b:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWHAOqf+HihOGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTllMzRhOTQtNGUzOC00OWFmLTlkYTItMzBiYmFmNzIzZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnZGZBA8AvlykQrUFMQsLwnv9NY0bCY27dHK 23Xhhw5nT2bakRss0U2zRWLLqoUIgG//abei42vtaBfoTtrklTFiNK5UUSJw6xeJ 1B3k5zLxEvyqtDdB96ZIIxzSXUpRnMIqV6q1hLmHVyKt6LSwgY5pTNUkItdh8oIZ /0k8nCT0fRdZrVJ8BEzWf+qPUG4mlQDQxc6eMrJouG8mtF4SK/fffCIV8DBDba/S Y4PzfRFenvaO9RRJ6RsHr4iqejnENabxE1IL39iRpDm2haZSPeVMLWgI1Nmjszb5 /yCpE+Amwcx4UPMgPRKS2a65hrESd5GAOTWAfFdi2aW9sWDfjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqKJJy3Jplois7CH071HyZLco1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FjODFjNjgtNjk2MC0z YzMwLTkyYmYtYTFkNWExODBlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbxyTRUSEpNFkFWgVFmhCHS1vgxjnVzKEeWO4lIip6PyKA2er16Sw2X 7LM6ArfgvritkUT2PHamrAvu/GrEDSEuwU545V4PMguGXDYC7VhaoyyHIRd0ESxW h8ZzHz5DxtTAmEJIKZbOpolahbMuEMSAvr9NbmqrGety+BFvE7Z/Wr8Ajp0LGtP/ eb2af6rkRioZpECI/4swCXY74CSqMkQizzaiPfU3w9vyIuoD8P/M7iwmyrYUspF2 vNaK6W4IpLJh5SCjtsb5ug1+Z9yxeo44RLj0wkjMzLrEGhFAmM5tExJ13X0i4Qdd sdyeRa/XoNpeOamyKYfRRzCo7WrfS1g= -----END CERTIFICATE-----Generated at Sat Aug 23 23:27:50 2025 by rpki-client