$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb8f85f-1504-345c-ab32-58013417a744.roa File: ceb8f85f-1504-345c-ab32-58013417a744.roa (raw, json) Hash identifier: nMgQcspZPB4cYuAhrYQad3H9A4S3vcFbSsCx5nG7lBU= Subject key identifier: F6:B5:E1:AC:D1:6E:08:A6:88:EF:3D:A6:4B:58:39:D1:F7:0D:06:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3356FBD1AC66D13AE8580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb8f85f-1504-345c-ab32-58013417a744.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.126.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:35:6f:bd:1a:c6:6d:13:ae:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=391dc82e-b4ab-4087-b5bc-57e807bbb180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:75:b0:8e:a4:e5:0f:b0:ba:52:c2:e9:c7: bd:cd:c8:ef:0d:fa:76:f1:c0:23:62:2b:57:c0:4e: 69:c9:68:7f:14:79:74:de:0c:d0:0e:0f:16:e0:8b: d0:75:8f:32:33:66:29:6f:20:86:45:7d:24:2e:c2: 66:e9:fc:4f:5d:12:06:20:d8:f4:b3:19:97:51:94: f4:b5:70:f5:f5:2a:70:8a:ef:fa:1c:c0:1f:8a:d7: 27:c8:61:42:eb:2e:a4:f5:22:d2:58:83:ef:e5:1a: 25:77:b0:21:17:46:ce:a6:c0:61:78:34:6b:37:9f: 8f:5c:46:d9:91:62:24:5f:55:c8:56:73:e1:4e:19: 4c:24:7d:78:87:76:58:82:1a:86:7c:10:1b:4e:a2: 1d:c9:b5:7b:ca:b8:29:f9:a9:ed:42:a9:42:66:ac: 62:bd:63:d5:a6:5d:df:ff:88:0b:12:66:e2:c8:bf: 55:9e:1f:45:03:01:d4:d1:04:fb:b1:fe:6b:62:9c: e0:20:b1:49:c9:c2:0e:2e:f7:18:82:b8:e0:64:ab: 51:78:e6:b5:8b:35:30:b7:b6:3a:e0:43:39:de:55: 51:2d:3b:7c:9a:48:0d:bc:83:16:f6:71:ed:74:2b: 34:61:10:f7:fb:20:31:3c:54:d0:16:51:df:9a:2f: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B5:E1:AC:D1:6E:08:A6:88:EF:3D:A6:4B:58:39:D1:F7:0D:06:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb8f85f-1504-345c-ab32-58013417a744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.126.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:58:15:17:d1:54:1b:d2:96:38:c6:5b:b0:cd:f6:17:58:8e: aa:db:dd:d6:65:a5:f3:02:28:7e:38:02:d9:37:6d:d9:26:15: cd:67:15:f0:a4:c9:ab:f3:ea:e0:24:e1:49:29:e9:41:c1:9d: 23:b3:ab:30:1b:12:22:ca:02:ed:35:4e:6d:25:5a:b8:9f:db: e8:60:da:59:8d:25:d9:f2:ef:8a:ce:97:e3:33:3b:1b:9b:95: b5:63:de:38:84:22:ec:fb:65:da:14:79:be:03:98:07:86:4a: c4:29:2b:e7:9b:a3:bc:83:c9:24:3f:8e:8a:34:a5:2e:d7:2a: 3e:cb:5b:53:58:57:b5:10:02:d5:8f:1b:57:05:c4:4a:d0:a7: 26:9e:0e:61:72:5b:b2:57:20:10:87:64:08:50:d1:21:74:8c: 5b:f8:67:2a:d1:f6:be:c2:2d:6e:ba:42:38:af:e4:be:09:4e: e9:2b:6f:21:14:9e:ae:03:3f:16:ac:44:98:26:26:a2:fd:41: 37:6c:59:7f:d4:0b:ee:9f:7c:45:74:81:01:a2:4a:71:ee:29: 56:12:42:66:f6:cb:3a:cf:89:f7:36:d0:2e:7c:84:4f:5e:9a: 6c:84:45:db:b4:a2:cf:9f:eb:37:c1:12:01:9b:09:d0:04:14: f6:b8:46:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswzVvvRrGbROuhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzkxZGM4MmUtYjRhYi00MDg3LWI1YmMtNTdlODA3YmJiMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmx1sI6k5Q+wulLC6ce9zcjvDfp28cAjYitX wE5pyWh/FHl03gzQDg8W4IvQdY8yM2YpbyCGRX0kLsJm6fxPXRIGINj0sxmXUZT0 tXD19Spwiu/6HMAfitcnyGFC6y6k9SLSWIPv5Rold7AhF0bOpsBheDRrN5+PXEbZ kWIkX1XIVnPhThlMJH14h3ZYghqGfBAbTqIdybV7yrgp+antQqlCZqxivWPVpl3f /4gLEmbiyL9Vnh9FAwHU0QT7sf5rYpzgILFJycIOLvcYgrjgZKtReOa1izUwt7Y6 4EM53lVRLTt8mkgNvIMW9nHtdCs0YRD3+yAxPFTQFlHfmi+Z/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa14azRbgimiO89pktYOdH3DQYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ViOGY4NWYtMTUwNC0z NDVjLWFiMzItNTgwMTM0MTdhNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTH6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZYFRfRVBvSljjGW7DN9hdYjqrb3dZlpfMCKH44Atk3bdkmFc1nFfCk yavz6uAk4Ukp6UHBnSOzqzAbEiLKAu01Tm0lWrif2+hg2lmNJdny74rOl+MzOxub lbVj3jiEIuz7ZdoUeb4DmAeGSsQpK+ebo7yDySQ/joo0pS7XKj7LW1NYV7UQAtWP G1cFxErQpyaeDmFyW7JXIBCHZAhQ0SF0jFv4ZyrR9r7CLW66Qjiv5L4JTukrbyEU nq4DPxasRJgmJqL9QTdsWX/UC+6ffEV0gQGiSnHuKVYSQmb2yzrPifc20C58hE9e mmyERdu0os+f6zfBEgGbCdAEFPa4RpQ= -----END CERTIFICATE-----Generated at Sun Aug 24 09:33:42 2025 by rpki-client