$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef793a6-a65d-3684-92b6-e0a28a343e78.roa File: cef793a6-a65d-3684-92b6-e0a28a343e78.roa (raw, json) Hash identifier: W4ryZhZrWX4bXwGJunim2k4O+cDK2PiypV16PG2Q3OM= Subject key identifier: A9:47:DF:62:E0:B9:DE:62:FB:30:DB:5E:70:88:35:8B:49:94:E8:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC36A88F5AF9C5E9CD1B600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef793a6-a65d-3684-92b6-e0a28a343e78.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 76.23.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:6a:88:f5:af:9c:5e:9c:d1:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=dd32efa1-5ca3-4193-8315-5063fdfc00dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:06:8b:cf:22:5e:b9:e0:72:24:b3:7b:c5: a2:6c:fb:bd:3e:3f:78:4c:e9:dd:08:a7:72:cb:e8: 62:a5:30:ac:9b:00:d8:e0:26:0b:a0:f8:87:09:81: 02:31:43:44:d0:30:bf:b2:0f:92:fa:39:30:f4:2b: f3:24:b4:19:80:4c:6b:39:68:18:87:e6:93:06:5c: 73:83:f0:c9:a9:69:45:05:2b:f9:a7:1f:8a:eb:e3: d5:f7:20:0a:c2:fe:ff:24:b1:ac:1d:c4:c7:7e:ea: da:7a:7c:67:34:cc:4a:73:da:05:39:09:43:53:c1: a6:ee:2f:b5:2a:25:fc:ec:90:62:f7:76:00:66:2b: 7f:14:3d:f8:64:d8:16:7e:3a:63:a0:ed:c2:35:0c: 50:ad:5b:45:96:29:f5:9e:97:36:e0:90:21:7b:ee: fc:46:99:46:0a:94:5b:b4:c0:b6:5c:69:6b:b5:ad: 1c:aa:b6:51:96:ab:50:78:71:68:ab:0c:49:a7:40: 33:84:d9:13:23:4e:5b:77:55:10:75:1d:87:cd:51: 21:82:ef:60:d9:5f:47:c5:80:cb:00:52:43:be:f4: a3:d1:ce:84:78:08:67:9c:24:24:d0:94:c9:ac:c6: 89:86:d2:36:f1:fe:7a:0c:4f:ef:77:4f:b0:d5:89: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:47:DF:62:E0:B9:DE:62:FB:30:DB:5E:70:88:35:8B:49:94:E8:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef793a6-a65d-3684-92b6-e0a28a343e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.23.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d1:8a:b0:45:19:14:69:a1:f9:19:40:47:07:29:c8:a3:df: 09:2e:f4:81:10:05:1b:0d:70:87:9e:a9:d3:4b:9c:55:08:a3: 2b:e9:0d:e6:3f:ff:55:ad:6a:32:89:67:ef:da:1f:0c:53:0c: 1e:c4:bd:d0:ff:00:d2:ef:7a:76:d0:b0:58:b7:10:ef:aa:80: 85:d4:7d:3e:92:8a:b3:94:4b:e6:1d:9f:71:b9:29:ca:84:0f: b4:89:44:45:f8:dc:09:c1:02:bf:d4:06:ee:e1:c4:57:a4:a5: 53:8e:17:92:c3:e4:6c:7e:e1:8f:1f:31:06:dc:7c:41:73:27: da:2c:fd:01:e4:f0:28:13:a4:03:86:b6:fe:d8:13:35:4b:e7: 4f:bf:99:8e:4b:8c:50:9b:d2:e9:77:d8:f2:11:ae:4f:e9:5c: b3:e4:5c:a0:a3:3d:4f:67:83:4d:c8:ec:d6:e2:17:7f:38:cb: c2:f5:a2:25:7c:e6:24:31:15:93:c9:93:8b:6b:5a:c9:14:69: 67:fd:c4:a7:96:9b:45:c5:a1:af:61:28:12:6c:66:00:7f:a8: 29:c7:49:cf:31:ad:17:61:7a:66:87:0b:bd:3a:06:dc:af:2a: 03:52:b5:04:30:94:a5:0f:0b:12:b1:ec:ea:40:7d:33:59:cf: e7:5a:f0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw2qI9a+cXpzRtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGQzMmVmYTEtNWNhMy00MTkzLTgzMTUtNTA2M2ZkZmMwMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxwGi88iXrngciSze8WibPu9Pj94TOndCKdy y+hipTCsmwDY4CYLoPiHCYECMUNE0DC/sg+S+jkw9CvzJLQZgExrOWgYh+aTBlxz g/DJqWlFBSv5px+K6+PV9yAKwv7/JLGsHcTHfuraenxnNMxKc9oFOQlDU8Gm7i+1 KiX87JBi93YAZit/FD34ZNgWfjpjoO3CNQxQrVtFlin1npc24JAhe+78RplGCpRb tMC2XGlrta0cqrZRlqtQeHFoqwxJp0AzhNkTI05bd1UQdR2HzVEhgu9g2V9HxYDL AFJDvvSj0c6EeAhnnCQk0JTJrMaJhtI28f56DE/vd0+w1YkFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlH32Lgud5i+zDbXnCINYtJlOg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2VmNzkzYTYtYTY1ZC0z Njg0LTkyYjYtZTBhMjhhMzQzZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTRirBFGRRpofkZQEcHKcij3wku9IEQBRsNcIeeqdNLnFUIoyvpDeY/ /1WtajKJZ+/aHwxTDB7EvdD/ANLvenbQsFi3EO+qgIXUfT6SirOUS+Ydn3G5KcqE D7SJREX43AnBAr/UBu7hxFekpVOOF5LD5Gx+4Y8fMQbcfEFzJ9os/QHk8CgTpAOG tv7YEzVL50+/mY5LjFCb0ul32PIRrk/pXLPkXKCjPU9ng03I7NbiF384y8L1oiV8 5iQxFZPJk4trWskUaWf9xKeWm0XFoa9hKBJsZgB/qCnHSc8xrRdhemaHC706Btyv KgNStQQwlKUPCxKx7OpAfTNZz+da8ME= -----END CERTIFICATE-----Generated at Sun Aug 24 04:04:46 2025 by rpki-client