$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d26fab3d-5e67-3f72-a452-82b8757e11ef.roa File: d26fab3d-5e67-3f72-a452-82b8757e11ef.roa (raw, json) Hash identifier: 96hFypCP8FoZxKuiz4vgFf3Ob0HdF9aGp9MeT7LnSQ8= Subject key identifier: 85:90:27:01:46:0B:E1:8A:41:79:99:A3:83:DB:E2:61:2F:65:CD:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC16EC0E9869BE123D2DF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d26fab3d-5e67-3f72-a452-82b8757e11ef.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 76.140.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:6e:c0:e9:86:9b:e1:23:d2:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3a79ad99-5c8f-472f-a619-7c5c2984bc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:65:51:bb:56:2f:f9:90:37:6c:17:03:ab: ee:23:3c:75:67:53:3f:1e:4d:65:71:22:8a:28:b1: 49:34:67:dc:b5:c9:0d:e0:79:21:70:23:57:da:0b: ce:e1:b3:5c:66:68:23:7b:c0:ed:1e:34:3c:e6:bb: 44:da:92:00:e8:cc:92:40:09:0d:9b:f8:ba:b0:d1: 4c:6c:ce:3b:0d:fc:22:42:22:21:0c:32:bf:13:18: 3c:5e:df:70:ec:a1:76:1a:da:a3:49:7f:26:e9:4c: a0:18:1a:01:25:2b:47:62:bf:8e:a3:36:72:a8:d3: c9:7e:4c:61:86:f0:64:36:94:22:15:94:a6:f2:81: 68:25:75:40:85:06:fb:f1:dd:39:78:e0:06:bc:df: fb:c0:bc:11:2e:0c:93:18:a0:c1:f0:72:0d:f5:16: 77:25:cf:65:b3:ec:c5:cb:d1:27:11:13:02:2b:20: 1f:f2:58:dd:1c:ec:b8:fa:54:9d:93:a4:17:d9:ad: 82:cd:ca:b3:b0:48:15:bb:a3:04:24:64:d0:d3:11: e2:ef:4a:c7:f3:df:9e:fa:70:72:9e:cd:c2:cf:b3: 75:3f:89:b0:e1:a3:f2:be:87:cd:4e:e7:4e:03:bb: fc:67:83:49:c9:35:76:ca:fb:d6:35:45:85:ad:e6: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:90:27:01:46:0B:E1:8A:41:79:99:A3:83:DB:E2:61:2F:65:CD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d26fab3d-5e67-3f72-a452-82b8757e11ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.140.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4f:dd:6a:d6:cd:77:d1:65:59:60:8c:67:b8:23:1e:75:d6: 66:a3:83:1d:7b:6c:74:f0:93:c7:71:c6:f3:e9:c8:d3:cf:5c: fe:05:2e:66:36:24:59:ca:ad:5d:f2:38:cd:af:03:45:7e:54: 2e:f6:c6:13:3e:6f:2d:70:af:fb:94:1a:ba:0c:bc:85:f7:a1: be:cc:77:c1:b4:2c:49:91:53:49:c5:90:a4:d6:08:12:73:68: f0:91:de:d6:0e:5b:68:23:96:fc:db:a7:fd:7d:a3:43:89:a5: 9b:78:7f:ac:9a:16:14:fb:36:3b:1b:fc:b4:aa:37:1b:bc:6c: 3b:9e:5a:52:29:a4:72:3b:da:9f:9f:10:6c:8b:cd:a2:30:a2: 22:4d:d5:4c:dd:6c:79:6e:f8:2b:99:3d:87:c8:ff:6d:28:eb: 7a:c5:77:b7:0d:c6:e8:46:a3:fb:da:0c:3a:77:24:3f:0e:6a: c4:ad:65:af:7e:ea:45:b0:1b:08:d0:98:0e:a3:41:cc:7a:e1: 5b:1e:87:8f:48:fd:ec:bb:79:a9:4a:08:36:30:18:26:e8:fa: e0:33:60:65:a0:ff:e5:a5:29:02:2f:a7:6e:73:b7:80:4c:f9: 69:b4:54:08:5d:1c:f1:81:ae:a5:02:a4:85:b2:f0:7e:3d:2e: 52:27:2f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswW7A6Yab4SPS34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2E3OWFkOTktNWM4Zi00NzJmLWE2MTktN2M1YzI5ODRiYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc5lUbtWL/mQN2wXA6vuIzx1Z1M/Hk1lcSKK KLFJNGfctckN4HkhcCNX2gvO4bNcZmgje8DtHjQ85rtE2pIA6MySQAkNm/i6sNFM bM47DfwiQiIhDDK/Exg8Xt9w7KF2GtqjSX8m6UygGBoBJStHYr+OozZyqNPJfkxh hvBkNpQiFZSm8oFoJXVAhQb78d05eOAGvN/7wLwRLgyTGKDB8HIN9RZ3Jc9ls+zF y9EnERMCKyAf8ljdHOy4+lSdk6QX2a2CzcqzsEgVu6MEJGTQ0xHi70rH89+e+nBy ns3Cz7N1P4mw4aPyvofNTudOA7v8Z4NJyTV2yvvWNUWFreZPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWQJwFGC+GKQXmZo4Pb4mEvZc1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDI2ZmFiM2QtNWU2Ny0z ZjcyLWE0NTItODJiODc1N2UxMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTIxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChP3WrWzXfRZVlgjGe4Ix511majgx17bHTwk8dxxvPpyNPPXP4FLmY2 JFnKrV3yOM2vA0V+VC72xhM+by1wr/uUGroMvIX3ob7Md8G0LEmRU0nFkKTWCBJz aPCR3tYOW2gjlvzbp/19o0OJpZt4f6yaFhT7Njsb/LSqNxu8bDueWlIppHI72p+f EGyLzaIwoiJN1UzdbHlu+CuZPYfI/20o63rFd7cNxuhGo/vaDDp3JD8OasStZa9+ 6kWwGwjQmA6jQcx64Vseh49I/ey7ealKCDYwGCbo+uAzYGWg/+WlKQIvp25zt4BM +Wm0VAhdHPGBrqUCpIWy8H49LlInL78= -----END CERTIFICATE-----Generated at Sun Aug 24 01:17:50 2025 by rpki-client