$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d1884b-b944-36e9-b004-1dad2b53ff5f.roa File: d3d1884b-b944-36e9-b004-1dad2b53ff5f.roa (raw, json) Hash identifier: EtUFSlbxkfnJ2Nnz8ya3mQSmrw1OzCRwwAHohdQK92o= Subject key identifier: B1:30:AD:3F:45:D9:B1:24:96:D6:F9:E4:A0:74:3E:AD:72:C2:D8:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC563D1483DBC723CE6FC50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d1884b-b944-36e9-b004-1dad2b53ff5f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.133.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:63:d1:48:3d:bc:72:3c:e6:fc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3980fc1b-16cb-44ec-b385-a57a5f5bbe51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:3c:cf:75:ff:42:9e:7f:70:f7:3d:7c:9f: 95:28:70:09:c7:0a:7a:6d:0e:e6:75:bc:99:59:f7: 7c:e2:d3:e4:00:ff:e2:b9:29:c6:20:57:19:1f:21: 34:ef:86:72:a7:ad:ee:b4:bc:7a:38:65:88:20:26: e6:64:1a:ce:60:ba:98:cd:04:70:9a:16:29:6b:67: f0:ff:7f:e3:3b:45:59:51:93:69:a1:f6:1e:ef:74: f4:c5:d0:33:ee:62:f3:96:dd:ce:9c:d7:aa:92:32: 6f:ad:64:b8:21:b2:cf:41:58:a9:6b:81:0b:b8:95: 20:68:02:d1:d5:52:8d:62:0e:a1:85:c8:21:44:3d: b4:44:7c:68:17:f6:c8:db:9a:ca:18:18:9d:e7:76: 2f:08:ce:3d:31:de:3a:67:21:b7:f0:1f:37:ed:3b: a7:f8:a0:34:40:6a:90:aa:10:74:49:d0:a9:d9:30: 9d:5a:e7:05:67:8c:c4:35:78:22:73:35:54:2c:64: 3b:ab:09:59:06:a7:f0:57:f9:5a:ed:a0:aa:49:eb: 10:d4:3b:8a:6b:13:ed:0c:9a:52:8c:50:55:85:69: ef:bc:7c:83:43:5e:2a:42:ce:7a:54:6b:9c:42:ce: 75:ef:51:05:f7:f7:70:df:29:ff:78:e2:ee:b7:76: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:30:AD:3F:45:D9:B1:24:96:D6:F9:E4:A0:74:3E:AD:72:C2:D8:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d1884b-b944-36e9-b004-1dad2b53ff5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f8:ed:28:62:c1:73:e0:d7:c7:ea:79:12:e3:06:60:96:ae: 26:e5:31:37:c8:6a:92:ad:d3:2e:72:c8:fa:86:53:70:55:73: c4:fc:b1:00:db:10:db:5e:0f:ba:4d:4f:9e:d9:07:d6:4b:4a: 82:16:6a:4f:80:51:88:bd:9a:c4:cf:63:f7:57:be:89:d8:a4: 0e:de:75:4b:f3:3f:c0:9a:0a:b0:65:90:ec:82:ef:f2:21:3c: d6:08:18:91:ff:10:b8:b2:e0:8a:af:cb:8d:20:1c:25:31:f4: c3:81:3a:13:52:f2:5c:a4:87:7b:05:ab:90:3e:bc:e5:7f:22: 35:2c:bd:f2:48:77:24:5c:5a:ad:a3:a0:96:a3:12:09:ef:65: 86:f6:21:3e:25:5f:5b:18:6f:93:6e:14:5b:62:b6:a3:54:69: d4:87:83:c9:92:b6:d5:48:d9:26:f5:41:5f:46:08:6f:24:d0: d6:94:6e:9c:ad:98:bc:0e:a5:9c:15:0d:1a:fb:d6:cb:2d:56: 39:7b:c9:85:e5:79:25:3c:96:ac:f1:ec:18:bb:08:53:f5:ca: 88:e4:af:69:0f:e3:d3:1e:ba:ee:9d:60:48:1d:2e:05:1f:e5: f2:f1:89:06:7f:f7:90:9d:69:32:08:08:28:73:da:3e:eb:70: b1:6c:f3:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWPRSD28cjzm/FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Mzk4MGZjMWItMTZjYi00NGVjLWIzODUtYTU3YTVmNWJiZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K08z3X/Qp5/cPc9fJ+VKHAJxwp6bQ7mdbyZ Wfd84tPkAP/iuSnGIFcZHyE074Zyp63utLx6OGWIICbmZBrOYLqYzQRwmhYpa2fw /3/jO0VZUZNpofYe73T0xdAz7mLzlt3OnNeqkjJvrWS4IbLPQVipa4ELuJUgaALR 1VKNYg6hhcghRD20RHxoF/bI25rKGBid53YvCM49Md46ZyG38B837Tun+KA0QGqQ qhB0SdCp2TCdWucFZ4zENXgiczVULGQ7qwlZBqfwV/la7aCqSesQ1DuKaxPtDJpS jFBVhWnvvHyDQ14qQs56VGucQs5171EF9/dw3yn/eOLut3Y8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEwrT9F2bEkltb55KB0Pq1ywtiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNkMTg4NGItYjk0NC0z NmU5LWIwMDQtMWRhZDJiNTNmZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj47ShiwXPg18fqeRLjBmCWriblMTfIapKt0y5yyPqGU3BVc8T8sQDb ENteD7pNT57ZB9ZLSoIWak+AUYi9msTPY/dXvonYpA7edUvzP8CaCrBlkOyC7/Ih PNYIGJH/ELiy4Iqvy40gHCUx9MOBOhNS8lykh3sFq5A+vOV/IjUsvfJIdyRcWq2j oJajEgnvZYb2IT4lX1sYb5NuFFtitqNUadSHg8mSttVI2Sb1QV9GCG8k0NaUbpyt mLwOpZwVDRr71sstVjl7yYXleSU8lqzx7Bi7CFP1yojkr2kP49Meuu6dYEgdLgUf 5fLxiQZ/95CdaTIICChz2j7rcLFs8+8= -----END CERTIFICATE-----Generated at Sun Aug 24 04:01:54 2025 by rpki-client