$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d67c5990-f273-3422-ae4b-798d097cb7a5.roa File: d67c5990-f273-3422-ae4b-798d097cb7a5.roa (raw, json) Hash identifier: 9x76wtNLmdpMuTrTyGdQkzS5qN8NqlvB45gWTexPuLY= Subject key identifier: 5E:32:DA:57:60:A0:E6:D3:03:31:45:CA:A0:48:4F:CB:B7:1A:30:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4CE155B8AFD3D4F191B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d67c5990-f273-3422-ae4b-798d097cb7a5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.16.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:ce:15:5b:8a:fd:3d:4f:19:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=73765c67-638b-453a-bce8-37121f137792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:a4:76:7e:81:c5:53:9d:80:e9:a0:2a:0c: 38:a6:77:ef:4d:14:78:a4:da:84:88:80:2d:9f:34: 65:db:20:9f:3b:07:10:9f:75:97:0b:7d:1d:40:82: 85:fc:97:ee:a2:07:ed:7f:a4:7b:ff:af:e6:16:20: 0c:81:39:bf:86:f0:e0:8f:69:5e:d0:48:c9:ac:00: b5:25:22:3f:18:55:6f:f4:f1:fe:cc:eb:84:3b:c7: e8:a6:a1:c4:a4:c0:e6:c3:e8:07:5d:20:ea:e1:06: cf:35:40:a1:ba:5b:31:9c:90:c4:5b:32:dc:2a:c6: 87:36:45:f0:04:ba:a0:4c:74:f3:c5:b2:9e:55:a7: 1f:81:6b:50:c9:22:ac:d9:04:a9:cc:56:92:c3:0a: 19:26:54:f0:0c:7c:0d:d6:19:1f:31:19:44:c2:e9: 81:26:64:97:a2:f2:c5:f9:db:85:c2:78:0c:9a:f7: 5c:b6:f9:a9:89:92:ee:49:fc:4b:79:9b:48:b0:5c: ca:48:5a:d0:7d:30:e0:b2:e8:3d:cd:54:ec:dd:eb: c4:1e:04:f3:fe:aa:9c:71:fc:8e:60:da:b9:05:f2: 0a:60:53:d4:aa:81:90:fb:0f:a6:10:80:3f:cd:33: 6f:ab:3c:b6:97:a8:70:9d:9f:40:b6:2f:93:3c:62: fc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:32:DA:57:60:A0:E6:D3:03:31:45:CA:A0:48:4F:CB:B7:1A:30:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d67c5990-f273-3422-ae4b-798d097cb7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:51:c0:78:52:44:58:01:47:9e:bb:d9:26:2f:88:eb:36:12: 6f:94:1d:3d:d2:46:b7:4a:1c:97:a3:7a:ec:21:80:01:2b:6a: d9:2e:37:1f:68:01:59:b2:fd:be:1e:87:21:c5:97:a9:cc:21: c4:18:42:eb:ad:00:c0:52:58:be:12:90:78:24:e1:f6:66:63: 01:1b:cb:7d:b1:d6:8d:e3:b5:be:ca:5c:bd:f1:a9:39:27:96: 74:65:32:ad:82:08:da:35:52:15:af:00:bc:25:68:55:81:0d: 25:4f:3d:18:ca:ad:5b:73:08:fd:ae:e9:80:ad:3f:5e:37:a6: e9:25:f5:0e:1c:76:87:24:d6:42:ad:0a:16:31:85:30:85:e6: 87:10:69:d5:78:1f:ea:8a:a9:1f:98:d7:22:8e:a1:fb:1b:7c: 99:2e:2f:8a:ad:48:2d:b4:28:6f:d4:e7:ce:f1:bc:c8:ae:50: ba:e4:7c:fd:1a:00:c9:0d:18:f2:d9:c4:3b:93:66:44:3b:8c: e4:6f:0c:15:d2:28:5d:84:4f:d7:0e:83:44:7e:ff:53:58:7d: ee:0f:74:d4:56:92:2d:8e:ac:c6:89:26:d3:6a:76:bf:c6:bf: f5:e1:cd:31:89:0d:72:07:61:29:44:00:f9:5c:be:12:ca:e7: 39:be:be:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxM4VW4r9PU8ZG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzM3NjVjNjctNjM4Yi00NTNhLWJjZTgtMzcxMjFmMTM3NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTOkdn6BxVOdgOmgKgw4pnfvTRR4pNqEiIAt nzRl2yCfOwcQn3WXC30dQIKF/Jfuogftf6R7/6/mFiAMgTm/hvDgj2le0EjJrAC1 JSI/GFVv9PH+zOuEO8fopqHEpMDmw+gHXSDq4QbPNUChulsxnJDEWzLcKsaHNkXw BLqgTHTzxbKeVacfgWtQySKs2QSpzFaSwwoZJlTwDHwN1hkfMRlEwumBJmSXovLF +duFwngMmvdctvmpiZLuSfxLeZtIsFzKSFrQfTDgsug9zVTs3evEHgTz/qqccfyO YNq5BfIKYFPUqoGQ+w+mEIA/zTNvqzy2l6hwnZ9Ati+TPGL8VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4y2ldgoObTAzFFyqBIT8u3GjBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY3YzU5OTAtZjI3My0z NDIyLWFlNGItNzk4ZDA5N2NiN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9RwHhSRFgBR5672SYviOs2Em+UHT3SRrdKHJejeuwhgAEratkuNx9o AVmy/b4ehyHFl6nMIcQYQuutAMBSWL4SkHgk4fZmYwEby32x1o3jtb7KXL3xqTkn lnRlMq2CCNo1UhWvALwlaFWBDSVPPRjKrVtzCP2u6YCtP143pukl9Q4cdock1kKt ChYxhTCF5ocQadV4H+qKqR+Y1yKOofsbfJkuL4qtSC20KG/U587xvMiuULrkfP0a AMkNGPLZxDuTZkQ7jORvDBXSKF2ET9cOg0R+/1NYfe4PdNRWki2OrMaJJtNqdr/G v/XhzTGJDXIHYSlEAPlcvhLK5zm+vuQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:27:00 2025 by rpki-client