$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da0b345c-98cb-3ee3-a528-f27d9534ddec.roa File: da0b345c-98cb-3ee3-a528-f27d9534ddec.roa (raw, json) Hash identifier: GvxdyNzHscyRZ4CWj6vg1lzX8KxHSTjKlQk0lwsZrk0= Subject key identifier: 10:DE:4F:35:A4:9D:AB:85:E4:DD:2E:97:F8:EF:FA:A9:74:64:05:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4BF359B3DBF241B180200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da0b345c-98cb-3ee3-a528-f27d9534ddec.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 76.136.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:bf:35:9b:3d:bf:24:1b:18:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=14a7e735-6483-49b0-9cfa-3ba784ce64cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e8:07:df:5a:97:d5:2b:84:7a:91:d3:9e:47: 6d:08:7d:c6:22:07:a6:45:a0:e9:d0:cf:b8:89:82: 81:37:0c:1d:3e:f8:f9:13:d5:24:fd:97:11:ec:ac: 7b:13:ba:5c:87:b5:a3:16:33:f8:9e:e2:2a:f3:8c: 45:36:58:2a:88:b8:1e:82:4c:d5:59:b3:66:d7:c7: 21:89:f1:97:03:85:f3:d5:c9:cf:d5:85:c0:a7:b3: 05:14:e1:b9:05:c5:59:f5:af:01:f7:de:80:fa:02: 67:a0:fd:16:f9:61:be:7a:d0:b1:34:66:b3:db:75: 1f:a4:0e:c3:1a:8c:4e:f0:4d:28:2a:fe:48:b2:84: af:6d:c5:28:e5:bd:e4:ce:80:9a:4c:1e:c3:e8:ac: bf:a1:47:ca:11:18:ce:9d:38:21:58:6e:d0:2a:03: 7f:ad:50:63:7e:42:49:a2:ef:ed:ae:6a:82:42:03: 15:69:83:19:f6:6f:d0:b7:3e:c2:e8:3a:58:77:98: b5:41:43:89:b6:63:e7:df:1e:28:fc:54:bd:b2:04: 2d:2d:0c:7d:7b:b5:4b:ab:0a:6f:fb:d6:30:df:37: ae:c2:ed:7e:7c:66:2c:08:34:25:62:52:66:55:ba: 38:56:7e:06:f7:65:73:17:79:70:82:2e:0a:73:3c: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:4F:35:A4:9D:AB:85:E4:DD:2E:97:F8:EF:FA:A9:74:64:05:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da0b345c-98cb-3ee3-a528-f27d9534ddec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:f5:c6:e9:1c:c0:24:4e:8f:d9:f5:de:f1:d1:2c:6e:d7:cc: 54:1e:bd:61:26:e8:74:2d:9c:c8:d4:b1:08:54:6a:7f:13:b3: 7f:24:6f:a8:9e:1e:bf:5f:39:d2:ab:cc:e8:71:81:fa:bd:67: aa:9a:9b:72:0e:cd:22:73:f1:f2:c6:09:e1:c3:74:30:18:8c: b6:aa:c8:3d:7f:d8:24:60:f8:ea:2e:d2:21:99:d9:0d:0b:e3: 6b:20:f8:65:c4:29:dd:8a:22:fe:a2:42:9d:a9:c8:6f:99:d8: 84:11:8c:04:b1:ae:79:30:63:00:ab:7c:0d:06:8a:14:e7:e9: 83:d5:f8:66:99:8d:9f:29:49:c9:ef:5c:55:e8:bb:c2:f4:8a: 8d:46:b3:af:1b:1d:f7:35:9c:0e:9d:5b:d5:56:12:89:1c:ac: 8f:53:b1:53:00:d3:c8:94:7c:f6:8f:e0:fa:b0:88:ac:cc:45: af:d0:82:d0:dc:f7:ca:d6:7a:fe:b7:c9:53:75:39:9c:0b:ec: 90:83:29:f4:60:00:2a:17:c2:ad:17:2a:b5:ef:1b:bf:1f:13: 86:39:a4:50:55:bc:20:1c:c4:85:c2:61:b2:c7:53:f7:d6:1f: 42:4c:a2:ea:5f:51:ff:c3:5a:b5:de:a6:4d:02:06:f0:aa:d0: ea:a5:b8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxL81mz2/JBsYAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTRhN2U3MzUtNjQ4My00OWIwLTljZmEtM2JhNzg0Y2U2NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+gH31qX1SuEepHTnkdtCH3GIgemRaDp0M+4 iYKBNwwdPvj5E9Uk/ZcR7Kx7E7pch7WjFjP4nuIq84xFNlgqiLgegkzVWbNm18ch ifGXA4Xz1cnP1YXAp7MFFOG5BcVZ9a8B996A+gJnoP0W+WG+etCxNGaz23UfpA7D GoxO8E0oKv5IsoSvbcUo5b3kzoCaTB7D6Ky/oUfKERjOnTghWG7QKgN/rVBjfkJJ ou/trmqCQgMVaYMZ9m/Qtz7C6DpYd5i1QUOJtmPn3x4o/FS9sgQtLQx9e7VLqwpv +9Yw3zeuwu1+fGYsCDQlYlJmVbo4Vn4G92VzF3lwgi4KczxWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDeTzWknauF5N0ul/jv+ql0ZAU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGEwYjM0NWMtOThjYi0z ZWUzLWE1MjgtZjI3ZDk1MzRkZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH1xukcwCROj9n13vHRLG7XzFQevWEm6HQtnMjUsQhUan8Ts38kb6ie Hr9fOdKrzOhxgfq9Z6qam3IOzSJz8fLGCeHDdDAYjLaqyD1/2CRg+Oou0iGZ2Q0L 42sg+GXEKd2KIv6iQp2pyG+Z2IQRjASxrnkwYwCrfA0GihTn6YPV+GaZjZ8pScnv XFXou8L0io1Gs68bHfc1nA6dW9VWEokcrI9TsVMA08iUfPaP4PqwiKzMRa/QgtDc 98rWev63yVN1OZwL7JCDKfRgACoXwq0XKrXvG78fE4Y5pFBVvCAcxIXCYbLHU/fW H0JMoupfUf/DWrXepk0CBvCq0OqluII= -----END CERTIFICATE-----Generated at Sun Aug 24 01:12:49 2025 by rpki-client