$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b1e5ac-8c8d-3db1-90af-c605ea999db4.roa File: e7b1e5ac-8c8d-3db1-90af-c605ea999db4.roa (raw, json) Hash identifier: uuKf2PgyeBWNs8TPYi2fbLlhHoexSmvwTnbc0A1E8Io= Subject key identifier: 0E:8F:97:CE:7F:45:FC:9B:42:D5:4B:DA:59:79:03:F6:5C:56:B0:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3354D0B6FE8E668756D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b1e5ac-8c8d-3db1-90af-c605ea999db4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.126.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:35:4d:0b:6f:e8:e6:68:75:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5e02e84f-9b8e-4194-a2b8-45c22e99319a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:97:f2:38:8b:2b:f2:9d:af:c1:c6:47:12:28: fe:da:d8:f5:c7:cc:4c:88:72:15:28:91:75:6c:a5: 4b:ea:07:33:99:6f:01:83:39:41:fe:9a:e2:c7:03: 5f:39:62:24:1e:1a:28:cc:2a:e4:d3:16:43:39:24: 03:c3:ea:16:85:11:ce:19:c9:d3:b3:3c:31:38:dc: b9:10:19:51:0a:94:25:54:f8:3c:76:af:1f:f9:21: 8d:a1:a5:09:67:a0:1e:7f:c7:30:9e:f8:2c:03:d7: 2b:c0:5b:6b:c0:c1:24:15:9f:03:61:00:e4:c5:f4: 31:f9:b7:90:62:51:15:59:10:0c:c1:6c:07:94:5b: 2b:35:8e:21:2d:dd:46:a5:42:78:bd:47:71:fc:e4: 58:d9:46:85:d3:63:85:04:81:03:35:80:12:d6:6d: ac:25:6d:6d:fa:c5:6c:05:a9:08:49:de:ce:05:04: 12:92:1f:9f:56:d9:d1:cd:b0:bb:ec:0f:68:63:f0: bb:81:73:3c:e5:75:1b:70:f0:fd:20:c8:31:34:76: cb:a5:77:9b:a4:0f:9e:be:0b:c5:17:5f:f9:17:45: 24:90:50:ef:1e:b4:e9:30:77:62:12:d8:9a:23:b8: a5:1b:f6:14:0d:32:07:b6:fd:f5:ee:13:6a:51:33: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8F:97:CE:7F:45:FC:9B:42:D5:4B:DA:59:79:03:F6:5C:56:B0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7b1e5ac-8c8d-3db1-90af-c605ea999db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.126.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:c8:68:69:32:d8:13:5e:eb:24:db:bf:b0:7b:8c:4d:f0:e9: 4b:96:76:70:36:56:c2:bf:79:95:13:05:5b:2d:4d:6c:8a:d8: 03:ff:40:a8:e5:f7:3f:56:ad:54:ed:03:4a:dd:45:17:a9:3f: 28:49:f1:35:f4:42:d8:6c:c0:d9:5f:f4:43:1a:82:41:cd:27: e6:ee:c3:f4:c7:0f:16:a3:90:93:04:51:67:3c:70:38:b1:0b: 63:68:3a:89:da:8b:99:be:58:0e:71:aa:04:e3:35:34:0e:20: fc:49:13:78:17:6c:86:e3:fd:1e:88:e3:15:c2:18:9a:45:8c: 37:67:7f:52:fd:25:6d:4e:a5:f5:32:90:01:5d:a2:ca:97:05: ba:cb:68:49:60:a3:94:c0:38:3b:e4:8f:31:54:9f:76:56:91: 6b:50:60:25:d0:58:f4:9a:d5:e7:c9:ad:5d:25:79:a5:1d:66: e6:e5:c9:bb:25:44:24:bb:d6:a0:90:cf:f5:32:c0:6f:50:21: 79:84:12:d8:7a:3a:e0:6f:c8:47:a4:c2:3f:2c:0f:85:aa:34: ee:b0:46:de:a9:3a:57:f4:da:01:57:0f:67:93:f6:df:a3:2b: 5f:a8:64:8a:75:98:98:e9:15:4d:42:64:57:78:e0:77:c5:d3: 3f:5b:21:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswzVNC2/o5mh1bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWUwMmU4NGYtOWI4ZS00MTk0LWEyYjgtNDVjMjJlOTkzMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpfyOIsr8p2vwcZHEij+2tj1x8xMiHIVKJF1 bKVL6gczmW8BgzlB/prixwNfOWIkHhoozCrk0xZDOSQDw+oWhRHOGcnTszwxONy5 EBlRCpQlVPg8dq8f+SGNoaUJZ6Aef8cwnvgsA9crwFtrwMEkFZ8DYQDkxfQx+beQ YlEVWRAMwWwHlFsrNY4hLd1GpUJ4vUdx/ORY2UaF02OFBIEDNYAS1m2sJW1t+sVs BakISd7OBQQSkh+fVtnRzbC77A9oY/C7gXM85XUbcPD9IMgxNHbLpXebpA+evgvF F1/5F0UkkFDvHrTpMHdiEtiaI7ilG/YUDTIHtv317hNqUTMObQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6Pl85/RfybQtVL2ll5A/ZcVrAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTdiMWU1YWMtOGM4ZC0z ZGIxLTkwYWYtYzYwNWVhOTk5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTH6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN3IaGky2BNe6yTbv7B7jE3w6UuWdnA2VsK/eZUTBVstTWyK2AP/QKjl 9z9WrVTtA0rdRRepPyhJ8TX0QthswNlf9EMagkHNJ+buw/THDxajkJMEUWc8cDix C2NoOonai5m+WA5xqgTjNTQOIPxJE3gXbIbj/R6I4xXCGJpFjDdnf1L9JW1OpfUy kAFdosqXBbrLaElgo5TAODvkjzFUn3ZWkWtQYCXQWPSa1efJrV0leaUdZublybsl RCS71qCQz/UywG9QIXmEEth6OuBvyEekwj8sD4WqNO6wRt6pOlf02gFXD2eT9t+j K1+oZIp1mJjpFU1CZFd44HfF0z9bISk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:26:12 2025 by rpki-client