$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6550ad-5752-3b24-b8a0-adb2b2244950.roa File: ff6550ad-5752-3b24-b8a0-adb2b2244950.roa (raw, json) Hash identifier: AEnkwNcrhrIL19qBG9SjM7bJoPbNrVBeUiJXWDCzcp8= Subject key identifier: 11:71:4D:F8:57:B0:B6:E8:D7:22:65:D2:33:40:44:7E:BC:8A:40:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC33AB142B73BF987814C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6550ad-5752-3b24-b8a0-adb2b2244950.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.133.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:3a:b1:42:b7:3b:f9:87:81:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5fddfec3-4923-43e7-a1d0-204eec15560e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:f7:2a:f5:4d:00:c2:1c:3b:25:44:ca:72: b1:93:95:5b:67:61:76:6c:74:f8:29:2d:ae:14:cc: 6a:8f:fc:ed:71:7f:64:35:6c:0d:e1:84:e4:01:ea: ec:9b:c6:57:8c:4f:92:4a:b0:8c:c2:7d:5f:6d:4f: 09:a9:6e:60:74:f5:f4:68:cb:6c:d6:77:23:96:bd: 9e:34:ba:a6:75:96:e5:5e:e5:08:f3:3a:ef:fb:38: 01:60:19:c2:de:a0:ae:54:ec:09:41:cf:18:39:ec: 81:27:5f:c7:9c:7d:a0:73:8f:a0:23:c8:cc:19:32: e5:1f:fb:0f:e8:66:7c:8f:22:30:0f:f5:0b:fb:cb: f9:12:61:7e:c9:dd:66:34:31:c0:16:cc:b6:fa:ea: 46:be:45:0f:bc:a9:95:e8:c1:74:2b:de:d8:49:e7: 61:2b:85:6d:61:83:3c:9e:d7:4f:29:3b:4b:f3:29: 77:a9:93:51:90:98:14:bc:7b:8f:64:8b:79:2b:41: 4a:e3:7c:82:d4:68:82:d6:61:b4:cd:44:07:21:be: 15:42:c2:e1:2c:cd:70:bb:b9:e7:b7:b0:2e:f3:ef: 6e:34:c2:40:92:9f:f2:16:b1:de:c5:bf:7a:7b:2f: b3:fd:87:8f:75:3e:f2:ad:2f:94:2a:de:9e:0e:79: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:4D:F8:57:B0:B6:E8:D7:22:65:D2:33:40:44:7E:BC:8A:40:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6550ad-5752-3b24-b8a0-adb2b2244950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d4:83:69:24:26:27:b4:6a:90:d2:61:65:58:ec:d8:29:81: 9f:5c:62:03:c4:4d:9b:95:38:11:c5:ec:85:70:7f:4d:fa:2a: b3:08:bc:13:97:a3:c7:d8:97:26:c3:7a:66:b9:e3:8e:a8:d0: 4e:f2:78:e8:8a:4a:26:8a:07:d4:99:cd:67:0d:5d:2f:5c:fc: 89:a3:3b:c7:8d:cf:db:6e:3c:1a:71:04:11:43:c7:46:a9:24: d0:74:f3:46:33:87:cb:c4:45:d6:10:41:8d:86:f9:b6:36:61: d6:a1:84:d9:a7:df:55:2f:6a:5c:59:bc:6c:dd:9f:36:5d:5b: 8a:e9:e9:1e:09:af:41:b9:24:f4:e2:89:70:f2:80:41:26:c9: 62:fe:4e:fb:1e:ba:ca:01:e2:c8:42:56:c3:0f:18:f9:45:99: 92:c2:cf:38:3d:81:1e:34:71:be:ec:95:83:44:e3:45:30:ce: 9b:49:0d:5e:ce:ce:cc:3d:df:f3:d6:97:2b:55:68:b1:fa:ea: 82:42:7a:a4:15:6b:39:88:8b:d1:07:8f:77:7a:fc:8c:3e:aa: 9d:1a:51:95:1b:19:73:1f:f5:16:84:06:d4:e6:32:ba:65:54: 30:1e:67:5c:58:d6:8f:95:63:70:58:57:47:4a:5c:e3:fd:0e: ab:8f:e5:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswzqxQrc7+YeBTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWZkZGZlYzMtNDkyMy00M2U3LWExZDAtMjA0ZWVjMTU1NjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1j3KvVNAMIcOyVEynKxk5VbZ2F2bHT4KS2u FMxqj/ztcX9kNWwN4YTkAersm8ZXjE+SSrCMwn1fbU8JqW5gdPX0aMts1ncjlr2e NLqmdZblXuUI8zrv+zgBYBnC3qCuVOwJQc8YOeyBJ1/HnH2gc4+gI8jMGTLlH/sP 6GZ8jyIwD/UL+8v5EmF+yd1mNDHAFsy2+upGvkUPvKmV6MF0K97YSedhK4VtYYM8 ntdPKTtL8yl3qZNRkJgUvHuPZIt5K0FK43yC1GiC1mG0zUQHIb4VQsLhLM1wu7nn t7Au8+9uNMJAkp/yFrHexb96ey+z/YePdT7yrS+UKt6eDnnKdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFxTfhXsLbo1yJl0jNARH68ikBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmY2NTUwYWQtNTc1Mi0z YjI0LWI4YTAtYWRiMmIyMjQ0OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjUg2kkJie0apDSYWVY7NgpgZ9cYgPETZuVOBHF7IVwf036KrMIvBOX o8fYlybDema5446o0E7yeOiKSiaKB9SZzWcNXS9c/ImjO8eNz9tuPBpxBBFDx0ap JNB080Yzh8vERdYQQY2G+bY2YdahhNmn31UvalxZvGzdnzZdW4rp6R4Jr0G5JPTi iXDygEEmyWL+TvseusoB4shCVsMPGPlFmZLCzzg9gR40cb7slYNE40UwzptJDV7O zsw93/PWlytVaLH66oJCeqQVazmIi9EHj3d6/Iw+qp0aUZUbGXMf9RaEBtTmMrpl VDAeZ1xY1o+VY3BYV0dKXOP9DquP5UI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:36:04 2025 by rpki-client