$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f7906cbe-ded6-3772-a921-8820a9982260.roa File: f7906cbe-ded6-3772-a921-8820a9982260.roa (raw, json) Hash identifier: DsSo17r2Cw2fXvgTddcVtYnkh+DBqJm2IfUo2AC1xq8= Subject key identifier: 04:ED:C2:EE:88:E6:1F:07:7B:9A:33:A9:4B:A0:F8:86:40:66:4B:84 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584AE89137F8AD682972A814C700 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f7906cbe-ded6-3772-a921-8820a9982260.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 399244 IP address blocks: 76.164.196.0/24 maxlen: 24 76.164.197.0/24 maxlen: 24 76.164.198.0/24 maxlen: 24 76.164.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:37:f8:ad:68:29:72:a8:14:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=0f85cad6-43bc-4a34-b0a4-e9c2fd67e2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:41:65:02:42:08:fa:b6:62:72:a0:0f:45: d6:fe:30:c8:d1:5d:2e:35:1f:36:09:24:d2:72:c8: 33:12:79:76:b1:03:ab:e7:b1:de:d5:63:96:dd:6f: e0:74:25:65:a0:f2:19:02:b9:67:46:1d:bc:38:12: 87:00:5a:df:fb:fc:9f:a9:83:1a:5b:44:e9:8a:ea: 25:7a:27:2d:7c:40:e3:16:46:00:40:17:5e:07:62: bc:1d:b6:16:d0:6d:0a:a3:66:12:69:6a:41:9a:ee: 86:9b:a5:24:60:ad:4d:07:fc:01:3f:3b:2f:2c:ae: 90:45:ff:5b:2f:09:f0:c5:46:f2:a5:fb:90:0b:02: 3d:54:fe:ab:14:54:fb:57:2c:11:a8:54:db:a4:28: 70:05:d2:9f:fb:7f:e8:c9:40:99:6b:78:3b:fc:f0: 52:2c:2f:97:1b:2b:4e:de:c6:c6:e3:a8:62:f8:8d: a8:5f:a5:9a:d4:93:34:b8:56:fd:9c:07:e3:ac:d1: 63:c9:6d:d5:63:7f:66:d3:34:5f:71:92:95:34:7b: 70:45:75:a3:07:6d:4a:a4:31:53:05:66:48:20:d0: 66:d7:ba:3c:74:5d:34:3d:19:f4:6d:4a:cf:8b:ac: 38:b9:aa:d2:0f:9f:4f:6a:25:09:d2:50:2d:5b:eb: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:ED:C2:EE:88:E6:1F:07:7B:9A:33:A9:4B:A0:F8:86:40:66:4B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f7906cbe-ded6-3772-a921-8820a9982260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 76.164.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:10:3d:d9:79:e5:09:b9:40:5d:df:fb:99:98:5c:f2:02:c8: 68:25:02:cd:cf:00:33:b8:be:57:fe:c3:fc:77:72:87:57:05: b4:b4:8b:a9:7d:56:56:4c:c3:ea:ae:27:4e:21:d3:47:b8:8f: 5a:4e:62:2f:0a:77:8b:02:a2:8c:90:e3:c8:5f:23:78:95:a4: d2:fa:75:a9:f0:37:b5:96:b9:c4:2b:21:5b:2e:4e:89:b1:77: 01:ed:fd:c2:1b:92:0d:e7:40:2a:79:57:57:82:c2:fb:db:8b: f8:c9:28:60:f3:6a:23:16:49:27:78:23:1a:80:6b:64:84:14: 44:de:0b:5e:9b:93:cd:03:71:04:c5:b6:a6:0b:db:48:1d:e2: 46:38:81:3a:ef:3a:fb:a5:e0:76:79:54:7f:7e:82:00:d9:e7: 82:6c:87:4d:08:a9:16:b3:ec:a6:bc:59:a1:4c:11:4e:52:25: cc:2d:93:a6:4b:99:1e:27:59:37:ed:f1:9b:00:e7:24:1e:3f: 22:1a:17:9a:eb:27:03:a8:8d:71:ff:e0:13:6f:f9:8b:1f:73: 70:e9:15:2c:cb:5d:27:1e:b0:85:0a:85:48:75:65:44:0f:d0: 82:d7:2e:8b:89:2e:f9:46:f9:66:16:ea:f7:5c:5f:df:1e:96: 3b:77:f6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTf4rWgpcqgUxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MGY4NWNhZDYtNDNiYy00YTM0LWIwYTQtZTljMmZkNjdlMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDlBZQJCCPq2YnKgD0XW/jDI0V0uNR82CSTS csgzEnl2sQOr57He1WOW3W/gdCVloPIZArlnRh28OBKHAFrf+/yfqYMaW0Tpiuol eictfEDjFkYAQBdeB2K8HbYW0G0Ko2YSaWpBmu6Gm6UkYK1NB/wBPzsvLK6QRf9b LwnwxUbypfuQCwI9VP6rFFT7VywRqFTbpChwBdKf+3/oyUCZa3g7/PBSLC+XGytO 3sbG46hi+I2oX6Wa1JM0uFb9nAfjrNFjyW3VY39m0zRfcZKVNHtwRXWjB21KpDFT BWZIINBm17o8dF00PRn0bUrPi6w4uarSD59PaiUJ0lAtW+scIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATtwu6I5h8He5ozqUug+IZAZkuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvZjc5MDZjYmUtZGVkNi0z NzcyLWE5MjEtODgyMGE5OTgyMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTKTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAQPdl55Qm5QF3f+5mYXPICyGglAs3PADO4vlf+w/x3codXBbS0i6l9 VlZMw+quJ04h00e4j1pOYi8Kd4sCooyQ48hfI3iVpNL6danwN7WWucQrIVsuTomx dwHt/cIbkg3nQCp5V1eCwvvbi/jJKGDzaiMWSSd4IxqAa2SEFETeC16bk80DcQTF tqYL20gd4kY4gTrvOvul4HZ5VH9+ggDZ54Jsh00IqRaz7Ka8WaFMEU5SJcwtk6ZL mR4nWTft8ZsA5yQePyIaF5rrJwOojXH/4BNv+Ysfc3DpFSzLXScesIUKhUh1ZUQP 0ILXLouJLvlG+WYW6vdcX98eljt39jA= -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:27 2025 by rpki-client