$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa File: 043f76f6-e87a-3227-a9de-4322d167104f.roa (raw, json) Hash identifier: chYmT99C1eXr93WFBvjkbFCJJEmo6F8C5q1wBW4Giuc= Subject key identifier: 7F:42:50:07:DB:DE:22:3E:C9:46:2D:A3:93:23:1D:FF:63:92:86:5F Certificate issuer: /CN=8b973e20-42b5-497e-831b-66d353f928d7 Certificate serial: 010D0C9F4328584B3126E7DC6EA2C5A4A4A37FC0 Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 6341 IP address blocks: 156.76.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:e7:dc:6e:a2:c5:a4:a4:a3:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=797b4fe3-da9c-4232-8c0b-d059df4485e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:61:c7:53:cc:f6:d7:66:20:38:12:48:f7: 1d:1a:9e:7e:6c:e3:cd:dd:2a:6a:65:1f:01:ff:35: e6:23:5d:09:0e:19:41:25:eb:e3:3b:a8:a9:50:c4: a9:9f:4e:15:a9:c4:9b:78:b5:d5:39:c7:44:99:e2: ba:a8:1d:6b:ae:b7:f9:be:eb:28:da:df:9f:41:cd: 28:7c:bb:a5:e8:bf:2e:ac:36:99:8a:f2:c3:79:e0: 06:f0:73:1c:bc:74:a8:53:d8:68:d7:85:ef:bf:15: c1:7d:a0:9a:0c:0a:1e:42:72:7e:bb:d1:2d:b5:a7: 8d:7c:1f:e7:e3:3e:bc:92:eb:c7:5f:17:dc:13:9a: 3a:ea:fa:4d:26:28:50:18:73:dd:ac:1c:39:ce:26: 70:3e:c3:09:e4:b3:99:c5:09:d6:23:f5:fb:8a:92: c8:61:13:6d:64:a4:64:3a:12:96:b6:2c:d4:14:2c: aa:34:21:c7:47:4d:5d:3b:59:49:ea:38:41:b1:b3: 06:ec:4a:c4:8a:f2:6e:0b:a2:f5:16:db:e2:fc:13: 0d:4e:5f:54:88:9f:86:30:09:08:b9:26:d8:fb:34: a2:83:67:f2:36:e1:80:b0:d4:ce:97:bd:ee:37:a2: b8:84:7f:47:fe:d2:23:58:ef:92:32:fc:1a:74:77: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:50:07:DB:DE:22:3E:C9:46:2D:A3:93:23:1D:FF:63:92:86:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl X509v3 Authority Key Identifier: keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer sbgp-ipAddrBlock: critical IPv4: 156.76.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e3:86:43:47:08:32:71:1f:22:d5:d6:34:64:bc:eb:9a:86: a2:d5:f6:b4:75:9e:96:8b:b2:b4:24:4a:f2:5e:36:34:a1:1b: 7f:36:49:c8:ec:32:22:67:73:a0:98:21:9f:78:86:89:31:47: d6:85:92:04:ee:f4:9a:c3:4b:56:e8:1d:55:7a:ac:e9:43:af: 08:45:72:81:ec:67:a6:b8:82:52:65:a0:50:64:b1:dd:2f:f3: 69:ce:0e:c4:5c:92:bc:b9:81:a4:62:a0:44:2f:9a:e9:3b:4a: 29:ca:ba:05:42:af:04:2c:99:80:cb:d2:21:29:95:39:f7:2c: 9a:1a:36:0f:b7:d2:79:14:04:49:6e:bc:02:c9:3f:40:80:cb: 07:17:0d:df:bc:a7:f9:e6:fc:04:9e:89:52:a9:c1:82:58:fa: 0c:d4:3d:52:4d:c4:e4:d6:39:89:63:eb:5c:23:9a:4a:cf:3b: 88:50:cc:64:4d:50:c0:8e:bb:5d:dd:a3:b0:37:f3:61:87:fd: d8:57:9f:e8:51:2c:23:e8:e6:f0:83:4f:6a:da:29:f2:81:d2: cf:58:fc:3f:ba:31:80:e1:ff:4d:c3:c6:64:b0:e6:07:bd:af: 2b:0c:2e:b9:3c:39:d1:cc:83:18:91:76:d3:d0:fb:10:51:36: 90:39:89:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJufcbqLFpKSjf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI5NzNlMjAtNDJiNS00OTdlLTgzMWItNjZkMzUzZjky OGQ3MB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk Nzk3YjRmZTMtZGE5Yy00MjMyLThjMGItZDA1OWRmNDQ4NWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK9hx1PM9tdmIDgSSPcdGp5+bOPN3SpqZR8B /zXmI10JDhlBJevjO6ipUMSpn04VqcSbeLXVOcdEmeK6qB1rrrf5vuso2t+fQc0o fLul6L8urDaZivLDeeAG8HMcvHSoU9ho14XvvxXBfaCaDAoeQnJ+u9EttaeNfB/n 4z68kuvHXxfcE5o66vpNJihQGHPdrBw5ziZwPsMJ5LOZxQnWI/X7ipLIYRNtZKRk OhKWtizUFCyqNCHHR01dO1lJ6jhBsbMG7ErEivJuC6L1Ftvi/BMNTl9UiJ+GMAkI uSbY+zSig2fyNuGAsNTOl73uN6K4hH9H/tIjWO+SMvwadHdx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9CUAfb3iI+yUYto5MjHf9jkoZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3 M2UyMC00MmI1LTQ5N2UtODMxYi02NmQzNTNmOTI4ZDcvMDQzZjc2ZjYtZTg3YS0z MjI3LWE5ZGUtNDMyMmQxNjcxMDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGI5NzNlMjAtNDJiNS00OTdlLTgz MWItNjZkMzUzZjkyOGQ3LzhiOTczZTIwLTQyYjUtNDk3ZS04MzFiLTY2ZDM1M2Y5 MjhkNy5jcmwwHwYDVR0jBBgwFoAUDKLrkz+M3NmIkVq9lGUWMncCGXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3M2UyMC00MmI1LTQ5N2UtODMxYi02NmQz NTNmOTI4ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnEzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHjhkNHCDJxHyLV1jRkvOuahqLV9rR1npaLsrQkSvJeNjShG382Scjs MiJnc6CYIZ94hokxR9aFkgTu9JrDS1boHVV6rOlDrwhFcoHsZ6a4glJloFBksd0v 82nODsRckry5gaRioEQvmuk7SinKugVCrwQsmYDL0iEplTn3LJoaNg+30nkUBElu vALJP0CAywcXDd+8p/nm/ASeiVKpwYJY+gzUPVJNxOTWOYlj61wjmkrPO4hQzGRN UMCOu13do7A382GH/dhXn+hRLCPo5vCDT2raKfKB0s9Y/D+6MYDh/03DxmSw5ge9 rysMLrk8OdHMgxiRdtPQ+xBRNpA5iU8= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:17 2025 by rpki-client