$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa File: 4f9328ea-492f-3885-a2be-20a77b7c2626.roa (raw, json) Hash identifier: MIhkrmL6vR8xgDNUkLxdMBSL3lkfaKPMA8jRL3tBL7U= Subject key identifier: 6A:34:D8:23:9E:BC:30:82:BD:9D:2F:D8:99:C8:39:8B:02:E9:24:E7 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584B2A2C28BEEDDCB92A57B6B280 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 23465 IP address blocks: 76.77.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:28:be:ed:dc:b9:2a:57:b6:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=2e2cd58b-7cf5-4534-a76d-0473077523ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:58:79:89:f6:a3:4e:3f:c2:e6:c3:b8:ac: 21:cc:90:fe:b6:48:a5:af:26:5a:ce:88:72:ae:4e: ae:41:bb:a9:35:5a:fb:18:2c:ee:bb:17:fd:e3:8d: 25:c9:24:50:12:a6:5c:57:d8:df:36:a9:52:4f:4c: 9b:ee:7a:98:c7:dd:9a:59:64:fa:22:de:1b:f1:ae: 47:30:87:c5:9a:61:ca:2b:32:d2:6a:b1:42:d5:42: b9:92:c1:39:f6:38:42:e7:28:3c:7c:97:37:6e:1f: ae:ed:51:49:72:94:12:83:5a:d6:96:53:07:b9:d1: eb:70:35:e2:9f:23:56:4b:9d:2c:80:a4:a7:e0:11: d9:ab:2d:d7:9b:d0:92:78:26:b3:1b:5f:1c:63:c9: 04:70:75:66:b2:ac:75:8b:9f:24:80:9f:e3:d9:14: 43:06:91:75:c4:dd:14:df:34:bd:a0:04:32:cd:1c: b7:6e:85:b3:53:3d:d2:c3:2e:4f:d2:54:c2:6e:03: f5:31:93:e6:9d:36:e3:c8:9c:8a:3d:1c:f3:ab:f3: 8c:b3:74:48:b5:63:bc:49:39:65:5a:fd:f9:bb:6c: 1e:d8:eb:40:75:d2:51:8c:2f:a8:ea:c8:98:48:0e: 6e:d3:f7:08:35:66:1a:b9:de:ad:f2:1e:48:16:cd: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:34:D8:23:9E:BC:30:82:BD:9D:2F:D8:99:C8:39:8B:02:E9:24:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 76.77.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:fd:63:1a:29:40:b0:e1:a3:24:3f:e7:01:4b:94:ca:56:4c: d1:bd:5d:8e:a6:9a:d9:95:0c:e6:96:ba:05:12:0c:47:94:5f: de:55:28:5d:ff:e8:a9:7a:a2:25:f1:cb:14:a4:53:21:a0:28: 5e:e9:65:8e:45:bd:9e:67:6d:b6:12:b1:d9:df:d4:c2:d1:a0: dd:04:0e:b1:21:80:b1:ca:1c:2f:95:38:bb:b8:d2:ac:b0:f9: d0:a6:33:c2:50:80:73:07:8c:e4:6f:bc:eb:e2:74:4f:c4:33: f4:73:67:aa:cb:b5:c5:56:ad:6f:c9:f5:4f:cb:b6:65:2e:ef: a1:49:8f:c4:44:57:82:a5:2a:b7:a5:cc:ea:ae:03:28:94:a2: 5c:ef:fa:ef:18:1c:3d:a6:a0:c9:3e:bc:5f:9e:d5:e2:da:8a: e1:45:ac:22:dd:67:20:ea:b5:1d:4c:4a:a7:8b:54:17:7f:a7: ad:38:98:66:87:4c:c7:77:f3:76:06:39:8e:05:07:fd:18:1b: 47:58:4c:cf:2a:42:1a:8a:4d:00:7f:50:07:46:93:02:81:07: a4:5d:1f:47:08:7f:ae:66:11:5f:e8:f0:6a:c2:73:09:08:9d: df:06:7b:cb:91:38:e7:6a:fd:23:74:cf:1c:aa:56:73:c2:81: 64:f5:f6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCi+7dy5Kle2soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MmUyY2Q1OGItN2NmNS00NTM0LWE3NmQtMDQ3MzA3NzUyM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7tYeYn2o04/wubDuKwhzJD+tkilryZazohy rk6uQbupNVr7GCzuuxf9440lySRQEqZcV9jfNqlST0yb7nqYx92aWWT6It4b8a5H MIfFmmHKKzLSarFC1UK5ksE59jhC5yg8fJc3bh+u7VFJcpQSg1rWllMHudHrcDXi nyNWS50sgKSn4BHZqy3Xm9CSeCazG18cY8kEcHVmsqx1i58kgJ/j2RRDBpF1xN0U 3zS9oAQyzRy3boWzUz3Swy5P0lTCbgP1MZPmnTbjyJyKPRzzq/OMs3RItWO8STll Wv35u2we2OtAddJRjC+o6siYSA5u0/cINWYaud6t8h5IFs043QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo02COevDCCvZ0v2JnIOYsC6STnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvNGY5MzI4ZWEtNDkyZi0z ODg1LWEyYmUtMjBhNzdiN2MyNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETE3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/9YxopQLDhoyQ/5wFLlMpWTNG9XY6mmtmVDOaWugUSDEeUX95VKF3/ 6Kl6oiXxyxSkUyGgKF7pZY5FvZ5nbbYSsdnf1MLRoN0EDrEhgLHKHC+VOLu40qyw +dCmM8JQgHMHjORvvOvidE/EM/RzZ6rLtcVWrW/J9U/LtmUu76FJj8REV4KlKrel zOquAyiUolzv+u8YHD2moMk+vF+e1eLaiuFFrCLdZyDqtR1MSqeLVBd/p604mGaH TMd383YGOY4FB/0YG0dYTM8qQhqKTQB/UAdGkwKBB6RdH0cIf65mEV/o8GrCcwkI nd8Ge8uROOdq/SN0zxyqVnPCgWT19jk= -----END CERTIFICATE-----Generated at Sat Oct 11 10:15:28 2025 by rpki-client