$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e1316-5f2c-3ae8-8990-c78245b6c282.roa File: 3a8e1316-5f2c-3ae8-8990-c78245b6c282.roa (raw, json) Hash identifier: QJv3WC2PbYxBIsw7IRcvlLxDH7kFH3O+mzWM6+jAPnI= Subject key identifier: A7:51:F5:6E:A3:61:0C:6A:07:7F:FC:78:51:A6:4E:1F:64:AC:C1:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD7ACD2EE7F82F98BE3BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e1316-5f2c-3ae8-8990-c78245b6c282.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 76.156.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:7a:cd:2e:e7:f8:2f:98:be:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=fb7eaf6c-f4db-4b27-94b4-145a1e2cbea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:be:ce:72:2e:c8:59:af:7b:d6:9e:9f:21: a6:10:28:ca:45:60:fc:df:03:c9:9d:bb:25:db:0d: fa:a4:82:25:ae:30:a0:b5:2e:41:18:27:df:3f:e4: e1:14:60:41:b4:14:9a:ab:87:2d:41:39:1c:03:f3: 79:e6:c0:89:ca:74:9a:3e:5d:0a:c4:1b:f1:22:33: 67:23:b3:0d:bf:d2:ef:a9:c1:37:de:de:7b:53:51: b5:fc:d5:c0:b5:26:a1:29:79:2c:a5:56:ac:62:52: e6:35:d6:25:74:27:c9:76:25:60:47:53:7e:d7:98: 7d:52:64:65:bf:2f:d1:61:5d:e5:5e:ba:9c:f4:2c: bb:09:14:99:1b:49:52:c1:37:96:a5:73:12:80:0a: 64:18:a1:90:e0:75:b5:78:53:72:cd:6e:75:3d:ed: f1:4b:c7:1d:89:13:f3:f9:da:47:17:4a:96:2f:e3: 0a:a3:6b:e0:1b:c5:f6:48:3c:42:e3:3e:b2:fb:01: 3f:9c:31:15:ee:2f:93:04:20:df:3c:4a:1e:b7:3d: 16:17:3b:ba:fe:d8:ac:9b:51:e3:b7:23:b7:c5:ba: 7d:d7:75:c7:c8:93:e4:45:4f:ba:50:a8:25:72:9e: 9f:17:5f:82:69:99:c4:2b:57:c4:f2:d4:e2:5c:43: 22:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:51:F5:6E:A3:61:0C:6A:07:7F:FC:78:51:A6:4E:1F:64:AC:C1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a8e1316-5f2c-3ae8-8990-c78245b6c282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.156.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:3b:cc:ab:8a:71:1b:e1:33:86:27:c1:e4:48:f3:61:44:13: 7c:01:eb:c6:5f:de:91:ab:8d:46:83:6c:03:5b:07:a0:31:67: 73:ae:30:31:f8:6f:1f:f7:a9:03:f1:e2:49:f6:69:c1:2e:bf: 20:23:e5:84:4c:6d:de:fa:7d:d5:51:dd:c9:17:71:1a:f1:fa: 76:01:a9:6c:35:bb:06:1d:ff:c1:51:e7:57:ab:61:6b:f9:80: 77:a6:f5:31:9a:ea:18:25:41:61:dc:67:f5:02:04:92:b0:27: 2c:5f:7e:70:e3:c7:49:3f:21:95:bc:2b:0a:d4:09:a5:55:93: a5:e0:e7:59:fc:21:46:e3:f8:17:81:b9:ec:17:c2:c4:99:df: da:60:55:d2:39:57:5b:b6:8f:a8:72:3d:66:3d:00:cb:db:60: 4f:cd:b4:f7:d3:46:d2:12:d4:14:6f:10:28:c4:f0:f5:ab:36: 40:66:d5:16:e4:1a:f7:4b:c5:82:85:53:10:ed:d7:37:1d:26: 18:6c:43:80:d8:17:34:53:7d:51:ba:78:ad:a5:22:b3:08:b5: 30:83:dc:af:e7:7b:03:1b:a1:99:a6:82:45:88:2e:82:60:72: 22:a3:fc:ea:8f:6c:49:98:71:41:8d:a3:51:7a:9d:d4:55:13: dc:9f:83:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/XrNLuf4L5i+O8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZmI3ZWFmNmMtZjRkYi00YjI3LTk0YjQtMTQ1YTFlMmNiZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR6+znIuyFmve9aenyGmECjKRWD83wPJnbsl 2w36pIIlrjCgtS5BGCffP+ThFGBBtBSaq4ctQTkcA/N55sCJynSaPl0KxBvxIjNn I7MNv9LvqcE33t57U1G1/NXAtSahKXkspVasYlLmNdYldCfJdiVgR1N+15h9UmRl vy/RYV3lXrqc9Cy7CRSZG0lSwTeWpXMSgApkGKGQ4HW1eFNyzW51Pe3xS8cdiRPz +dpHF0qWL+MKo2vgG8X2SDxC4z6y+wE/nDEV7i+TBCDfPEoetz0WFzu6/tism1Hj tyO3xbp913XHyJPkRU+6UKglcp6fF1+CaZnEK1fE8tTiXEMiiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdR9W6jYQxqB3/8eFGmTh9krMFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E4ZTEzMTYtNWYyYy0z YWU4LTg5OTAtYzc4MjQ1YjZjMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk7zKuKcRvhM4YnweRI82FEE3wB68Zf3pGrjUaDbANbB6AxZ3OuMDH4 bx/3qQPx4kn2acEuvyAj5YRMbd76fdVR3ckXcRrx+nYBqWw1uwYd/8FR51erYWv5 gHem9TGa6hglQWHcZ/UCBJKwJyxffnDjx0k/IZW8KwrUCaVVk6Xg51n8IUbj+BeB uewXwsSZ39pgVdI5V1u2j6hyPWY9AMvbYE/NtPfTRtIS1BRvECjE8PWrNkBm1Rbk GvdLxYKFUxDt1zcdJhhsQ4DYFzRTfVG6eK2lIrMItTCD3K/newMboZmmgkWILoJg ciKj/OqPbEmYcUGNo1F6ndRVE9yfg4Y= -----END CERTIFICATE-----Generated at Sun Jul 20 17:35:00 2025 by rpki-client