$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9d154e9-caa7-35be-9390-e62b2038e3ed.roa File: a9d154e9-caa7-35be-9390-e62b2038e3ed.roa (raw, json) Hash identifier: vBynX4rZIR+86SWAtpJNQ7vuO1DXFxUjLzStYEfs3OQ= Subject key identifier: D3:42:E0:B4:B5:CE:9E:1C:8E:A9:05:93:1E:5A:F2:09:C6:51:F9:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCC2F6210C1E016AAA2C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9d154e9-caa7-35be-9390-e62b2038e3ed.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 76.22.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:c2:f6:21:0c:1e:01:6a:aa:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=7800c3be-393c-498f-9b00-811623f7a553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6e:70:c0:4b:73:a7:05:90:0a:06:1a:57:ed: 18:02:fa:23:13:f6:d0:c0:80:f0:61:19:02:ef:8b: 8c:74:9e:a7:6f:7e:0e:16:17:96:78:b0:ad:24:33: 62:ba:53:6a:ae:0e:57:ed:64:ec:3f:40:c1:cc:fc: 57:fd:7d:ca:b6:25:59:2a:49:85:ce:af:0e:f1:7c: 7e:89:94:c7:ef:07:0a:62:6e:36:e7:ea:b7:77:03: 30:ae:9f:3a:ed:6a:d4:55:9a:b7:dc:4b:9c:af:5d: 25:3e:0e:60:37:66:41:86:67:5f:ff:68:14:bb:b9: 68:cb:19:93:ad:ff:19:21:09:a6:e6:2c:b9:a5:1b: 1a:c1:3d:02:a1:4a:71:5e:ec:58:25:37:95:24:15: 7f:73:2c:4a:b7:b3:a5:c4:49:39:55:d2:c6:6a:30: 9e:67:ec:de:cc:95:61:87:7c:ac:de:11:f4:3b:cd: 4c:0f:72:ce:1a:16:cd:e4:4d:38:38:d7:da:dd:61: 3a:49:cc:b5:9c:4b:98:6d:f6:11:2c:39:7f:69:32: bb:ec:e2:9d:49:25:df:77:f4:95:21:71:5f:e0:a4: 55:54:85:8e:80:d9:ad:88:89:8d:17:f1:f0:fe:3c: f1:66:64:5b:7b:35:9b:ee:bf:1a:07:b0:45:45:b1: 0c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:42:E0:B4:B5:CE:9E:1C:8E:A9:05:93:1E:5A:F2:09:C6:51:F9:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9d154e9-caa7-35be-9390-e62b2038e3ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.22.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:54:60:d4:3c:e1:9a:e3:83:12:bc:d0:af:96:92:e8:49:7e: cd:f9:91:fb:1d:ac:df:28:f4:f0:bd:ad:f7:a8:0a:bf:e5:d7: 2d:09:65:30:59:cd:ab:f3:25:c2:65:e1:9b:70:7f:99:27:12: bb:b4:0b:79:c2:82:50:a4:d2:2e:38:2d:fa:77:47:d3:53:76: a8:61:53:91:e0:28:40:41:61:21:1a:1d:b5:b3:8a:91:f1:50: 2b:5b:36:ee:f8:28:d9:c2:63:27:31:68:5d:7b:0b:d3:68:3a: 51:d6:f0:b1:a6:eb:81:d1:d1:ec:51:00:82:f4:27:f0:5f:87: 1b:27:45:77:55:bb:58:df:78:68:41:2a:9b:66:43:3c:ce:df: 85:3a:fd:91:f5:f8:85:f5:f2:02:7f:28:0e:84:8e:94:fe:d4: c9:2d:e8:1d:4d:6a:fa:6a:77:5b:a9:07:ba:76:12:88:9b:7b: 0a:96:32:04:95:bf:5a:2d:c2:d5:73:d1:46:9b:8c:a3:07:2a: 66:c7:40:ab:0f:2b:2d:28:28:e0:03:13:91:7a:13:14:62:25: 2e:12:fb:74:22:c2:85:af:cd:39:ae:f4:11:cb:00:f0:e0:c1: ed:37:8c:52:51:bb:9e:75:8c:62:5f:98:46:b3:df:26:73:a1: ae:da:bb:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/ML2IQweAWqqLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NzgwMGMzYmUtMzkzYy00OThmLTliMDAtODExNjIzZjdhNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW5wwEtzpwWQCgYaV+0YAvojE/bQwIDwYRkC 74uMdJ6nb34OFheWeLCtJDNiulNqrg5X7WTsP0DBzPxX/X3KtiVZKkmFzq8O8Xx+ iZTH7wcKYm425+q3dwMwrp867WrUVZq33Eucr10lPg5gN2ZBhmdf/2gUu7loyxmT rf8ZIQmm5iy5pRsawT0CoUpxXuxYJTeVJBV/cyxKt7OlxEk5VdLGajCeZ+zezJVh h3ys3hH0O81MD3LOGhbN5E04ONfa3WE6Scy1nEuYbfYRLDl/aTK77OKdSSXfd/SV IXFf4KRVVIWOgNmtiImNF/Hw/jzxZmRbezWb7r8aB7BFRbEM6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNC4LS1zp4cjqkFkx5a8gnGUfncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlkMTU0ZTktY2FhNy0z NWJlLTkzOTAtZTYyYjIwMzhlM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhUYNQ84ZrjgxK80K+WkuhJfs35kfsdrN8o9PC9rfeoCr/l1y0JZTBZ zavzJcJl4Ztwf5knEru0C3nCglCk0i44Lfp3R9NTdqhhU5HgKEBBYSEaHbWzipHx UCtbNu74KNnCYycxaF17C9NoOlHW8LGm64HR0exRAIL0J/BfhxsnRXdVu1jfeGhB KptmQzzO34U6/ZH1+IX18gJ/KA6EjpT+1Mkt6B1Navpqd1upB7p2EoibewqWMgSV v1otwtVz0UabjKMHKmbHQKsPKy0oKOADE5F6ExRiJS4S+3QiwoWvzTmu9BHLAPDg we03jFJRu551jGJfmEaz3yZzoa7au9A= -----END CERTIFICATE-----Generated at Sun Jul 20 17:45:34 2025 by rpki-client