$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60b70f0-4e28-3c8a-bebf-287850b1da79.roa File: d60b70f0-4e28-3c8a-bebf-287850b1da79.roa (raw, json) Hash identifier: PQrAw3LI1hcKPJWx4er7jCD+z4Nc6sceiq510E0rTzw= Subject key identifier: 9F:53:F1:C0:2B:68:66:27:A9:C8:47:32:03:F7:39:08:B5:A3:2F:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCC5FF81D7AF5C861E0480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60b70f0-4e28-3c8a-bebf-287850b1da79.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 76.129.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:c5:ff:81:d7:af:5c:86:1e:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=191c5b35-4a01-441b-8a1b-e1be16e26c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:ca:b6:0b:f9:33:db:8d:06:23:58:22:ea: 17:75:fc:42:f3:95:3b:b5:32:1d:ca:df:67:7c:bd: 84:97:06:49:43:b1:bf:3e:ec:8a:c4:4a:43:f8:4d: 9b:6d:c6:8d:d2:c4:40:2a:25:43:2a:17:17:74:ba: 20:40:a0:49:ae:53:86:02:f5:29:2d:d3:64:f4:62: d9:24:ca:09:cb:94:6b:4f:b6:d5:dd:92:73:a7:a9: 62:df:c1:d1:2c:59:99:30:cb:bc:1e:7b:40:bc:90: 32:bb:9a:5a:ba:50:50:ca:09:5d:04:2d:c4:34:16: 41:fe:a4:3a:ce:fe:46:21:3a:b6:c3:4e:f0:ea:a6: d7:44:cc:b6:e9:92:0a:ba:c2:f3:eb:f2:4a:6d:58: 68:67:8d:f0:9d:bd:7b:d7:bb:0f:95:b5:00:8d:8a: 05:e5:67:c8:02:c9:b6:43:24:06:cf:a5:7c:69:34: 37:7a:7e:74:f4:1e:9c:7d:c7:89:f1:3b:0f:35:5e: f9:41:14:f7:41:7e:d6:70:0f:7a:82:c2:88:3a:5f: 18:8c:2f:4a:15:c7:70:63:83:38:ea:7e:b1:1d:d9: 91:70:8a:b7:bc:b8:dd:c7:bc:7a:6a:4e:70:cb:42: d8:dd:18:89:86:56:fa:db:df:00:24:0f:2d:95:6d: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:53:F1:C0:2B:68:66:27:A9:C8:47:32:03:F7:39:08:B5:A3:2F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60b70f0-4e28-3c8a-bebf-287850b1da79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:34:5a:4d:bd:58:31:24:73:4b:41:29:e6:78:13:fc:ca:02: 8f:9f:8d:aa:91:8b:76:57:16:a0:06:09:6d:5b:05:f4:69:1b: dc:ab:47:c4:0c:31:ed:d4:1a:11:f3:28:30:c3:a2:a8:1a:c6: 27:08:d1:65:fc:95:67:d2:7a:cf:7a:f5:86:0d:39:0e:69:b5: 84:72:4b:9f:29:24:f0:89:ac:a0:01:3c:0a:53:1b:8e:ed:59: bc:e2:99:c2:a8:3c:4a:2f:20:27:1f:60:08:bd:53:ec:57:28: f4:d1:38:0d:35:a6:34:18:cc:1e:c0:3c:f4:88:40:61:1c:36: 81:1a:5c:3c:f3:39:1c:ba:d1:c5:c4:65:4f:7c:f4:c1:ae:ef: c1:0a:75:05:a3:a9:01:9c:a4:c4:84:d7:74:61:eb:aa:b9:58: 31:4a:75:de:57:a6:03:a5:19:20:21:e9:d7:4d:38:4c:99:36: f9:60:d9:97:5b:fb:dd:13:40:70:c5:4a:fa:dc:c9:be:29:c1: 8d:6c:bf:7b:87:57:ec:4e:67:4f:86:f0:78:be:d1:fa:df:77: 2a:60:a2:e6:29:a3:3f:95:c8:dc:6f:0f:89:95:fa:27:09:1a: 72:1b:5b:ea:cc:2a:bc:32:f5:3b:5b:dc:9a:90:13:b6:62:e6: 5a:75:b1:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/MX/gdevXIYeBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MTkxYzViMzUtNGEwMS00NDFiLThhMWItZTFiZTE2ZTI2Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0vKtgv5M9uNBiNYIuoXdfxC85U7tTIdyt9n fL2ElwZJQ7G/PuyKxEpD+E2bbcaN0sRAKiVDKhcXdLogQKBJrlOGAvUpLdNk9GLZ JMoJy5RrT7bV3ZJzp6li38HRLFmZMMu8HntAvJAyu5paulBQygldBC3ENBZB/qQ6 zv5GITq2w07w6qbXRMy26ZIKusLz6/JKbVhoZ43wnb1717sPlbUAjYoF5WfIAsm2 QyQGz6V8aTQ3en509B6cfceJ8TsPNV75QRT3QX7WcA96gsKIOl8YjC9KFcdwY4M4 6n6xHdmRcIq3vLjdx7x6ak5wy0LY3RiJhlb6298AJA8tlW3/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9T8cAraGYnqchHMgP3OQi1oy9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDYwYjcwZjAtNGUyOC0z YzhhLWJlYmYtMjg3ODUwYjFkYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI40Wk29WDEkc0tBKeZ4E/zKAo+fjaqRi3ZXFqAGCW1bBfRpG9yrR8QM Me3UGhHzKDDDoqgaxicI0WX8lWfSes969YYNOQ5ptYRyS58pJPCJrKABPApTG47t WbzimcKoPEovICcfYAi9U+xXKPTROA01pjQYzB7APPSIQGEcNoEaXDzzORy60cXE ZU989MGu78EKdQWjqQGcpMSE13Rh66q5WDFKdd5XpgOlGSAh6ddNOEyZNvlg2Zdb +90TQHDFSvrcyb4pwY1sv3uHV+xOZ0+G8Hi+0frfdypgouYpoz+VyNxvD4mV+icJ GnIbW+rMKrwy9Ttb3JqQE7Zi5lp1sag= -----END CERTIFICATE-----Generated at Mon Jul 21 02:08:58 2025 by rpki-client