$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/c058da06-5751-3dc7-8b18-acfcdeb128d2.roa File: c058da06-5751-3dc7-8b18-acfcdeb128d2.roa (raw, json) Hash identifier: 2Ay1BhO8M/7G5y9t3v0TK5cQNWbhkcp/I4yD7NofrKQ= Subject key identifier: 06:84:18:F1:8D:94:9B:8C:C9:4C:98:88:3E:22:B7:80:8D:03:82:0D Certificate issuer: /CN=e0647553-32ca-48b6-be58-d6c7f475e654 Certificate serial: 010D0C9F4328584B1AD18F21E44D71BD903616C0 Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/c058da06-5751-3dc7-8b18-acfcdeb128d2.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 7784 IP address blocks: 76.76.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:8f:21:e4:4d:71:bd:90:36:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=a583fb27-4725-4ffd-b6b9-990993e99142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:87:7a:e6:89:c7:ec:fa:cb:a6:0b:33:01:9e: ab:cf:08:75:46:aa:f4:43:da:9b:57:5c:3e:c8:47: 1f:b9:6c:7d:61:9e:7c:45:19:dd:7b:13:d0:55:43: a1:70:78:0f:74:24:6a:55:16:ee:cb:0a:2f:92:af: 96:54:28:48:c7:95:d4:2f:2d:50:15:68:05:9b:4a: 91:65:bc:7c:ec:23:b0:03:72:91:cd:cf:af:0a:47: a8:3c:d0:6a:6f:b9:b9:46:1c:5c:53:e9:c5:88:8b: 27:79:e4:a1:d3:84:39:f8:13:17:79:8f:91:4b:d9: e5:5e:5c:56:59:b7:3c:6f:47:f3:5e:b9:b8:e7:35: 82:75:19:25:ca:2e:81:8a:56:ed:fa:f8:7e:ef:07: 05:02:50:31:97:e9:6f:67:55:fa:e4:85:4b:4b:12: d2:78:24:5e:76:52:99:0d:f8:0a:6c:1c:3a:03:b1: 72:05:b7:3b:12:90:6a:49:19:ce:92:73:37:be:48: af:6c:c9:68:a1:2b:8e:92:82:39:e3:3a:ff:a7:64: bb:48:cf:15:dc:9e:96:57:9c:39:90:0a:23:df:4a: db:7c:ff:64:bb:a5:c4:a3:3b:04:61:a2:b4:86:1d: 2b:cd:f1:88:37:fa:ad:fc:44:c1:ae:cc:0a:e0:e0: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:84:18:F1:8D:94:9B:8C:C9:4C:98:88:3E:22:B7:80:8D:03:82:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/c058da06-5751-3dc7-8b18-acfcdeb128d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl X509v3 Authority Key Identifier: keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer sbgp-ipAddrBlock: critical IPv4: 76.76.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4d:1f:6a:b4:6e:42:d2:7c:03:bd:b0:73:d1:2a:86:96:da: b6:23:4b:ec:04:93:5c:77:5a:73:7f:a7:cc:0e:f5:a5:33:c6: eb:1a:6f:00:3e:49:2e:bc:f3:8e:60:c4:57:e9:29:9b:55:e9: 74:5c:b5:f3:82:7c:b8:c5:64:66:0a:03:be:80:e8:ba:fb:6b: 3c:d1:e9:5a:05:be:ff:78:23:35:0d:01:f6:85:94:cb:70:39: dd:3f:ce:a2:07:e4:85:54:64:c3:0b:4b:4e:3f:a8:3a:cf:fd: d5:56:4f:15:86:4a:9a:f1:42:10:06:77:19:9a:7b:56:ed:bb: 31:e3:bf:2f:40:f7:7a:4f:35:f7:51:45:2e:6a:c5:56:bf:49: a3:b5:3e:63:f4:7f:a3:95:dd:e8:d7:47:12:57:1a:69:d1:50: f1:d4:b3:a4:2e:2b:5d:ef:49:c5:4b:88:03:1b:18:eb:c3:0c: 1d:ac:bc:10:d3:58:ad:d7:a0:22:b0:e3:19:c8:f5:18:ad:08: d4:0b:26:98:c8:3c:9e:7d:f0:6c:45:e0:04:9e:6b:10:e6:06: 2f:80:ee:67:eb:b5:ad:4a:64:d3:a9:c6:13:3d:56:31:41:ea: bb:31:0b:14:86:ec:82:d6:b8:c3:6c:9c:c2:f6:e3:51:a8:5a: e1:47:0a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Y8h5E1xvZA2FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA2NDc1NTMtMzJjYS00OGI2LWJlNTgtZDZjN2Y0NzVl NjU0MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YTU4M2ZiMjctNDcyNS00ZmZkLWI2YjktOTkwOTkzZTk5MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnod65onH7PrLpgszAZ6rzwh1Rqr0Q9qbV1w+ yEcfuWx9YZ58RRndexPQVUOhcHgPdCRqVRbuywovkq+WVChIx5XULy1QFWgFm0qR Zbx87COwA3KRzc+vCkeoPNBqb7m5RhxcU+nFiIsneeSh04Q5+BMXeY+RS9nlXlxW Wbc8b0fzXrm45zWCdRklyi6Bilbt+vh+7wcFAlAxl+lvZ1X65IVLSxLSeCRedlKZ DfgKbBw6A7FyBbc7EpBqSRnOknM3vkivbMlooSuOkoI54zr/p2S7SM8V3J6WV5w5 kAoj30rbfP9ku6XEozsEYaK0hh0rzfGIN/qt/ETBrswK4OCS+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaEGPGNlJuMyUyYiD4it4CNA4INMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0 NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3ZjQ3NWU2NTQvYzA1OGRhMDYtNTc1MS0z ZGM3LThiMTgtYWNmY2RlYjEyOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTA2NDc1NTMtMzJjYS00OGI2LWJl NTgtZDZjN2Y0NzVlNjU0L2UwNjQ3NTUzLTMyY2EtNDhiNi1iZTU4LWQ2YzdmNDc1 ZTY1NC5jcmwwHwYDVR0jBBgwFoAUPeqHK+uoJ4iQ/FpjZA/KjxDA/kcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3 ZjQ3NWU2NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpNH2q0bkLSfAO9sHPRKoaW2rYjS+wEk1x3WnN/p8wO9aUzxusabwA+ SS68845gxFfpKZtV6XRctfOCfLjFZGYKA76A6Lr7azzR6VoFvv94IzUNAfaFlMtw Od0/zqIH5IVUZMMLS04/qDrP/dVWTxWGSprxQhAGdxmae1btuzHjvy9A93pPNfdR RS5qxVa/SaO1PmP0f6OV3ejXRxJXGmnRUPHUs6QuK13vScVLiAMbGOvDDB2svBDT WK3XoCKw4xnI9RitCNQLJpjIPJ598GxF4ASeaxDmBi+A7mfrta1KZNOpxhM9VjFB 6rsxCxSG7ILWuMNsnML241GoWuFHCgs= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:32 2025 by rpki-client