$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d15915-a7d8-3a1e-84d4-01c11b2314d0.roa File: 20d15915-a7d8-3a1e-84d4-01c11b2314d0.roa (raw, json) Hash identifier: 7UoqIn3ADTxCkrb8Yl6m1Ck88hWCv/R+nsO5fX0dbJk= Subject key identifier: DC:5B:F4:FD:83:EF:CE:74:E6:E6:DE:A3:57:27:D8:0D:80:33:A3:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10BCBF4CB3C513E76D9A400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d15915-a7d8-3a1e-84d4-01c11b2314d0.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 33659 IP address blocks: 76.116.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:cb:f4:cb:3c:51:3e:76:d9:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=f684cf15-e38c-4051-b0ca-b583464d4d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:de:e0:4a:dc:3c:58:8d:3c:9b:6b:f4:15: a9:e2:80:2a:a1:32:fa:e0:8d:e7:42:80:6e:8c:b6: a4:04:d3:4e:6c:80:c8:88:7c:cd:77:6a:b6:64:6f: 22:b8:56:2b:ff:80:fe:a8:79:95:73:98:50:42:76: 21:d2:3f:f4:7b:2a:90:3d:a4:51:07:3f:a9:eb:8e: be:72:25:74:1c:a4:92:0e:d8:30:54:00:48:8b:b5: 9c:15:3a:36:33:4c:46:09:2b:8d:9e:44:a9:89:ba: 40:4d:b8:7c:04:e4:17:b5:b8:e9:fc:92:7c:2b:c0: 33:0f:3b:f9:ae:fa:36:6e:76:d5:33:84:dd:23:48: b1:3f:7e:ae:0b:a5:6b:e2:59:3c:19:19:2e:13:57: c6:86:dd:23:25:e8:c2:42:2d:85:bb:7d:11:4a:10: 0d:74:de:8d:86:7d:b3:c2:78:82:d7:58:00:05:a3: 68:7d:1a:11:a0:b5:2b:09:ba:42:db:19:c4:56:02: 2e:e6:d4:00:2d:5a:2b:95:54:27:bf:76:1d:38:aa: da:8e:f3:dd:22:b2:26:ed:df:0c:ff:2c:c7:5e:9e: eb:89:cd:de:f2:60:71:ed:95:ad:4f:92:44:8b:cb: 94:21:a6:79:f9:50:b5:17:a3:fa:fa:b8:39:38:e0: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5B:F4:FD:83:EF:CE:74:E6:E6:DE:A3:57:27:D8:0D:80:33:A3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d15915-a7d8-3a1e-84d4-01c11b2314d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.116.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ca:3c:4b:06:01:4f:fb:d5:74:72:37:6f:07:f9:29:3a:62: d3:ee:52:37:02:64:22:24:78:77:c6:96:62:0d:a2:4e:a5:b1: a5:cf:ec:dc:17:ad:4c:e8:9b:7e:ba:4f:8c:04:47:43:2b:dd: c2:ad:41:2a:27:2e:50:92:18:6a:4c:b4:fa:90:f6:a4:28:ee: c7:2c:2b:a3:17:d3:d1:43:b2:68:c4:d3:98:12:e6:33:fa:de: 59:f2:69:20:66:17:24:0e:3e:ed:2e:14:d8:11:a9:4e:9a:d6: aa:86:8e:e4:17:1f:db:47:b0:fa:5d:63:67:a4:7e:f3:a7:4f: 97:de:ff:96:92:33:7e:2b:0d:3b:9e:a6:b9:eb:8c:4b:34:ed: 8a:e6:e4:da:52:79:09:49:e8:ec:88:a7:58:42:fd:65:29:be: 13:31:35:e8:3e:d1:3e:55:63:97:11:11:3f:c6:93:15:08:bb: 2b:03:50:77:8e:9a:c6:65:e4:6b:93:30:4c:cc:c8:91:66:69: e5:72:a0:40:06:62:2b:30:d6:25:c5:39:ce:78:2a:a1:24:45: 2b:c1:1b:93:19:3d:09:ba:f2:8f:e8:4e:cc:a0:01:b3:1c:c1: a1:fc:d7:d0:73:3c:8e:43:b6:e3:ca:91:29:2f:ad:91:6b:3a: fe:06:eb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC8v0yzxRPnbZpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZjY4NGNmMTUtZTM4Yy00MDUxLWIwY2EtYjU4MzQ2NGQ0ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOLe4ErcPFiNPJtr9BWp4oAqoTL64I3nQoBu jLakBNNObIDIiHzNd2q2ZG8iuFYr/4D+qHmVc5hQQnYh0j/0eyqQPaRRBz+p646+ ciV0HKSSDtgwVABIi7WcFTo2M0xGCSuNnkSpibpATbh8BOQXtbjp/JJ8K8AzDzv5 rvo2bnbVM4TdI0ixP36uC6Vr4lk8GRkuE1fGht0jJejCQi2Fu30RShANdN6Nhn2z wniC11gABaNofRoRoLUrCbpC2xnEVgIu5tQALVorlVQnv3YdOKrajvPdIrIm7d8M /yzHXp7ric3e8mBx7ZWtT5JEi8uUIaZ5+VC1F6P6+rg5OODauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxb9P2D78505ubeo1cn2A2AM6NYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBkMTU5MTUtYTdkOC0z YTFlLTg0ZDQtMDFjMTFiMjMxNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7KPEsGAU/71XRyN28H+Sk6YtPuUjcCZCIkeHfGlmINok6lsaXP7NwX rUzom366T4wER0Mr3cKtQSonLlCSGGpMtPqQ9qQo7scsK6MX09FDsmjE05gS5jP6 3lnyaSBmFyQOPu0uFNgRqU6a1qqGjuQXH9tHsPpdY2ekfvOnT5fe/5aSM34rDTue prnrjEs07Yrm5NpSeQlJ6OyIp1hC/WUpvhMxNeg+0T5VY5cRET/GkxUIuysDUHeO msZl5GuTMEzMyJFmaeVyoEAGYisw1iXFOc54KqEkRSvBG5MZPQm68o/oTsygAbMc waH819BzPI5DtuPKkSkvrZFrOv4G61E= -----END CERTIFICATE-----Generated at Wed Nov 5 04:33:14 2025 by rpki-client