$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f6362f5-0856-301b-8163-1c07f081a340.roa File: 3f6362f5-0856-301b-8163-1c07f081a340.roa (raw, json) Hash identifier: tWA7zL+9zNUGois5zhrCwOsqbTMZDkzBokrXmSVEh0w= Subject key identifier: 44:35:3D:C0:6F:A3:D8:FA:C9:2A:A5:05:A3:41:48:21:BE:CC:A7:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B389D5FB5DACB14EAF540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f6362f5-0856-301b-8163-1c07f081a340.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 76.20.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:38:9d:5f:b5:da:cb:14:ea:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=10a0e33f-3c78-4d48-9655-fe4c1ee81afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:56:7d:18:1e:e5:47:da:e4:52:4f:d0:49: fd:17:76:63:bc:2c:a8:df:aa:a2:f6:d2:88:a7:b1: e5:21:5f:85:49:e0:66:46:74:cd:4b:30:d9:38:ee: 4d:1e:e3:62:e1:1c:10:d6:01:81:3f:aa:36:58:04: fe:67:1a:02:42:ab:92:79:a9:8c:80:1e:85:69:12: a6:27:36:38:2b:1e:97:1b:cc:2b:1c:05:b8:df:97: 64:d3:08:e6:d5:79:81:67:90:46:e2:28:94:d7:32: 47:be:06:b0:2e:a6:f1:17:d9:0a:48:d6:94:10:c8: 7a:d8:ed:3b:3f:41:19:d8:7c:0c:a7:a6:de:21:38: c7:32:38:4e:e2:76:da:63:ee:3a:b0:0f:cf:8c:84: b0:32:cb:2e:53:5b:6c:46:6f:b7:fc:cf:2c:44:3e: df:92:f4:c5:6e:f1:fc:7c:15:a8:94:fe:41:19:94: fb:4a:23:38:45:75:2f:57:9c:26:90:55:5c:66:6a: cf:e2:44:74:2d:32:43:57:d5:23:f5:3b:13:14:35: 4b:2d:25:e9:81:de:82:07:2b:83:b5:62:18:3b:4e: 81:29:09:7a:8b:95:2b:ac:d0:5a:25:4a:31:b2:7d: 75:1d:f0:ab:87:f1:1c:a7:e4:39:26:8e:dc:0c:51: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:35:3D:C0:6F:A3:D8:FA:C9:2A:A5:05:A3:41:48:21:BE:CC:A7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f6362f5-0856-301b-8163-1c07f081a340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.20.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:40:e5:a4:9d:58:f9:3d:1c:2a:e0:db:11:4b:fd:ee:bf:3f: 53:b0:28:ae:b2:51:34:24:84:90:6d:cf:2c:ec:29:8c:c2:95: 26:bf:24:3e:89:08:6e:94:bc:f4:0d:10:72:63:8d:fe:ae:00: 73:fa:93:25:bc:32:5f:36:e4:0e:81:ba:6c:10:39:2b:c6:85: b7:70:a7:fc:75:ae:14:e1:46:0e:21:8c:36:ec:b4:d4:a7:fc: 70:61:f1:34:03:b9:b5:89:5f:b5:f9:5a:77:3f:6c:29:6c:ee: 75:ff:e0:a2:b8:eb:65:a6:ab:43:59:84:e4:15:bb:58:48:f1: 92:9a:6a:fc:bc:f0:d4:a6:af:fb:31:d1:a7:64:8a:2b:34:b9: 49:25:a2:b6:83:8b:86:36:70:c3:01:5a:d9:a5:7c:70:97:b8: 8d:a0:6d:84:ea:ac:82:9b:11:9e:27:c0:48:7c:6f:2f:d8:53: 33:14:6c:48:0c:1b:6b:81:08:d0:2e:4a:68:c0:57:98:a2:3a: 40:0e:9d:c9:05:22:5c:73:ac:b7:97:1c:79:1e:74:29:ff:13: da:77:a6:a7:1a:af:d1:15:3b:91:2f:a8:f8:c7:32:47:d8:fd: 5f:6a:2f:8e:85:fc:0e:24:34:ff:4d:1a:bf:e3:e0:a0:83:44: 91:31:44:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCzidX7XayxTq9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MTBhMGUzM2YtM2M3OC00ZDQ4LTk2NTUtZmU0YzFlZTgxYWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5tWfRge5Ufa5FJP0En9F3ZjvCyo36qi9tKI p7HlIV+FSeBmRnTNSzDZOO5NHuNi4RwQ1gGBP6o2WAT+ZxoCQquSeamMgB6FaRKm JzY4Kx6XG8wrHAW435dk0wjm1XmBZ5BG4iiU1zJHvgawLqbxF9kKSNaUEMh62O07 P0EZ2HwMp6beITjHMjhO4nbaY+46sA/PjISwMssuU1tsRm+3/M8sRD7fkvTFbvH8 fBWolP5BGZT7SiM4RXUvV5wmkFVcZmrP4kR0LTJDV9Uj9TsTFDVLLSXpgd6CByuD tWIYO06BKQl6i5UrrNBaJUoxsn11HfCrh/Ecp+Q5Jo7cDFFliQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ1PcBvo9j6ySqlBaNBSCG+zKesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y2MzYyZjUtMDg1Ni0z MDFiLTgxNjMtMWMwN2YwODFhMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5A5aSdWPk9HCrg2xFL/e6/P1OwKK6yUTQkhJBtzyzsKYzClSa/JD6J CG6UvPQNEHJjjf6uAHP6kyW8Ml825A6BumwQOSvGhbdwp/x1rhThRg4hjDbstNSn /HBh8TQDubWJX7X5Wnc/bCls7nX/4KK462Wmq0NZhOQVu1hI8ZKaavy88NSmr/sx 0adkiis0uUkloraDi4Y2cMMBWtmlfHCXuI2gbYTqrIKbEZ4nwEh8by/YUzMUbEgM G2uBCNAuSmjAV5iiOkAOnckFIlxzrLeXHHkedCn/E9p3pqcar9EVO5EvqPjHMkfY /V9qL46F/A4kNP9NGr/j4KCDRJExROQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:15 2025 by rpki-client