$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d444675-6031-388b-b0a0-a5b7c20800b8.roa File: 4d444675-6031-388b-b0a0-a5b7c20800b8.roa (raw, json) Hash identifier: m2lEMXSTbUz6xaj/8Cb1C1DGRbx+mGE4HRvrACT0AHo= Subject key identifier: 17:8C:5D:E0:38:3F:29:C3:72:C9:86:F2:DA:C1:62:AD:A9:C1:6B:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A88F4A0827C63B2D8A27C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d444675-6031-388b-b0a0-a5b7c20800b8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.28.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:8f:4a:08:27:c6:3b:2d:8a:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=37e3d601-6794-4567-9723-4db6280e1c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:d0:7d:bb:80:cf:ec:19:9d:e3:e6:c9:dd: 2f:6e:fd:40:d4:2a:27:24:e4:03:de:10:08:13:f6: 8a:8e:b7:35:0c:5a:2a:8c:0c:2e:c8:19:a1:f7:d0: 0d:5c:8f:c8:3e:3f:42:0d:48:dd:5a:e7:5e:0c:af: 66:61:90:78:3d:96:7c:bd:2c:f0:a6:cb:aa:94:f8: 7d:75:c3:ec:a9:53:39:21:d0:de:e9:ba:fd:89:2e: a9:16:ed:2b:c8:e0:60:95:0a:f2:6c:d3:f0:91:a5: db:af:b9:65:70:48:6f:cc:59:2c:38:bb:75:a2:9f: 38:51:3d:19:e1:65:46:d3:13:3a:92:82:92:50:10: 16:10:03:56:bb:31:c8:40:9f:cf:a6:0c:9c:e2:cd: 5e:79:a7:ae:ea:d3:e8:d2:22:16:52:be:c1:77:e5: ff:a9:6d:85:a5:10:31:dc:3d:1f:d2:35:4a:1b:07: 5b:d3:63:05:f9:e0:2a:e1:37:53:70:dc:48:70:68: 3e:07:6e:6b:4b:cb:b2:0a:cd:63:9f:71:3d:ec:d2: 74:1c:c7:4c:13:a3:cd:9f:6d:91:33:d0:d1:d4:bd: 1b:cc:f6:f4:be:de:9c:c8:4e:ea:7d:d7:f2:98:b9: e5:02:cf:d9:5b:46:fd:fe:2e:ef:b5:1d:2f:0c:50: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8C:5D:E0:38:3F:29:C3:72:C9:86:F2:DA:C1:62:AD:A9:C1:6B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d444675-6031-388b-b0a0-a5b7c20800b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.28.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:84:c3:8d:b5:53:d0:e2:6a:d1:c6:34:83:26:e0:8f:b3:90: 3a:e2:a7:7e:09:0a:e6:c4:83:dc:2b:ee:8b:cc:72:54:50:cc: 5e:48:aa:94:40:74:21:35:e4:9c:fd:b9:76:26:81:d4:42:d7: d0:7a:af:db:79:02:d9:0f:2a:3f:96:d4:32:b7:84:23:52:ad: 83:e8:c7:cb:db:23:d7:97:5e:57:e1:f7:66:91:41:8e:90:aa: b9:47:d6:fd:72:a5:a7:e2:1d:64:53:c5:12:f6:db:3b:d3:36: 2d:d3:45:d5:da:5b:32:b9:33:e8:03:50:ba:d8:b7:2e:23:bf: 51:81:f3:82:ad:03:08:71:c9:d2:e8:de:11:3a:67:2e:58:21: ec:02:63:dc:49:ef:95:99:c9:be:9a:14:8e:df:95:48:52:a6: 73:2d:07:d4:45:18:02:53:26:ae:50:57:56:8d:af:d7:ed:86: e6:e2:3e:b6:45:19:95:a2:af:14:79:39:45:52:2a:c7:94:79: f2:a6:a1:9f:2e:34:54:99:4c:69:0c:d9:df:8a:35:36:0a:37: 27:87:70:24:e9:46:2e:f4:85:95:db:a7:80:6c:88:88:94:d0: 8f:b1:dd:82:04:4f:0e:0e:7b:88:c4:99:d8:2a:f4:89:f1:55: 88:e7:a2:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqI9KCCfGOy2KJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzdlM2Q2MDEtNjc5NC00NTY3LTk3MjMtNGRiNjI4MGUxYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rXQfbuAz+wZnePmyd0vbv1A1ConJOQD3hAI E/aKjrc1DFoqjAwuyBmh99ANXI/IPj9CDUjdWudeDK9mYZB4PZZ8vSzwpsuqlPh9 dcPsqVM5IdDe6br9iS6pFu0ryOBglQrybNPwkaXbr7llcEhvzFksOLt1op84UT0Z 4WVG0xM6koKSUBAWEANWuzHIQJ/Ppgyc4s1eeaeu6tPo0iIWUr7Bd+X/qW2FpRAx 3D0f0jVKGwdb02MF+eAq4TdTcNxIcGg+B25rS8uyCs1jn3E97NJ0HMdME6PNn22R M9DR1L0bzPb0vt6cyE7qfdfymLnlAs/ZW0b9/i7vtR0vDFCSrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeMXeA4PynDcsmG8trBYq2pwWuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ0NDQ2NzUtNjAzMS0z ODhiLWIwYTAtYTViN2MyMDgwMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6Ew421U9DiatHGNIMm4I+zkDrip34JCubEg9wr7ovMclRQzF5IqpRA dCE15Jz9uXYmgdRC19B6r9t5AtkPKj+W1DK3hCNSrYPox8vbI9eXXlfh92aRQY6Q qrlH1v1ypafiHWRTxRL22zvTNi3TRdXaWzK5M+gDULrYty4jv1GB84KtAwhxydLo 3hE6Zy5YIewCY9xJ75WZyb6aFI7flUhSpnMtB9RFGAJTJq5QV1aNr9fthubiPrZF GZWirxR5OUVSKseUefKmoZ8uNFSZTGkM2d+KNTYKNyeHcCTpRi70hZXbp4BsiIiU 0I+x3YIETw4Oe4jEmdgq9InxVYjnosI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:24:04 2025 by rpki-client