$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7f1ac5-e24a-36ac-bd84-6ff1f7f70511.roa File: 4f7f1ac5-e24a-36ac-bd84-6ff1f7f70511.roa (raw, json) Hash identifier: 2KZ4rZujnDVUQ0Wusiz6ry/GTSaVY+1meV3U2RVb45Q= Subject key identifier: DC:E8:60:1E:02:02:F5:49:E6:C5:D9:32:92:AB:72:F0:B4:90:2B:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB81A9CE683E5563F310880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7f1ac5-e24a-36ac-bd84-6ff1f7f70511.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 76.17.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:1a:9c:e6:83:e5:56:3f:31:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=99b7cbca-40f6-4f20-b4a1-a5ea96a91de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:b0:be:21:72:90:c8:1b:6d:a1:53:1d:73: 0f:c5:b0:39:ab:d1:d9:e0:0e:15:46:0c:6f:ab:42: d4:f9:17:60:63:a5:53:d3:b3:cf:11:31:89:96:65: 23:4d:b7:df:88:22:03:48:f1:90:e1:f5:6a:6c:40: 4a:99:7d:43:48:d4:7d:66:92:29:2b:d7:6a:6e:ba: 80:21:63:21:32:67:56:d1:a1:fe:12:49:e9:a5:64: 00:e1:79:76:8f:10:01:99:43:fe:05:11:81:34:75: 6c:3e:3c:f0:99:f3:39:2b:e7:7d:11:d8:1e:46:32: 0d:63:1b:8b:51:7e:ad:66:6b:8e:79:a3:a5:cf:cb: 7b:20:3e:87:74:b0:2d:8d:2f:ac:ec:c4:35:89:ef: 2f:01:b3:29:38:17:88:ba:b8:cf:e3:13:fb:5c:af: 6b:a6:a2:d3:94:4c:46:04:0f:fc:a1:ec:1d:9f:80: 7e:da:ad:67:03:7f:05:75:24:17:29:b8:e0:ca:8b: c3:b5:19:a3:6d:ae:c6:d5:38:17:50:89:03:c1:a8: 3c:96:be:5d:ad:b9:4b:04:aa:79:c5:48:b2:a5:bb: 56:4a:c6:af:b4:c8:59:ef:86:2e:f5:8b:62:c6:63: 82:39:d7:a3:e9:b8:a9:ea:65:33:5e:8e:9d:e7:86: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E8:60:1E:02:02:F5:49:E6:C5:D9:32:92:AB:72:F0:B4:90:2B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7f1ac5-e24a-36ac-bd84-6ff1f7f70511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.17.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:56:54:9a:89:31:0b:d8:cd:a0:b3:3e:bc:6a:cc:a9:05:8f: b5:89:4a:20:6d:cc:2d:83:23:c3:fc:3c:40:e1:a2:3c:9b:36: a5:f8:35:09:53:89:8c:bc:a8:84:31:e0:e2:1e:07:e1:3d:89: e4:23:8e:11:56:34:77:98:96:b1:75:ea:a6:e2:35:e5:e5:bf: 1e:93:38:03:59:fc:9d:6b:15:47:75:22:9d:b7:03:4b:09:ed: 1b:bb:0c:e9:f0:51:57:73:2d:ae:5e:22:d8:b8:58:52:44:e1: b4:61:3b:13:80:71:01:8d:5a:a9:0d:2d:34:02:f3:63:58:d0: c2:ee:02:41:67:cc:a4:42:19:ef:c7:5d:8b:3a:a7:6f:d8:ae: 2f:8c:f0:0f:78:1c:eb:97:7f:ec:a9:e4:8f:33:dd:ad:b1:50: 02:ba:84:b2:71:37:6d:97:79:50:f5:50:36:db:45:6d:1e:c5: 0e:a4:fe:e1:64:ed:96:31:71:35:fc:3d:0c:e8:56:90:c4:88: 65:b0:54:44:71:31:77:fa:04:d4:7b:39:f3:87:d5:ab:cd:e3: 3f:0f:34:7c:3b:eb:ae:3d:d8:87:11:47:ec:82:f5:e2:95:c5: 20:3a:f8:04:4d:42:d6:42:37:6e:34:2c:03:8c:e9:a5:3d:d4: a7:32:a4:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uBqc5oPlVj8xCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTliN2NiY2EtNDBmNi00ZjIwLWI0YTEtYTVlYTk2YTkxZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjGwviFykMgbbaFTHXMPxbA5q9HZ4A4VRgxv q0LU+RdgY6VT07PPETGJlmUjTbffiCIDSPGQ4fVqbEBKmX1DSNR9ZpIpK9dqbrqA IWMhMmdW0aH+EknppWQA4Xl2jxABmUP+BRGBNHVsPjzwmfM5K+d9EdgeRjINYxuL UX6tZmuOeaOlz8t7ID6HdLAtjS+s7MQ1ie8vAbMpOBeIurjP4xP7XK9rpqLTlExG BA/8oewdn4B+2q1nA38FdSQXKbjgyovDtRmjba7G1TgXUIkDwag8lr5drblLBKp5 xUiypbtWSsavtMhZ74Yu9YtixmOCOdej6bip6mUzXo6d54aDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzoYB4CAvVJ5sXZMpKrcvC0kCuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY3ZjFhYzUtZTI0YS0z NmFjLWJkODQtNmZmMWY3ZjcwNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhWVJqJMQvYzaCzPrxqzKkFj7WJSiBtzC2DI8P8PEDhojybNqX4NQlT iYy8qIQx4OIeB+E9ieQjjhFWNHeYlrF16qbiNeXlvx6TOANZ/J1rFUd1Ip23A0sJ 7Ru7DOnwUVdzLa5eIti4WFJE4bRhOxOAcQGNWqkNLTQC82NY0MLuAkFnzKRCGe/H XYs6p2/Yri+M8A94HOuXf+yp5I8z3a2xUAK6hLJxN22XeVD1UDbbRW0exQ6k/uFk 7ZYxcTX8PQzoVpDEiGWwVERxMXf6BNR7OfOH1avN4z8PNHw766492IcRR+yC9eKV xSA6+ARNQtZCN240LAOM6aU91KcypKg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:20:47 2025 by rpki-client