$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55108d4e-2cac-38d0-81ab-a00dc863a444.roa File: 55108d4e-2cac-38d0-81ab-a00dc863a444.roa (raw, json) Hash identifier: boRlZX/pNnR/CO9CCnOFvwlN9yUybfU1O50Gv0syrdw= Subject key identifier: DD:64:28:4C:4C:35:5A:DA:FD:4D:A4:AE:30:74:F4:D9:1F:4C:88:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC336E4BA7C9662D3FD2380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55108d4e-2cac-38d0-81ab-a00dc863a444.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.132.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:36:e4:ba:7c:96:62:d3:fd:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d38bf6b1-715a-46bd-a5e7-5206a1e95c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:65:35:e7:d7:5e:7e:52:d7:6d:34:91:c9: 3a:bc:6f:fe:d8:59:42:e5:e5:32:46:85:62:a6:cd: 2d:bf:71:45:21:a3:d2:64:db:f1:57:ba:bb:c1:45: f0:00:25:38:b9:4e:76:ed:41:00:d7:a0:1e:4f:80: f9:3c:59:6c:a0:07:0e:30:a0:63:af:68:b0:04:ef: a4:5a:a6:d9:b5:3a:42:ea:97:ec:45:70:e4:0a:6f: c5:6b:b9:b5:0c:d3:02:54:77:5f:9f:cf:74:34:30: 81:d2:6e:9e:42:46:a2:99:3f:5e:2d:52:06:30:7b: f4:1c:89:19:b2:97:08:4a:f8:b4:d2:7a:de:db:d8: 27:f3:14:c3:6b:c8:94:1f:60:63:1d:6c:85:72:10: 95:a3:4d:d9:fe:7e:67:ac:01:7b:2f:10:c8:b1:22: 50:2e:3b:95:26:ab:5f:7d:8e:06:e6:74:e8:27:0e: 9a:d8:9f:54:26:57:68:59:2c:c7:67:ae:01:b7:27: ba:a5:48:d7:aa:22:cf:34:24:f8:5b:27:62:69:c1: 11:9b:ef:35:c8:6b:ff:fd:a4:1f:6b:15:46:ad:b4: 7c:96:29:75:26:fd:e0:b7:9e:7d:af:73:21:92:65: d6:0f:69:de:c8:ed:67:07:94:ee:18:f6:12:f8:1a: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:64:28:4C:4C:35:5A:DA:FD:4D:A4:AE:30:74:F4:D9:1F:4C:88:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55108d4e-2cac-38d0-81ab-a00dc863a444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8f:f9:70:e2:6b:e1:f5:9b:88:d5:e4:aa:3b:f8:69:94:b2: d2:bd:d8:79:ce:bc:b2:e8:ec:31:91:09:5b:1e:b9:ab:58:9e: 23:1c:79:0c:44:da:ab:db:dc:bc:ed:2f:e9:6d:3b:c2:16:eb: ba:34:d6:7d:3d:b4:a5:3f:e6:e1:36:56:27:f7:38:90:0a:12: c7:7a:2f:e5:02:c1:1c:9b:16:63:e1:17:56:34:b4:11:b5:71: 01:07:72:89:04:5a:58:ea:fa:b1:f2:02:69:b9:6f:49:4c:a7: 00:b1:62:e1:bf:a8:55:b9:6c:77:09:0b:5f:23:5a:8a:27:4d: 74:01:a3:ee:35:34:f8:79:fa:d4:ca:f7:8d:ca:d4:d9:ad:70: bf:cf:b7:14:55:ca:03:4e:e6:d9:75:1c:7f:8d:aa:24:9c:87: 71:19:24:d3:01:5a:14:e2:cc:4d:a3:ea:f5:66:8f:bf:96:0a: 8b:9b:d6:99:01:92:6e:06:91:6d:c4:6f:27:8c:48:3c:af:2c: de:55:81:bb:91:7c:47:cd:2e:7e:82:62:52:db:dc:86:bc:9c: 2c:88:82:ff:20:1a:0a:4d:a8:4c:20:84:07:89:af:15:c3:53: 4c:cc:71:88:6e:fb:86:8e:54:1b:9e:3a:3d:4e:c3:b0:e3:ba: af:4e:39:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswzbkunyWYtP9I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDM4YmY2YjEtNzE1YS00NmJkLWE1ZTctNTIwNmExZTk1YzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhZlNefXXn5S1200kck6vG/+2FlC5eUyRoVi ps0tv3FFIaPSZNvxV7q7wUXwACU4uU527UEA16AeT4D5PFlsoAcOMKBjr2iwBO+k WqbZtTpC6pfsRXDkCm/Fa7m1DNMCVHdfn890NDCB0m6eQkaimT9eLVIGMHv0HIkZ spcISvi00nre29gn8xTDa8iUH2BjHWyFchCVo03Z/n5nrAF7LxDIsSJQLjuVJqtf fY4G5nToJw6a2J9UJldoWSzHZ64Btye6pUjXqiLPNCT4WydiacERm+81yGv//aQf axVGrbR8lil1Jv3gt559r3MhkmXWD2neyO1nB5TuGPYS+BrosQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1kKExMNVra/U2krjB09NkfTIhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTUxMDhkNGUtMmNhYy0z OGQwLTgxYWItYTAwZGM4NjNhNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTISEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSP+XDia+H1m4jV5Ko7+GmUstK92HnOvLLo7DGRCVseuatYniMceQxE 2qvb3LztL+ltO8IW67o01n09tKU/5uE2Vif3OJAKEsd6L+UCwRybFmPhF1Y0tBG1 cQEHcokEWljq+rHyAmm5b0lMpwCxYuG/qFW5bHcJC18jWoonTXQBo+41NPh5+tTK 943K1NmtcL/PtxRVygNO5tl1HH+NqiSch3EZJNMBWhTizE2j6vVmj7+WCoub1pkB km4GkW3EbyeMSDyvLN5VgbuRfEfNLn6CYlLb3Ia8nCyIgv8gGgpNqEwghAeJrxXD U0zMcYhu+4aOVBueOj1Ow7Djuq9OOVQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:03:28 2025 by rpki-client