$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96d2c0dc-777d-31fb-8c7f-9dcdd7b814d5.roa File: 96d2c0dc-777d-31fb-8c7f-9dcdd7b814d5.roa (raw, json) Hash identifier: rX1irLofJlWLWGZEDzgF/RjzVwknOCnx7tL1MQ6KzpI= Subject key identifier: 9A:C7:33:4F:93:AA:58:74:10:A1:26:2E:4B:A3:5A:81:D1:4C:6D:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA8CFB9FF39A26CFCE8600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96d2c0dc-777d-31fb-8c7f-9dcdd7b814d5.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 76.20.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:8c:fb:9f:f3:9a:26:cf:ce:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=71508524-9f14-4ed8-9ab8-b6f429177c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:95:25:86:4e:15:18:15:36:2b:2b:3b:a4: 7d:54:fe:4f:ac:fd:02:69:cb:21:d8:4f:1f:2c:be: a1:dc:e6:26:50:44:92:01:2b:9c:b7:6b:9d:2a:f2: ef:50:e2:8c:6a:ae:10:05:a3:b2:f8:fb:a6:8c:0c: cf:80:ad:26:6b:71:88:1d:95:58:38:ab:6f:33:9a: a8:c3:88:98:fe:f1:99:7e:31:d2:aa:c3:bf:f2:8d: a1:3e:3c:af:0e:99:3d:6f:c5:d3:9c:f5:03:1f:98: 7e:4b:f2:84:99:b2:36:8f:6f:7d:ec:da:85:1f:a3: 4c:2b:81:b7:ed:3c:55:29:41:e0:62:0d:c5:d0:b1: 97:45:9d:fa:80:9a:61:77:bb:62:4c:17:16:d9:b9: 5d:be:bb:52:af:6f:a5:f2:9a:9b:17:f3:d2:b8:5c: d0:3e:36:24:03:fa:72:35:29:e9:a9:a6:bd:81:34: 68:5a:9b:39:6c:33:18:a0:7f:73:c4:4c:24:0f:dc: bd:94:be:49:ea:d9:bc:27:4c:60:ed:8a:1f:ed:21: 54:44:24:50:24:38:8d:42:ac:87:c3:75:0a:c5:63: d4:f2:04:90:0b:70:7c:ad:64:ca:60:b6:1c:50:fa: e6:ff:56:c9:4d:58:3a:f3:56:c3:4b:1c:d8:38:09: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:33:4F:93:AA:58:74:10:A1:26:2E:4B:A3:5A:81:D1:4C:6D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96d2c0dc-777d-31fb-8c7f-9dcdd7b814d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.20.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d5:c2:87:3d:05:97:e6:dd:b1:54:c9:bf:e1:35:af:5c:89: 6c:98:5e:5d:b2:a2:9f:8d:0a:85:bd:78:06:b5:ed:ef:39:58: 91:8c:1f:5c:74:ee:61:54:d3:96:cf:ee:ca:05:3a:9f:2f:4b: 1a:10:ac:b7:20:f7:47:d1:03:96:1c:2b:db:8b:af:59:06:90: d2:0d:c3:18:37:f9:a3:37:64:d3:29:3e:54:88:d0:2b:7c:d4: ad:08:12:ec:ed:bb:f1:4c:42:19:dd:34:6c:13:9b:85:5c:5c: 3a:eb:4a:2c:66:bc:49:79:83:b7:50:a3:bb:ee:66:85:0b:31: 0c:8a:e1:65:40:d3:22:ca:f7:d7:79:57:70:d4:c6:97:39:39: 76:69:0a:b2:8a:83:dd:f1:1f:7d:ee:ec:ce:ef:1b:be:76:4f: 6b:75:f3:b0:5d:1d:76:23:e7:95:79:92:d4:44:93:53:18:bb: 51:45:57:53:91:a8:f3:ae:55:0a:46:58:46:9a:51:08:64:6d: 8a:54:15:ba:6a:24:8e:73:ce:81:e9:1d:5a:a1:0b:3f:63:42: d4:62:d7:9b:20:b7:24:41:47:ce:3e:84:01:f9:5d:13:e9:0b: 71:6e:3b:6e:9f:45:67:b0:48:b2:8c:95:37:ca:41:b0:62:99: 60:5c:04:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqoz7n/OaJs/OhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzE1MDg1MjQtOWYxNC00ZWQ4LTlhYjgtYjZmNDI5MTc3Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxayVJYZOFRgVNisrO6R9VP5PrP0Cacsh2E8f LL6h3OYmUESSASuct2udKvLvUOKMaq4QBaOy+PumjAzPgK0ma3GIHZVYOKtvM5qo w4iY/vGZfjHSqsO/8o2hPjyvDpk9b8XTnPUDH5h+S/KEmbI2j2997NqFH6NMK4G3 7TxVKUHgYg3F0LGXRZ36gJphd7tiTBcW2bldvrtSr2+l8pqbF/PSuFzQPjYkA/py NSnpqaa9gTRoWps5bDMYoH9zxEwkD9y9lL5J6tm8J0xg7Yof7SFURCRQJDiNQqyH w3UKxWPU8gSQC3B8rWTKYLYcUPrm/1bJTVg681bDSxzYOAlWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrHM0+Tqlh0EKEmLkujWoHRTG0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTZkMmMwZGMtNzc3ZC0z MWZiLThjN2YtOWRjZGQ3YjgxNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDVwoc9BZfm3bFUyb/hNa9ciWyYXl2yop+NCoW9eAa17e85WJGMH1x0 7mFU05bP7soFOp8vSxoQrLcg90fRA5YcK9uLr1kGkNINwxg3+aM3ZNMpPlSI0Ct8 1K0IEuztu/FMQhndNGwTm4VcXDrrSixmvEl5g7dQo7vuZoULMQyK4WVA0yLK99d5 V3DUxpc5OXZpCrKKg93xH33u7M7vG752T2t187BdHXYj55V5ktREk1MYu1FFV1OR qPOuVQpGWEaaUQhkbYpUFbpqJI5zzoHpHVqhCz9jQtRi15sgtyRBR84+hAH5XRPp C3FuO26fRWewSLKMlTfKQbBimWBcBFo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:20:59 2025 by rpki-client