$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f10653e-528b-38cf-9998-600ef41a4e5f.roa File: 9f10653e-528b-38cf-9998-600ef41a4e5f.roa (raw, json) Hash identifier: S7XPFADEXZv8Mo9ZHGnlNcu3PdEOWfBsCu1SqLjr2Es= Subject key identifier: CF:A1:63:B1:9A:B6:A4:49:C4:B9:C8:DA:CD:6C:36:A4:50:0A:FD:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC331E8A2603511F6050E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f10653e-528b-38cf-9998-600ef41a4e5f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 76.102.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:31:e8:a2:60:35:11:f6:05:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3a5c7496-eaa9-49ea-b741-b757ab81d39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d1:f3:93:dc:8b:90:7c:0b:76:4f:31:a1:42: 20:82:78:84:6f:3d:8b:d9:38:8a:92:6a:84:ae:45: a1:df:ed:79:93:b3:9a:32:57:d3:76:fd:64:04:5b: 23:c2:e2:07:66:7c:d8:a7:c7:35:90:d9:0b:bd:18: 4e:fb:f9:0e:40:59:40:f9:c9:18:1a:88:cd:15:2e: 77:7f:22:5e:84:41:3b:85:a5:ec:63:d3:91:72:e0: 0d:47:70:6f:c7:c2:12:e5:60:78:01:d5:42:44:fc: c5:54:18:d9:51:5d:cd:a9:77:b8:5d:f2:81:c3:14: 0b:8b:9c:a9:33:18:63:ba:93:4a:5a:78:f7:d1:62: 3c:89:30:6a:4a:49:f3:1f:50:fb:07:85:80:c4:76: a9:75:7a:0a:fa:80:b7:ac:1b:86:a5:03:c1:ea:0b: 82:c0:27:3c:0d:33:a3:18:3b:6d:d7:fb:8d:d8:33: a0:c3:03:16:25:d4:c5:ae:1c:94:f5:7d:1f:fd:2c: cf:0d:e2:74:dc:b3:2a:98:34:97:02:93:eb:6c:3b: 36:bb:f2:22:97:15:93:74:67:79:82:71:31:2b:f9: 0e:fb:18:87:ff:43:1e:c1:ed:a6:ba:db:8c:43:57: 7c:1c:02:2b:97:7b:1c:7b:c3:d4:05:bd:0d:0c:f1: 51:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A1:63:B1:9A:B6:A4:49:C4:B9:C8:DA:CD:6C:36:A4:50:0A:FD:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f10653e-528b-38cf-9998-600ef41a4e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.102.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e7:7a:48:7b:f8:98:53:72:db:74:fe:29:ae:17:6c:cc:39: fb:e5:fe:d0:7b:39:64:1e:f8:16:64:18:e6:79:7e:f4:7e:96: e2:90:7c:20:cc:06:57:04:a4:b0:b4:87:76:d2:67:a9:12:3b: fd:62:8c:55:1c:b7:d1:60:93:ea:6f:b7:eb:fd:7d:89:98:4f: fd:a1:32:de:1b:73:6b:76:02:b0:8c:63:6e:c2:bf:53:71:a5: 0a:f6:7f:a3:f9:ac:f9:94:89:35:45:b1:28:fc:b7:ad:7c:05: 38:6d:a4:f3:76:d8:cc:0b:33:0d:f5:ea:44:a3:08:ec:b0:23: e1:f6:40:74:83:e0:9a:74:6a:1c:53:61:61:97:17:14:53:3c: 2d:4e:1b:e7:bf:40:33:8c:55:fa:cf:ac:b2:82:16:e1:27:74: b8:7f:cb:77:46:cc:65:e0:75:a8:b6:56:8f:af:fb:73:16:ed: 89:27:a2:8d:c2:83:34:d6:8f:9b:5a:56:11:55:42:32:6b:59: b0:e2:60:20:48:51:de:a0:8a:31:87:c3:16:1a:04:2e:f8:e0: a2:6d:22:b2:18:db:c1:83:af:dc:a7:15:f9:46:b2:2d:c6:cf: bc:08:5a:5f:cf:02:be:0c:c9:a3:ce:29:98:1e:29:c2:ee:d5: 65:d2:34:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswzHoomA1EfYFDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2E1Yzc0OTYtZWFhOS00OWVhLWI3NDEtYjc1N2FiODFkMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNHzk9yLkHwLdk8xoUIggniEbz2L2TiKkmqE rkWh3+15k7OaMlfTdv1kBFsjwuIHZnzYp8c1kNkLvRhO+/kOQFlA+ckYGojNFS53 fyJehEE7haXsY9ORcuANR3Bvx8IS5WB4AdVCRPzFVBjZUV3NqXe4XfKBwxQLi5yp MxhjupNKWnj30WI8iTBqSknzH1D7B4WAxHapdXoK+oC3rBuGpQPB6guCwCc8DTOj GDtt1/uN2DOgwwMWJdTFrhyU9X0f/SzPDeJ03LMqmDSXApPrbDs2u/IilxWTdGd5 gnExK/kO+xiH/0Mewe2mutuMQ1d8HAIrl3sce8PUBb0NDPFRRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+hY7GatqRJxLnI2s1sNqRQCv1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWYxMDY1M2UtNTI4Yi0z OGNmLTk5OTgtNjAwZWY0MWE0ZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTGYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjnekh7+JhTctt0/imuF2zMOfvl/tB7OWQe+BZkGOZ5fvR+luKQfCDM BlcEpLC0h3bSZ6kSO/1ijFUct9Fgk+pvt+v9fYmYT/2hMt4bc2t2ArCMY27Cv1Nx pQr2f6P5rPmUiTVFsSj8t618BThtpPN22MwLMw316kSjCOywI+H2QHSD4Jp0ahxT YWGXFxRTPC1OG+e/QDOMVfrPrLKCFuEndLh/y3dGzGXgdai2Vo+v+3MW7Yknoo3C gzTWj5taVhFVQjJrWbDiYCBIUd6gijGHwxYaBC744KJtIrIY28GDr9ynFflGsi3G z7wIWl/PAr4MyaPOKZgeKcLu1WXSNCI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:19 2025 by rpki-client