$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa File: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (raw, json) Hash identifier: dTo9hlnoRsMKjXesfRSXI9aGEpPE++qLNbqgmUvVJlo= Subject key identifier: 0F:90:C4:D2:AC:06:A1:8F:29:09:77:9A:A7:2E:01:9B:BE:CA:FF:6F Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584BA39CFC8A3840BB1715B5C6DA Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 36329 IP address blocks: 64.58.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fc:8a:38:40:bb:17:15:b5:c6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=986bd561-63f2-4c31-a21d-ebb08da9fb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:75:a7:a7:3e:89:44:71:fd:a8:87:cd:59:a0: 3d:5f:25:8b:57:92:a8:7d:da:75:69:9f:3f:ba:f2: 7c:70:91:2d:41:15:27:bd:39:1c:38:a8:96:eb:eb: fd:ca:27:2d:bd:ed:16:6c:43:77:19:96:b2:17:fe: 53:56:75:d5:6a:39:aa:db:c8:80:67:2d:d0:9f:55: 7a:83:37:06:50:74:d5:d4:dd:2b:96:02:3e:c7:cf: 5d:46:36:c5:b4:b1:a8:2f:68:7c:fc:92:8a:d8:01: 21:e0:39:11:45:9c:d1:81:1b:83:14:23:d2:6c:aa: ec:41:6f:34:af:40:e5:ed:22:f6:0f:49:78:00:c2: 36:12:b3:6f:a4:f6:89:4a:0c:89:ef:fe:67:2a:54: 8c:fc:50:8b:db:ba:76:a9:5a:64:d3:d7:8c:98:0c: b9:43:a8:53:f7:b5:93:31:5d:d9:e7:23:59:45:9a: d1:66:7f:3a:0f:12:e3:a4:d4:3c:6a:75:a7:b5:7b: a9:c3:8e:7d:e5:69:36:79:d1:fa:a3:67:fa:66:7a: a1:35:71:0c:db:74:50:eb:4f:d6:74:09:57:8d:c9: 85:15:6f:2c:ef:79:f9:a1:3d:09:cb:93:89:af:82: b3:25:00:7d:ec:a5:5a:54:0e:b6:f9:3c:14:10:5d: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:90:C4:D2:AC:06:A1:8F:29:09:77:9A:A7:2E:01:9B:BE:CA:FF:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3b:66:0c:d0:00:50:56:e2:3d:6d:c8:8c:65:db:49:5d:38: a5:c6:04:35:e1:40:a7:11:f8:92:b9:64:d7:e4:6d:3c:cb:2a: e6:5e:97:a5:61:ff:31:c4:c1:20:87:39:f0:fd:d3:84:7e:5b: 8c:f3:23:e1:d1:e2:47:e6:81:e0:37:dd:40:8f:8d:17:df:85: 4c:45:97:6a:47:72:2f:34:46:d4:e1:b1:b8:25:d5:dc:27:1d: 19:d4:a4:69:32:96:7b:45:9c:71:ca:1a:8b:34:b9:fc:d0:6f: b0:e6:e7:89:31:0e:91:e9:fe:53:1e:a0:c8:7d:b1:b9:a2:b9: 8f:2e:93:b4:f1:d3:c7:ce:35:cb:2d:fd:1c:7d:50:aa:3a:3d: c0:01:ab:64:f5:16:1f:74:3d:fe:1d:61:e9:35:94:6e:58:16: cd:8a:ad:6c:2e:f0:8c:3d:84:00:1f:16:6d:7b:3e:19:a7:b1: 2f:28:f0:e6:3c:bf:b8:a1:16:ef:76:d7:b3:ec:aa:1d:d7:eb: 02:8f:a1:29:51:8a:4e:76:18:88:ec:98:6e:4c:19:29:8c:79: 3e:07:1b:6e:55:f6:83:e0:e5:ef:1d:9c:04:4b:30:ec:b3:24: b6:46:e0:95:aa:6d:9b:2d:0e:90:5c:22:84:42:c6:0c:d1:92: f6:68:f3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPyKOEC7FxW1xtowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTg2YmQ1NjEtNjNmMi00YzMxLWEyMWQtZWJiMDhkYTlmYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Wnpz6JRHH9qIfNWaA9XyWLV5Kofdp1aZ8/ uvJ8cJEtQRUnvTkcOKiW6+v9yictve0WbEN3GZayF/5TVnXVajmq28iAZy3Qn1V6 gzcGUHTV1N0rlgI+x89dRjbFtLGoL2h8/JKK2AEh4DkRRZzRgRuDFCPSbKrsQW80 r0Dl7SL2D0l4AMI2ErNvpPaJSgyJ7/5nKlSM/FCL27p2qVpk09eMmAy5Q6hT97WT MV3Z5yNZRZrRZn86DxLjpNQ8anWntXupw4595Wk2edH6o2f6ZnqhNXEM23RQ60/W dAlXjcmFFW8s73n5oT0Jy5OJr4KzJQB97KVaVA62+TwUEF0cLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+QxNKsBqGPKQl3mqcuAZu+yv9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMjBlMjE1MjMtNzg2Ny0z ZTZkLWJkMmEtZjRiYTU1NThjZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk7ZgzQAFBW4j1tyIxl20ldOKXGBDXhQKcR+JK5ZNfkbTzLKuZel6Vh /zHEwSCHOfD904R+W4zzI+HR4kfmgeA33UCPjRffhUxFl2pHci80RtThsbgl1dwn HRnUpGkylntFnHHKGos0ufzQb7Dm54kxDpHp/lMeoMh9sbmiuY8uk7Tx08fONcst /Rx9UKo6PcABq2T1Fh90Pf4dYek1lG5YFs2KrWwu8Iw9hAAfFm17PhmnsS8o8OY8 v7ihFu9217Psqh3X6wKPoSlRik52GIjsmG5MGSmMeT4HG25V9oPg5e8dnARLMOyz JLZG4JWqbZstDpBcIoRCxgzRkvZo88M= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:04 2025 by rpki-client