$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b2cf752-f7f2-31e0-86d5-3d438f9b0996.roa File: 1b2cf752-f7f2-31e0-86d5-3d438f9b0996.roa (raw, json) Hash identifier: jDCL17excNx04gcxtKJUTLcP93muNSLlcFQ/NnSAqpI= Subject key identifier: A7:47:A8:57:6F:8F:72:6F:2B:69:E8:80:01:8D:36:B8:CA:5D:D4:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA31FF21F9421DDF7CDCC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b2cf752-f7f2-31e0-86d5-3d438f9b0996.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.23.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:31:ff:21:f9:42:1d:df:7c:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5526eaeb-66eb-497f-bed2-a3ef3454476b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:b4:8c:cd:80:ff:ef:05:46:4c:be:1d:6d: f9:0a:79:25:0b:56:8c:ec:fb:8c:59:f3:ee:6b:56: 15:7f:fb:67:64:03:11:e6:07:53:cd:7b:e9:77:d1: b5:a8:31:8f:a4:05:0a:9e:86:3e:c2:a4:ad:c3:4a: 2c:73:06:c7:8d:f1:77:3b:53:9c:6c:fd:14:db:65: 63:41:07:dd:f7:c6:4c:95:4b:d1:b3:36:e2:5d:aa: 75:fb:f3:c0:ba:07:fc:d4:50:63:d4:c8:4b:73:d6: 33:b6:08:59:6a:99:0e:57:6b:1d:52:b8:4b:29:6e: f5:8b:20:57:b5:12:02:7f:ae:d5:99:c6:b2:b3:c7: c7:b1:b7:ba:78:63:71:f5:dd:1b:91:9e:9c:05:2b: 14:5c:93:1c:06:33:f9:ec:4e:a2:79:1b:75:c3:56: ec:5d:3c:09:24:f5:f1:ba:04:f1:4b:8c:7b:94:d8: 3d:58:f2:d6:41:49:87:67:d9:f0:1e:99:d7:8b:46: 73:0f:db:95:83:62:0c:f5:cd:8e:e2:98:fe:37:c5: d9:ca:68:3c:4f:8a:a0:ef:43:49:e9:e7:0c:91:75: a0:f6:09:3d:81:34:9f:a9:cc:2b:bc:82:50:a6:7a: 17:a1:86:10:65:fb:c7:b3:61:00:f4:35:b7:92:f5: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:47:A8:57:6F:8F:72:6F:2B:69:E8:80:01:8D:36:B8:CA:5D:D4:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b2cf752-f7f2-31e0-86d5-3d438f9b0996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.23.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c7:9a:a0:78:fd:02:0c:6f:72:08:e6:8f:44:74:c6:75:28: d2:2a:6b:fc:42:b9:22:5d:27:d4:99:00:8c:13:db:c5:37:15: 2a:ba:47:ba:51:07:66:29:b0:c1:56:40:e4:64:ca:85:32:c7: 8c:58:7b:24:50:72:5a:5a:71:2f:ae:fd:09:14:41:be:b0:8f: 31:be:b7:ae:dd:83:af:2e:ae:9b:80:04:50:e6:ea:2e:ab:7e: 0f:cb:36:81:cf:2f:0b:59:93:6b:30:d5:96:2a:04:94:a2:87: 16:6e:33:37:dd:8c:9b:da:2c:b5:37:14:16:fd:6e:04:77:cf: cf:18:ba:c4:04:ba:54:e6:7e:d7:e6:d7:88:38:76:d0:a7:1e: 59:e6:36:3d:32:f4:fc:0b:ce:61:7f:e6:00:c7:e2:cd:c6:8d: f0:69:a4:f4:f9:4b:c7:0e:7d:57:24:11:52:57:04:8f:90:33: 5c:2e:cd:03:d9:53:29:dc:5a:f1:ee:81:a5:87:9a:6e:dd:c0: 7e:20:81:ba:94:f8:fd:da:71:9d:f0:d7:a5:98:99:3b:71:bb: 4b:b4:c4:ee:36:79:52:9d:d9:e3:a7:93:7c:f0:03:9c:66:45: dc:51:f7:73:8d:b7:32:0b:cd:b6:70:bb:99:59:ef:b3:9e:b1: 7a:28:bf:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqjH/IflCHd983MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTUyNmVhZWItNjZlYi00OTdmLWJlZDItYTNlZjM0NTQ0NzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly60jM2A/+8FRky+HW35CnklC1aM7PuMWfPu a1YVf/tnZAMR5gdTzXvpd9G1qDGPpAUKnoY+wqStw0oscwbHjfF3O1OcbP0U22Vj QQfd98ZMlUvRszbiXap1+/PAugf81FBj1MhLc9YztghZapkOV2sdUrhLKW71iyBX tRICf67Vmcays8fHsbe6eGNx9d0bkZ6cBSsUXJMcBjP57E6ieRt1w1bsXTwJJPXx ugTxS4x7lNg9WPLWQUmHZ9nwHpnXi0ZzD9uVg2IM9c2O4pj+N8XZymg8T4qg70NJ 6ecMkXWg9gk9gTSfqcwrvIJQpnoXoYYQZfvHs2EA9DW3kvVKCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdHqFdvj3JvK2nogAGNNrjKXdQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWIyY2Y3NTItZjdmMi0z MWUwLTg2ZDUtM2Q0MzhmOWIwOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHHmqB4/QIMb3II5o9EdMZ1KNIqa/xCuSJdJ9SZAIwT28U3FSq6R7pR B2YpsMFWQORkyoUyx4xYeyRQclpacS+u/QkUQb6wjzG+t67dg68urpuABFDm6i6r fg/LNoHPLwtZk2sw1ZYqBJSihxZuMzfdjJvaLLU3FBb9bgR3z88YusQEulTmftfm 14g4dtCnHlnmNj0y9PwLzmF/5gDH4s3GjfBppPT5S8cOfVckEVJXBI+QM1wuzQPZ UyncWvHugaWHmm7dwH4ggbqU+P3acZ3w16WYmTtxu0u0xO42eVKd2eOnk3zwA5xm RdxR93ONtzILzbZwu5lZ77OesXoovwE= -----END CERTIFICATE-----Generated at Tue Oct 21 22:16:30 2025 by rpki-client