$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e6b1a3-b4c8-3eac-b6b8-96700ff75f79.roa File: 33e6b1a3-b4c8-3eac-b6b8-96700ff75f79.roa (raw, json) Hash identifier: T847+CiqniGoVnfIaVtLP9yHFpElm7hISYiTzV6oM2s= Subject key identifier: 20:5F:22:23:48:EC:5E:8B:18:F2:89:9A:3F:11:92:23:68:2C:58:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA2D26CEF4C7CAA9712AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e6b1a3-b4c8-3eac-b6b8-96700ff75f79.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.119.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:2d:26:ce:f4:c7:ca:a9:71:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=de382f61-91a0-4a66-bc78-61525fad874f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:0b:f1:4b:fa:4d:28:17:3b:64:fd:ba:5f: b0:20:2d:12:9c:f6:d9:d0:3d:f7:3a:00:6f:5f:bb: 37:1f:33:7b:2f:3e:82:fa:4b:43:f3:dd:f9:9e:45: ec:7e:1e:03:bf:91:d8:92:f1:34:76:3e:db:34:1c: 49:a3:6f:b1:d3:04:7d:63:7f:b6:0e:29:13:72:33: 3c:1e:67:09:39:6a:be:f3:b8:46:64:fc:41:d6:a9: 59:93:b4:47:39:c4:ad:89:74:01:d1:c4:41:c9:79: 78:3d:7b:a0:4c:7f:4e:b0:2e:bf:cd:ce:87:23:82: 4e:28:7b:e8:ae:34:08:f3:48:01:3f:54:df:c7:54: 74:4e:66:fa:24:47:fc:0a:86:d5:fa:3b:4a:5d:df: 34:50:ed:26:b8:67:2b:9d:a4:07:4a:71:99:64:bd: d5:70:00:cc:ef:4d:39:f2:2d:92:e5:60:a3:30:2f: 38:09:b7:5e:e8:f2:cd:67:45:4c:ac:e4:05:c0:4f: c9:0b:63:4e:df:23:b5:83:f0:3e:80:a4:13:fc:89: 78:2f:e7:ab:1b:6d:f4:9d:4b:b7:5a:2a:3e:0b:3a: 37:33:75:41:0b:e9:94:f6:bc:f7:9a:1c:8e:e2:75: a2:00:3c:43:c4:82:5c:a1:80:ca:57:6c:4c:5f:60: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:22:23:48:EC:5E:8B:18:F2:89:9A:3F:11:92:23:68:2C:58:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e6b1a3-b4c8-3eac-b6b8-96700ff75f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.119.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:33:5b:cd:46:2e:ed:02:4d:72:d2:6b:62:df:53:8f:7f:54: 3c:7e:1e:f5:09:51:c3:25:36:62:da:6e:54:aa:ec:79:36:86: 5c:02:b8:e2:f2:7a:77:a7:83:fd:b4:9b:5f:3b:04:50:af:6c: 27:fb:b2:a2:57:e1:b3:3b:95:32:fc:de:69:6f:fb:f5:f3:db: 41:36:6d:0f:7e:45:e5:df:e5:7d:ab:db:8f:d8:b8:98:82:84: c0:83:58:d0:f9:c5:4d:7d:5e:9a:42:8b:bd:de:a4:2d:47:0e: 8c:f6:05:9d:c4:b1:3e:81:58:a4:7b:be:4b:40:95:d9:09:c3: cb:b3:8e:da:1c:78:e0:ce:14:06:3c:f8:86:7a:95:a3:e4:e8: bd:93:b3:11:fd:11:fc:39:04:1d:bc:98:9d:ec:92:f7:c2:ca: bf:7d:02:ae:63:02:99:3e:d0:59:19:d9:97:03:d8:db:9a:40: 70:f6:e8:c4:9b:8a:c8:3f:42:f5:3f:02:a3:df:68:8b:a0:f2: 3c:8e:4f:aa:fc:35:35:8d:78:4e:e6:51:ea:05:8b:ab:10:78: 0f:26:bc:c7:0e:e4:2e:be:82:4b:5e:0c:ab:69:7d:00:b6:6a: 82:88:ef:81:5c:59:c4:85:1f:57:f8:17:44:52:4e:2f:db:ee: 67:d9:fd:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqi0mzvTHyqlxKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGUzODJmNjEtOTFhMC00YTY2LWJjNzgtNjE1MjVmYWQ4NzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOEL8Uv6TSgXO2T9ul+wIC0SnPbZ0D33OgBv X7s3HzN7Lz6C+ktD8935nkXsfh4Dv5HYkvE0dj7bNBxJo2+x0wR9Y3+2DikTcjM8 HmcJOWq+87hGZPxB1qlZk7RHOcStiXQB0cRByXl4PXugTH9OsC6/zc6HI4JOKHvo rjQI80gBP1Tfx1R0Tmb6JEf8CobV+jtKXd80UO0muGcrnaQHSnGZZL3VcADM7005 8i2S5WCjMC84Cbde6PLNZ0VMrOQFwE/JC2NO3yO1g/A+gKQT/Il4L+erG230nUu3 Wio+Czo3M3VBC+mU9rz3mhyO4nWiADxDxIJcoYDKV2xMX2C6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBfIiNI7F6LGPKJmj8RkiNoLFjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNlNmIxYTMtYjRjOC0z ZWFjLWI2YjgtOTY3MDBmZjc1Zjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHdeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwzW81GLu0CTXLSa2LfU49/VDx+HvUJUcMlNmLablSq7Hk2hlwCuOLy eneng/20m187BFCvbCf7sqJX4bM7lTL83mlv+/Xz20E2bQ9+ReXf5X2r24/YuJiC hMCDWND5xU19XppCi73epC1HDoz2BZ3EsT6BWKR7vktAldkJw8uzjtoceODOFAY8 +IZ6laPk6L2TsxH9Efw5BB28mJ3skvfCyr99Aq5jApk+0FkZ2ZcD2NuaQHD26MSb isg/QvU/AqPfaIug8jyOT6r8NTWNeE7mUeoFi6sQeA8mvMcO5C6+gkteDKtpfQC2 aoKI74FcWcSFH1f4F0RSTi/b7mfZ/do= -----END CERTIFICATE-----Generated at Tue Oct 21 19:19:11 2025 by rpki-client