$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45717c58-1095-3b89-9bf9-aec79c80465b.roa File: 45717c58-1095-3b89-9bf9-aec79c80465b.roa (raw, json) Hash identifier: DygAU/zKNyW5DvfQljeLJaFg6jShGaQMfzJm7HKbFWY= Subject key identifier: 2C:0E:AD:63:19:81:F8:CE:AF:BC:2F:FB:07:AC:94:79:25:4C:FB:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8EFD608AF8FEC3B8812E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45717c58-1095-3b89-9bf9-aec79c80465b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 76.139.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:ef:d6:08:af:8f:ec:3b:88:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=875db099-5819-44ce-99d9-2979cf2f164b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b3:f3:d2:1b:dd:40:81:25:f3:79:8e:43:af: b8:a6:2f:6b:e4:d4:f3:d7:77:a6:af:1e:3a:96:14: 08:ab:e4:14:02:64:ef:4e:be:c1:81:2e:5d:99:f5: 7e:f3:08:1c:ff:a9:51:28:55:f6:87:83:3e:e2:17: 00:46:89:f5:2b:e7:c8:e9:07:a4:bb:b0:36:3a:33: ac:da:87:00:b4:64:71:28:ee:ee:aa:83:fd:39:37: 57:3e:5e:d4:40:e5:7e:e2:6a:c5:1e:a3:2c:1d:56: c5:4f:bf:ab:e5:c0:1e:0e:ea:cb:b3:45:d1:80:15: 94:83:ae:74:80:53:fb:69:4a:89:f1:91:36:7a:ee: bc:49:65:84:ff:3c:c6:54:c7:86:70:1a:c1:86:a6: db:be:74:fe:61:66:6d:2a:b2:f8:d2:d0:cb:6c:00: 44:02:47:0f:38:45:95:6c:10:77:79:10:fe:3e:73: 87:ff:ca:53:0c:bf:fb:25:9f:5e:f1:ea:77:76:86: e0:2d:be:b7:d4:b0:36:a3:b8:cb:e6:05:04:c4:4a: 60:c6:d0:1d:53:5b:a9:37:9b:51:61:bd:97:ac:ce: 07:00:a5:c1:26:72:fc:ee:ab:26:32:f0:b6:6a:f9: 4a:17:7c:29:fd:b9:ca:3b:e7:d5:b9:b5:ea:e7:35: ed:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0E:AD:63:19:81:F8:CE:AF:BC:2F:FB:07:AC:94:79:25:4C:FB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45717c58-1095-3b89-9bf9-aec79c80465b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.139.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:4a:03:ef:c2:b8:ff:ad:62:19:13:47:d4:72:70:4d:d6:64: 1c:d0:13:a2:ea:ac:ca:61:48:6a:55:73:65:4c:b3:99:6e:d3: da:3b:ff:a9:c3:6b:84:bf:70:ac:70:75:96:99:41:a4:a1:72: de:8e:a5:77:b6:c7:f4:1e:2b:ff:91:2c:e9:82:66:2d:44:63: ae:f5:8f:1b:79:da:50:48:cd:b6:fe:42:c2:41:8c:29:8b:cf: 64:8c:d3:91:21:3f:1e:18:45:fc:b5:c0:ec:5b:5b:a8:59:c1: 5c:e5:b5:c9:87:f6:47:25:75:a9:af:8d:88:8d:b2:4c:e5:a2: 31:ac:a4:d5:0f:c1:f5:ce:c6:18:00:b0:7b:e8:70:fd:59:9a: 4a:1b:ec:04:3f:21:6b:cd:fd:3b:33:7b:8a:fe:1e:0f:e7:d6: b7:7e:16:57:b9:02:4b:84:01:02:89:15:55:84:f6:e4:d4:2d: 43:c7:21:1d:54:c6:a9:15:23:73:ac:ba:36:64:13:7d:e8:72: 32:3c:48:8a:7a:5a:42:cd:be:aa:0d:d8:cc:98:ae:f2:cc:4c: 65:e3:54:e1:bc:63:4c:23:70:73:da:04:f8:cc:54:4d:cd:4f: ef:5b:da:e5:a6:35:ba:ed:2b:4e:5e:bf:c6:b8:dd:3f:ef:b2: c8:67:b0:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqO/WCK+P7DuIEuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODc1ZGIwOTktNTgxOS00NGNlLTk5ZDktMjk3OWNmMmYxNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bPz0hvdQIEl83mOQ6+4pi9r5NTz13emrx46 lhQIq+QUAmTvTr7BgS5dmfV+8wgc/6lRKFX2h4M+4hcARon1K+fI6Qeku7A2OjOs 2ocAtGRxKO7uqoP9OTdXPl7UQOV+4mrFHqMsHVbFT7+r5cAeDurLs0XRgBWUg650 gFP7aUqJ8ZE2eu68SWWE/zzGVMeGcBrBhqbbvnT+YWZtKrL40tDLbABEAkcPOEWV bBB3eRD+PnOH/8pTDL/7JZ9e8ep3dobgLb631LA2o7jL5gUExEpgxtAdU1upN5tR Yb2XrM4HAKXBJnL87qsmMvC2avlKF3wp/bnKO+fVubXq5zXtBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwOrWMZgfjOr7wv+weslHklTPtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDU3MTdjNTgtMTA5NS0z Yjg5LTliZjktYWVjNzljODA0NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtKA+/CuP+tYhkTR9RycE3WZBzQE6LqrMphSGpVc2VMs5lu09o7/6nD a4S/cKxwdZaZQaShct6OpXe2x/QeK/+RLOmCZi1EY671jxt52lBIzbb+QsJBjCmL z2SM05EhPx4YRfy1wOxbW6hZwVzltcmH9kcldamvjYiNskzlojGspNUPwfXOxhgA sHvocP1Zmkob7AQ/IWvN/Tsze4r+Hg/n1rd+Fle5AkuEAQKJFVWE9uTULUPHIR1U xqkVI3OsujZkE33ocjI8SIp6WkLNvqoN2MyYrvLMTGXjVOG8Y0wjcHPaBPjMVE3N T+9b2uWmNbrtK05ev8a43T/vsshnsDw= -----END CERTIFICATE-----Generated at Tue Oct 21 19:44:43 2025 by rpki-client