$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4587c573-bd56-357e-b58c-478512c6399d.roa File: 4587c573-bd56-357e-b58c-478512c6399d.roa (raw, json) Hash identifier: VIZsRo9kXU8WpH+7dsg3A6Rj0Q2t8LElmBFV1uP3sFQ= Subject key identifier: 4C:E2:E7:A6:C4:25:6D:E7:37:92:A0:D9:1A:B2:23:CF:8A:23:9B:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A88741535332A4CD9A9800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4587c573-bd56-357e-b58c-478512c6399d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.152.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:87:41:53:53:32:a4:cd:9a:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=644de3f2-cf21-48bc-977c-7df8a7f5b04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5d:78:52:d3:15:63:a5:6b:59:f2:67:0e:d1: 97:1b:57:5c:e9:c5:52:1b:74:40:0d:f1:ff:9d:d1: 1d:1d:72:9e:19:f2:a0:43:c5:f4:87:ba:75:93:14: 18:cd:96:f6:81:60:c6:83:6b:07:d3:cb:73:96:f6: eb:e9:35:88:cb:79:bb:af:c9:93:d1:8f:33:7f:60: fa:d3:6d:2e:32:7a:cb:8c:0b:68:0c:7e:be:c4:4a: 2f:c4:b0:f6:a7:73:ae:73:eb:ac:ec:f2:36:c2:2d: 73:ac:89:32:9a:aa:99:62:01:14:62:83:00:06:89: d8:8b:32:d3:cf:d1:f3:f9:f8:cf:d0:7d:a2:2d:66: 43:4e:1f:59:3c:4b:3a:c7:c4:bd:25:be:d2:11:cd: 6f:7b:15:68:b8:cf:92:9f:23:ca:2a:b8:a3:7a:4d: a6:93:d5:3a:68:f8:57:2b:9f:ed:85:df:1f:3e:4b: a6:d2:4d:00:75:51:11:aa:ba:69:d5:c9:0b:b2:29: 29:bb:90:5e:8f:e6:ce:ed:67:10:40:20:64:88:5d: 38:9b:68:b9:b3:74:bf:1b:42:5b:ee:6d:60:06:32: 25:a5:0d:9f:2c:b4:4d:6e:d8:55:8a:47:0e:8a:f3: 43:3b:57:d7:78:61:00:37:fd:60:d4:f1:1f:62:dd: c2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E2:E7:A6:C4:25:6D:E7:37:92:A0:D9:1A:B2:23:CF:8A:23:9B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4587c573-bd56-357e-b58c-478512c6399d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.152.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:f0:2a:25:e9:30:15:4f:14:d6:4c:fe:22:a6:ad:3d:8e:22: 74:15:84:ab:99:d4:ab:ff:b2:bf:b4:e5:7b:50:cb:8a:1c:70: 0f:9f:67:73:15:91:91:3c:fd:c9:11:1b:32:da:e0:44:8d:31: 0c:d8:e0:24:cd:4c:7e:5e:c3:d2:04:19:bf:f6:83:e3:a5:f5: 46:4d:84:0e:2d:3a:18:24:69:ef:b6:d7:49:d3:96:a6:6f:87: 8d:e1:c4:fa:6d:bb:0e:c5:1b:7f:fd:ab:3e:78:1f:3d:64:d9: ea:d2:fb:31:59:38:c0:0f:78:65:c7:23:a1:f4:2b:88:4c:ad: 4a:00:35:f8:66:49:4c:f5:2f:b4:97:53:7e:90:a1:83:72:bf: 9a:3e:18:0a:4d:0d:98:66:f3:79:66:e7:a8:74:f1:f1:06:7d: ff:e2:1c:5f:8d:e6:07:92:c0:71:17:f4:23:0f:11:cf:e4:e9: cb:c9:1f:cb:04:90:6c:71:4d:b2:10:01:63:9c:bc:0e:b1:aa: 59:66:07:74:5c:a3:c6:c6:30:0e:94:e0:0f:15:7e:e7:bf:56: ae:cc:73:d4:5f:10:85:de:b3:e1:d6:4c:98:76:bd:e8:5e:81: 1f:8d:ef:7f:68:4b:7d:37:74:ff:a3:2c:c4:4e:cc:17:56:92: 84:17:d9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqIdBU1MypM2amAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjQ0ZGUzZjItY2YyMS00OGJjLTk3N2MtN2RmOGE3ZjViMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh114UtMVY6VrWfJnDtGXG1dc6cVSG3RADfH/ ndEdHXKeGfKgQ8X0h7p1kxQYzZb2gWDGg2sH08tzlvbr6TWIy3m7r8mT0Y8zf2D6 020uMnrLjAtoDH6+xEovxLD2p3Ouc+us7PI2wi1zrIkymqqZYgEUYoMABonYizLT z9Hz+fjP0H2iLWZDTh9ZPEs6x8S9Jb7SEc1vexVouM+SnyPKKrijek2mk9U6aPhX K5/thd8fPkum0k0AdVERqrpp1ckLsikpu5Bej+bO7WcQQCBkiF04m2i5s3S/G0Jb 7m1gBjIlpQ2fLLRNbthVikcOivNDO1fXeGEAN/1g1PEfYt3C5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzi56bEJW3nN5Kg2RqyI8+KI5udMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDU4N2M1NzMtYmQ1Ni0z NTdlLWI1OGMtNDc4NTEyYzYzOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/wKiXpMBVPFNZM/iKmrT2OInQVhKuZ1Kv/sr+05XtQy4occA+fZ3MV kZE8/ckRGzLa4ESNMQzY4CTNTH5ew9IEGb/2g+Ol9UZNhA4tOhgkae+210nTlqZv h43hxPptuw7FG3/9qz54Hz1k2erS+zFZOMAPeGXHI6H0K4hMrUoANfhmSUz1L7SX U36QoYNyv5o+GApNDZhm83lm56h08fEGff/iHF+N5geSwHEX9CMPEc/k6cvJH8sE kGxxTbIQAWOcvA6xqllmB3Rco8bGMA6U4A8Vfue/Vq7Mc9RfEIXes+HWTJh2vehe gR+N739oS303dP+jLMROzBdWkoQX2eM= -----END CERTIFICATE-----Generated at Wed Oct 22 05:16:20 2025 by rpki-client