$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e7ebfd0-a9e2-33d8-b2dd-60f4a14a61bc.roa File: 4e7ebfd0-a9e2-33d8-b2dd-60f4a14a61bc.roa (raw, json) Hash identifier: LnWYSqKQoRnnGPrNBsDYOWsjaD3Jzt7kyzSQ7xWwQwo= Subject key identifier: A1:88:FA:59:D9:C5:26:22:81:76:95:30:DC:1C:8C:F1:35:2F:6C:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A93350A6EF4438347B7140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e7ebfd0-a9e2-33d8-b2dd-60f4a14a61bc.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 76.143.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:33:50:a6:ef:44:38:34:7b:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3a3988e3-5757-41d4-b915-f62735fec70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:e6:ad:83:ef:e5:e3:97:70:81:d1:59:c7: 54:39:21:fd:43:d8:d8:23:cd:7e:1a:e9:b4:f0:d0: 0c:ff:c4:59:f6:f5:97:9b:8c:a6:9f:9b:61:c1:69: 87:46:a7:ea:3d:eb:1d:86:0b:e1:9b:73:b2:36:cd: a6:82:e7:30:b6:cd:89:66:74:8c:de:53:75:f9:14: 91:08:63:ed:2e:91:5a:7a:9b:f3:63:fa:61:1d:8a: f5:3f:7f:f7:c3:59:08:2e:96:3c:a9:28:b6:30:ea: cd:08:21:ca:cd:05:ee:9e:a3:ae:0e:b1:72:c6:33: 23:a4:57:57:46:ae:ba:c2:ea:f9:91:1d:99:08:1f: f4:45:24:7c:98:b2:60:4a:c1:da:e2:a8:d4:c4:2a: ac:1f:f9:6b:5f:7e:2e:ec:c4:ed:d2:fa:03:4e:11: 75:b2:19:f8:75:f5:98:af:83:e6:45:09:85:1f:49: cd:65:8f:89:10:20:15:d8:4c:c9:0d:83:21:98:d8: e1:a3:11:e4:fe:a4:9d:22:79:ce:57:a5:8b:4b:66: d7:31:61:61:42:02:6e:27:4c:ba:1d:80:92:7b:b3: 51:29:c3:37:4a:70:3a:6c:f2:c1:76:6f:ed:bf:94: cf:da:47:66:a0:9c:28:69:2f:62:b5:ce:b2:5d:72: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:88:FA:59:D9:C5:26:22:81:76:95:30:DC:1C:8C:F1:35:2F:6C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e7ebfd0-a9e2-33d8-b2dd-60f4a14a61bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:62:ce:1e:af:4f:db:81:83:29:f6:84:95:55:09:31:c5:f2: 22:57:e1:1d:65:89:35:b5:df:e8:2d:49:0e:44:d9:ee:97:34: 4a:f5:9d:1a:30:06:48:c4:5e:92:50:1d:70:f9:41:a2:48:b5: 6b:09:93:7a:57:bf:43:55:cc:19:ee:f3:fa:2f:2b:82:76:bf: cd:11:a9:46:8a:3f:f5:fe:53:21:d5:59:57:ff:e7:81:8c:18: 28:39:9d:74:4b:ec:28:93:fa:9d:ed:3e:56:17:38:cb:a9:cc: 56:f1:56:4a:06:a8:73:89:5b:bc:61:c7:63:7b:bd:6b:e7:3f: 6c:04:00:f8:d8:62:0d:8f:c3:8d:e9:39:1d:6f:cc:ac:4a:5d: e6:66:11:11:ae:d1:ce:7f:53:14:d7:9a:9d:4c:ab:30:ee:97: a1:45:f2:0b:ae:e8:9c:e2:37:61:ec:63:56:80:79:44:c3:50: f8:e7:71:d2:59:56:7c:e3:7b:95:10:e1:04:18:47:da:c2:81: 32:b8:8c:9a:17:26:1e:ae:20:b5:3b:0d:01:b8:89:b0:60:1b: cd:aa:a8:9c:f7:14:f1:1a:80:d5:8d:86:5f:76:39:6a:a7:8e: d5:48:95:be:c9:26:d0:75:56:1d:10:37:bc:1f:c3:7d:d2:68: 12:b4:82:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqTNQpu9EODR7cUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2EzOTg4ZTMtNTc1Ny00MWQ0LWI5MTUtZjYyNzM1ZmVjNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dnmrYPv5eOXcIHRWcdUOSH9Q9jYI81+Gum0 8NAM/8RZ9vWXm4ymn5thwWmHRqfqPesdhgvhm3OyNs2mgucwts2JZnSM3lN1+RSR CGPtLpFaepvzY/phHYr1P3/3w1kILpY8qSi2MOrNCCHKzQXunqOuDrFyxjMjpFdX Rq66wur5kR2ZCB/0RSR8mLJgSsHa4qjUxCqsH/lrX34u7MTt0voDThF1shn4dfWY r4PmRQmFH0nNZY+JECAV2EzJDYMhmNjhoxHk/qSdInnOV6WLS2bXMWFhQgJuJ0y6 HYCSe7NRKcM3SnA6bPLBdm/tv5TP2kdmoJwoaS9itc6yXXJH5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGI+lnZxSYigXaVMNwcjPE1L2yBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGU3ZWJmZDAtYTllMi0z M2Q4LWIyZGQtNjBmNGExNGE2MWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItizh6vT9uBgyn2hJVVCTHF8iJX4R1liTW13+gtSQ5E2e6XNEr1nRow BkjEXpJQHXD5QaJItWsJk3pXv0NVzBnu8/ovK4J2v80RqUaKP/X+UyHVWVf/54GM GCg5nXRL7CiT+p3tPlYXOMupzFbxVkoGqHOJW7xhx2N7vWvnP2wEAPjYYg2Pw43p OR1vzKxKXeZmERGu0c5/UxTXmp1MqzDul6FF8guu6JziN2HsY1aAeUTDUPjncdJZ Vnzje5UQ4QQYR9rCgTK4jJoXJh6uILU7DQG4ibBgG82qqJz3FPEagNWNhl92OWqn jtVIlb7JJtB1Vh0QN7wfw33SaBK0gt8= -----END CERTIFICATE-----Generated at Tue Oct 21 21:39:18 2025 by rpki-client