$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fdefa3f-099b-365a-92a8-ef6b69502ca8.roa File: 4fdefa3f-099b-365a-92a8-ef6b69502ca8.roa (raw, json) Hash identifier: 67+PYqqJ5BOdpGt12Cyj0Qzdk2n0c+7cOof5Ua6Udo4= Subject key identifier: 5A:96:49:F6:63:3A:2A:C8:D0:AB:1F:8E:36:83:FD:09:9F:99:33:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAD23F2BEBC0DDEF1B38C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fdefa3f-099b-365a-92a8-ef6b69502ca8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 76.31.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:d2:3f:2b:eb:c0:dd:ef:1b:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5a78d8a8-801e-43ff-8416-3769ab89e0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:a6:2e:15:28:c9:3e:ef:39:ca:6a:87:a1: 32:80:84:ea:13:52:19:c5:28:05:c7:c0:9c:7c:2a: 90:08:41:86:84:c8:15:f4:9b:5b:7a:a6:c8:21:c2: 40:f4:c5:fc:07:b6:f4:ed:cf:6e:18:d8:b9:76:94: 88:69:f9:4b:db:08:b5:d4:22:d7:be:b3:a7:03:df: 71:3a:38:07:e6:c4:80:ad:94:6f:e2:a6:99:57:a1: df:29:e5:ac:f7:29:d9:3f:e7:ae:66:e1:af:49:d4: 98:5a:5a:8b:3f:03:95:12:21:cb:0b:8f:29:65:f0: 68:dd:de:08:81:3f:9e:e3:db:29:b7:49:39:82:1c: 1a:e5:30:c2:e6:4b:aa:01:a0:4b:0c:bf:e3:18:a7: dc:70:0e:a5:5f:e6:2d:5d:ab:d8:89:ef:b7:65:5f: 70:68:bd:74:c2:10:da:ed:b1:82:30:1f:fc:82:8d: 8f:54:d3:c9:3e:ef:98:08:63:d0:18:84:dc:a8:c5: c9:bb:07:a9:0e:f3:0e:90:42:e7:dd:ea:bc:36:c3: 65:03:9b:7b:a5:b8:49:a7:7d:c2:ce:c9:d3:31:3a: 55:3a:65:a5:99:81:26:50:7d:09:f1:d1:8f:ce:38: 84:f0:c1:36:f7:1c:55:7a:86:07:6a:f9:92:54:91: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:96:49:F6:63:3A:2A:C8:D0:AB:1F:8E:36:83:FD:09:9F:99:33:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fdefa3f-099b-365a-92a8-ef6b69502ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.31.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:3e:38:f3:ca:26:eb:ca:23:30:dc:8d:22:76:5a:e6:46:7f: 0b:3b:d0:6f:79:84:67:87:df:28:8b:eb:ff:3d:9c:a2:63:dc: f6:e6:c5:96:0b:ba:28:f2:ac:99:41:10:d0:04:52:77:38:7c: 1c:e8:a3:cf:44:e7:ba:51:2c:bf:78:2b:8d:5a:df:b3:ac:70: 7e:cd:23:9d:20:de:27:11:38:12:fd:26:8f:ef:4a:e1:81:b1: 66:6b:24:1d:7e:82:0b:df:47:3c:07:c9:7f:e5:cb:a7:c1:65: 39:5c:af:f7:b6:48:80:ab:32:24:c9:a6:fe:34:54:d5:ba:9a: c4:41:c8:d4:1a:bf:73:bc:68:de:3d:fb:29:d0:9a:f0:56:de: dd:ea:b9:2b:06:c1:2c:a3:4e:35:f5:93:4b:24:49:0a:1c:f9: 37:6a:21:ee:46:fd:de:f1:f6:a4:85:2f:e0:6d:79:57:81:dd: 3a:26:67:55:43:82:5b:8f:6e:be:c9:a8:f9:25:29:64:1d:31: c7:3c:e8:a6:01:49:6e:4b:df:79:b3:5b:48:7d:12:ea:f7:46: 06:33:75:b2:66:c2:8a:f2:dd:4e:95:2c:3e:dd:15:1e:7a:5b: 4e:ba:4a:f9:ec:76:2c:1a:dc:c9:09:96:1a:8c:d6:57:2f:74: 76:1f:58:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqtI/K+vA3e8bOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWE3OGQ4YTgtODAxZS00M2ZmLTg0MTYtMzc2OWFiODllMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojamLhUoyT7vOcpqh6EygITqE1IZxSgFx8Cc fCqQCEGGhMgV9JtbeqbIIcJA9MX8B7b07c9uGNi5dpSIaflL2wi11CLXvrOnA99x OjgH5sSArZRv4qaZV6HfKeWs9ynZP+euZuGvSdSYWlqLPwOVEiHLC48pZfBo3d4I gT+e49spt0k5ghwa5TDC5kuqAaBLDL/jGKfccA6lX+YtXavYie+3ZV9waL10whDa 7bGCMB/8go2PVNPJPu+YCGPQGITcqMXJuwepDvMOkELn3eq8NsNlA5t7pbhJp33C zsnTMTpVOmWlmYEmUH0J8dGPzjiE8ME29xxVeoYHavmSVJG1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqWSfZjOirI0KsfjjaD/QmfmTOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZkZWZhM2YtMDk5Yi0z NjVhLTkyYTgtZWY2YjY5NTAyY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTB9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0+OPPKJuvKIzDcjSJ2WuZGfws70G95hGeH3yiL6/89nKJj3PbmxZYL uijyrJlBENAEUnc4fBzoo89E57pRLL94K41a37OscH7NI50g3icROBL9Jo/vSuGB sWZrJB1+ggvfRzwHyX/ly6fBZTlcr/e2SICrMiTJpv40VNW6msRByNQav3O8aN49 +ynQmvBW3t3quSsGwSyjTjX1k0skSQoc+TdqIe5G/d7x9qSFL+BteVeB3TomZ1VD gluPbr7JqPklKWQdMcc86KYBSW5L33mzW0h9Eur3RgYzdbJmwory3U6VLD7dFR56 W066Svnsdiwa3MkJlhqM1lcvdHYfWKk= -----END CERTIFICATE-----Generated at Wed Oct 22 02:51:07 2025 by rpki-client