$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89fe8f1e-482a-3de5-a5e5-7e7594e19b0c.roa File: 89fe8f1e-482a-3de5-a5e5-7e7594e19b0c.roa (raw, json) Hash identifier: BChTX+c/dn2v1KUGKOmIGj0ihXEw9fedFdI/RaAZJTI= Subject key identifier: 8A:F0:02:AB:4F:FC:B9:C2:8C:79:BB:9F:E3:09:63:E6:F9:63:5C:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA874FD5E06EEA543CC200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89fe8f1e-482a-3de5-a5e5-7e7594e19b0c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 76.112.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:87:4f:d5:e0:6e:ea:54:3c:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=68bb3a9e-8f53-4db3-812a-802f6f0fd57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:70:c9:a0:68:17:01:b4:30:b1:26:fa:47: 61:60:0c:ab:c4:50:cb:e7:88:c9:12:07:08:79:f6: bf:03:fe:a9:2c:bd:e4:4f:39:12:f6:49:f1:3e:b8: c1:12:0e:09:2b:5e:5e:23:7b:65:61:3b:43:0a:09: c8:34:dd:3e:dd:e8:bc:8d:28:08:38:5f:98:a3:56: 47:8b:a3:b1:3a:83:a3:cf:88:0d:b1:f1:dd:6c:06: 62:7c:29:72:4f:25:ca:69:2b:62:e2:89:6a:18:f3: dc:7d:9f:5a:da:b1:f5:35:21:4a:28:58:e9:c7:59: 32:39:dc:42:b4:18:33:af:05:7d:e2:4e:05:4a:db: 3f:f2:df:dd:70:0f:dd:0a:91:6d:e8:f7:80:f3:e1: 3c:a6:22:ab:1a:76:06:96:cc:90:a6:90:c2:e0:b3: 8a:55:1e:8b:44:b7:e0:07:8f:cc:42:af:75:13:cc: 59:3a:27:e9:1d:0e:87:a1:0b:e9:99:85:b3:2b:0b: ad:cd:f8:2c:a3:2b:f7:7f:7d:8a:10:7f:cc:b3:9f: f4:6e:d4:fd:f9:59:68:86:bd:c4:1e:be:ca:a9:42: 18:ee:89:4e:16:64:43:11:42:76:66:55:06:e2:c5: 71:fc:ea:c5:c1:f3:b4:37:f2:be:6b:99:fe:cf:43: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F0:02:AB:4F:FC:B9:C2:8C:79:BB:9F:E3:09:63:E6:F9:63:5C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89fe8f1e-482a-3de5-a5e5-7e7594e19b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.112.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:99:7a:05:51:7f:5a:7a:c6:ff:95:9e:ca:68:a8:82:1f:b2: fc:2d:ec:c4:9e:c3:45:34:56:26:76:b3:ab:b8:0e:87:5c:47: 46:a7:a0:98:d9:f0:6f:a1:8f:90:02:6e:03:37:4b:c3:aa:83: 18:0d:8d:57:88:8d:fc:8e:45:c3:6a:77:ca:80:7f:bd:ee:8c: 3b:5f:89:de:28:62:95:9e:71:61:b9:09:22:38:cb:c4:f8:64: fc:6c:85:b6:9e:76:0b:44:64:3e:67:82:f0:03:e0:70:55:8e: 22:6d:f6:29:d5:03:f9:31:f3:28:6c:93:45:25:a9:8a:fe:c3: 3d:88:98:e5:96:6b:41:cd:df:7a:04:a5:72:2b:3e:1b:30:30: 19:4f:9f:d7:69:74:b6:d6:78:e7:7d:d6:a3:5e:85:e5:1c:d0: 78:36:83:5b:98:cb:29:da:d8:54:f7:57:fd:f9:8d:92:b0:76: f3:88:d2:0b:c2:81:00:a9:85:fb:2c:df:d1:02:4e:53:f3:03: a5:ad:83:0a:14:f2:60:1a:e9:67:bc:60:ca:34:cc:4f:00:46: 39:f1:82:7d:51:e5:c1:01:0a:6a:e9:ea:84:88:e1:07:67:bd: a7:8c:bb:2f:50:cc:39:86:ba:47:7d:2e:e1:da:bf:88:d8:e7: 4c:8f:45:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqodP1eBu6lQ8wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjhiYjNhOWUtOGY1My00ZGIzLTgxMmEtODAyZjZmMGZkNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWdwyaBoFwG0MLEm+kdhYAyrxFDL54jJEgcI efa/A/6pLL3kTzkS9knxPrjBEg4JK15eI3tlYTtDCgnINN0+3ei8jSgIOF+Yo1ZH i6OxOoOjz4gNsfHdbAZifClyTyXKaSti4olqGPPcfZ9a2rH1NSFKKFjpx1kyOdxC tBgzrwV94k4FSts/8t/dcA/dCpFt6PeA8+E8piKrGnYGlsyQppDC4LOKVR6LRLfg B4/MQq91E8xZOifpHQ6HoQvpmYWzKwutzfgsoyv3f32KEH/Ms5/0btT9+Vlohr3E Hr7KqUIY7olOFmRDEUJ2ZlUG4sVx/OrFwfO0N/K+a5n+z0PW/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrwAqtP/LnCjHm7n+MJY+b5Y1zpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODlmZThmMWUtNDgyYS0z ZGU1LWE1ZTUtN2U3NTk0ZTE5YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATHDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiZegVRf1p6xv+VnspoqIIfsvwt7MSew0U0ViZ2s6u4DodcR0anoJjZ 8G+hj5ACbgM3S8OqgxgNjVeIjfyORcNqd8qAf73ujDtfid4oYpWecWG5CSI4y8T4 ZPxshbaedgtEZD5ngvAD4HBVjiJt9inVA/kx8yhsk0UlqYr+wz2ImOWWa0HN33oE pXIrPhswMBlPn9dpdLbWeOd91qNeheUc0Hg2g1uYyyna2FT3V/35jZKwdvOI0gvC gQCphfss39ECTlPzA6WtgwoU8mAa6We8YMo0zE8ARjnxgn1R5cEBCmrp6oSI4Qdn vaeMuy9QzDmGukd9LuHav4jY50yPRS0= -----END CERTIFICATE-----Generated at Tue Oct 21 21:51:48 2025 by rpki-client