$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bffc9d6-3852-36f0-811a-50266878ff3b.roa File: 8bffc9d6-3852-36f0-811a-50266878ff3b.roa (raw, json) Hash identifier: WZPDAOIEJmMeGSwKd/IgnYBfwqmgXPtql4IcmU55CLQ= Subject key identifier: D6:35:C2:85:87:95:63:22:3B:00:A5:6E:64:5C:0D:89:CB:12:EE:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA2E3B4DEA0BBCBBC63600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bffc9d6-3852-36f0-811a-50266878ff3b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.127.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:2e:3b:4d:ea:0b:bc:bb:c6:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8e1d3984-57c9-4d64-a431-5ff0da90c6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c0:a6:75:90:de:65:5c:08:6e:e5:0e:b7:53: f9:93:37:cc:d5:77:81:1a:e0:73:0f:ba:7f:5e:24: 65:7b:5d:26:b1:f7:be:07:8f:9f:c5:9e:c1:39:95: d5:44:be:42:17:a4:c7:53:8c:06:8f:04:34:d7:2f: f6:71:be:95:4b:2d:8a:74:79:de:5e:e7:28:3a:97: 76:e9:d4:fb:ed:f0:40:2b:64:79:c0:49:b0:3f:e6: f3:8f:16:4b:c9:b0:e8:17:7a:45:eb:31:58:68:46: 63:e7:f6:e3:0d:3f:bd:a2:9c:4d:d4:b7:50:e4:20: 02:3f:84:28:51:df:25:28:5e:33:2a:8f:63:93:0e: a7:28:8d:44:3c:0c:f4:96:fa:32:9d:11:27:dc:bc: b5:53:83:2f:06:37:c7:88:59:5d:87:18:eb:f2:11: ea:2b:36:c4:a5:92:0d:e9:65:5c:f8:85:5b:4d:83: 01:28:37:16:a0:9c:65:98:40:15:5d:ee:f8:5a:61: 9c:b4:1a:db:ed:51:66:be:e6:7c:17:56:90:05:32: 0e:c3:ec:b1:85:bd:52:38:b7:af:34:d8:91:c6:71: b7:2a:4e:6c:53:a0:72:e2:90:09:99:9e:55:a2:6e: 98:c4:d6:06:4e:14:96:f2:5a:4e:da:bd:57:17:5c: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:35:C2:85:87:95:63:22:3B:00:A5:6E:64:5C:0D:89:CB:12:EE:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bffc9d6-3852-36f0-811a-50266878ff3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.127.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2f:2c:98:45:83:f2:d7:6c:8b:96:7b:1f:dc:ad:4f:b6:7b: 9b:b5:72:40:46:d6:61:7c:69:9f:ec:8f:92:3d:40:73:2c:32: 43:25:03:04:9d:9a:74:c4:b3:ca:5a:7e:c0:23:50:92:72:27: 58:59:48:ba:e0:41:da:37:80:41:7c:a8:4c:bc:6e:8a:8d:27: eb:8b:0d:a4:80:df:c7:11:7c:8f:33:80:2e:d9:04:bf:5e:94: 14:19:1a:28:e4:8e:7a:90:83:67:5c:da:87:a3:a6:fb:cf:e7: 0c:e2:0c:33:62:16:89:48:7b:ce:27:6c:a5:e9:4c:e3:0c:cb: ba:fa:bd:e0:f2:5a:18:1b:f8:a7:2c:4f:7c:b5:55:85:39:21: 3c:4d:9d:b4:95:6e:b5:df:60:f1:cf:cd:cc:49:01:60:7f:02: 3d:6f:f7:51:a8:e8:13:42:92:6f:b3:1f:8a:32:54:d8:0c:cf: ca:17:af:8f:a8:6d:11:5b:de:8c:d5:d6:1f:04:88:72:46:48: 07:80:77:8b:f1:25:53:de:5f:27:0b:9c:6d:ca:82:62:e9:a1: d4:01:15:86:4b:7d:fc:4a:f5:70:77:02:38:f4:4c:66:db:b8: a4:b6:31:d9:5e:e0:7d:88:94:54:8e:e8:bf:f7:c4:04:19:fe: 67:05:5c:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqi47TeoLvLvGNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGUxZDM5ODQtNTdjOS00ZDY0LWE0MzEtNWZmMGRhOTBjNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8CmdZDeZVwIbuUOt1P5kzfM1XeBGuBzD7p/ XiRle10msfe+B4+fxZ7BOZXVRL5CF6THU4wGjwQ01y/2cb6VSy2KdHneXucoOpd2 6dT77fBAK2R5wEmwP+bzjxZLybDoF3pF6zFYaEZj5/bjDT+9opxN1LdQ5CACP4Qo Ud8lKF4zKo9jkw6nKI1EPAz0lvoynREn3Ly1U4MvBjfHiFldhxjr8hHqKzbEpZIN 6WVc+IVbTYMBKDcWoJxlmEAVXe74WmGctBrb7VFmvuZ8F1aQBTIOw+yxhb1SOLev NNiRxnG3Kk5sU6By4pAJmZ5Vom6YxNYGThSW8lpO2r1XF1xalwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY1woWHlWMiOwClbmRcDYnLEu5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGJmZmM5ZDYtMzg1Mi0z NmYwLTgxMWEtNTAyNjY4NzhmZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTH/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwvLJhFg/LXbIuWex/crU+2e5u1ckBG1mF8aZ/sj5I9QHMsMkMlAwSd mnTEs8pafsAjUJJyJ1hZSLrgQdo3gEF8qEy8boqNJ+uLDaSA38cRfI8zgC7ZBL9e lBQZGijkjnqQg2dc2oejpvvP5wziDDNiFolIe84nbKXpTOMMy7r6veDyWhgb+Kcs T3y1VYU5ITxNnbSVbrXfYPHPzcxJAWB/Aj1v91Go6BNCkm+zH4oyVNgMz8oXr4+o bRFb3ozV1h8EiHJGSAeAd4vxJVPeXycLnG3KgmLpodQBFYZLffxK9XB3Ajj0TGbb uKS2Mdle4H2IlFSO6L/3xAQZ/mcFXPM= -----END CERTIFICATE-----Generated at Tue Oct 21 22:19:53 2025 by rpki-client