$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95c1011f-a1f0-35bf-b420-fff1f7c5710e.roa File: 95c1011f-a1f0-35bf-b420-fff1f7c5710e.roa (raw, json) Hash identifier: 8Hqk3eEESVB1CznjQfptzS9g5kX2YDp0jKMP4ECHGFs= Subject key identifier: E0:0B:8A:C0:2D:6E:E4:BF:49:6F:FE:A5:7F:B9:09:08:69:AB:CA:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A98CD3CF6F3516AE614400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95c1011f-a1f0-35bf-b420-fff1f7c5710e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 76.144.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:8c:d3:cf:6f:35:16:ae:61:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7c008318-b184-4d4c-a6ba-97ce67aa40a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:32:56:82:f3:c5:6e:3e:75:9e:21:b8:85: 3c:f8:90:f5:97:82:fb:28:01:72:09:5d:ce:4b:55: 8f:d8:a7:f3:42:aa:6b:7f:57:5d:c8:8b:41:13:0e: 01:62:a7:a8:82:99:0a:e0:cd:91:95:31:a3:f1:15: cd:03:d1:9f:22:14:1e:5b:2a:fd:0c:02:50:8e:84: 73:87:ea:55:66:65:1f:ad:52:23:a7:0c:a9:d1:45: 35:2f:13:8d:a5:dc:ab:e0:92:b0:eb:6a:24:41:85: 48:95:81:7f:02:ba:dd:dd:02:4f:a5:53:5f:73:9c: 96:c2:4a:13:a4:c2:ee:bf:64:fe:68:62:1c:65:ee: 95:d0:4b:ea:a1:a1:c7:d0:60:19:c3:ae:5d:c9:88: f6:b2:a0:69:3c:5e:3e:1f:c6:36:a4:3b:b9:f4:c4: 47:c5:19:e5:d9:3b:65:06:9c:5b:55:bb:b0:0c:66: 52:9e:d5:e8:b3:f5:a4:f2:33:53:13:40:98:1e:83: ad:33:29:0d:a8:3d:3e:18:31:8c:05:e6:e6:42:f3: e7:eb:e9:95:28:9f:05:ff:0e:23:7b:d5:f1:c8:87: 60:7b:f7:2b:ca:d8:ad:ab:04:bb:54:7e:d8:03:07: 23:36:85:bf:44:95:3c:c9:98:9b:dd:fe:15:67:a1: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:8A:C0:2D:6E:E4:BF:49:6F:FE:A5:7F:B9:09:08:69:AB:CA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95c1011f-a1f0-35bf-b420-fff1f7c5710e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.144.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0c:1a:7d:bb:40:ef:87:9e:52:d0:f5:d4:8e:1a:cc:18:b9: 3c:9e:ab:39:47:c3:9c:14:2e:54:ba:02:de:07:65:7b:09:bf: 1a:cf:2e:1e:b3:22:05:c3:98:3a:1a:bc:d6:f4:33:da:12:61: b0:d3:2f:fd:b4:8e:c7:36:ec:a4:26:04:fa:6a:55:5c:31:d5: 31:91:e8:b7:96:46:b8:4f:8a:8a:df:1a:eb:7a:c4:6f:16:00: c9:5c:b0:b0:fb:12:d2:7d:b3:1d:08:73:2b:25:b4:5b:ee:e1: c9:11:ab:e4:47:f4:5f:97:5d:29:fd:6f:88:28:55:ce:fd:da: 01:3a:87:15:a8:7f:d5:ae:f9:ef:3c:61:d2:7c:01:7d:f5:a7: 55:0e:21:cf:7f:99:db:31:6b:36:01:c2:2a:1b:f4:70:ff:aa: 0e:05:ee:95:ad:65:6f:48:b1:e7:0d:e9:21:a6:a3:89:90:3f: 7e:e3:21:2a:15:02:ad:12:b2:a9:f6:7b:64:f6:34:d9:36:e1: f4:3d:e1:e2:f6:56:ac:f4:00:ba:a3:f5:a4:84:0d:c4:16:24: 9e:d5:f3:a5:0e:8a:ef:18:93:31:fb:41:18:60:c7:5a:92:48: a4:18:0e:f1:0a:a0:fd:10:fb:f8:31:ee:2a:f4:8b:24:bc:4a: 2d:5b:25:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqYzTz281Fq5hRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2MwMDgzMTgtYjE4NC00ZDRjLWE2YmEtOTdjZTY3YWE0MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKcyVoLzxW4+dZ4huIU8+JD1l4L7KAFyCV3O S1WP2KfzQqprf1ddyItBEw4BYqeogpkK4M2RlTGj8RXNA9GfIhQeWyr9DAJQjoRz h+pVZmUfrVIjpwyp0UU1LxONpdyr4JKw62okQYVIlYF/Arrd3QJPpVNfc5yWwkoT pMLuv2T+aGIcZe6V0EvqoaHH0GAZw65dyYj2sqBpPF4+H8Y2pDu59MRHxRnl2Ttl BpxbVbuwDGZSntXos/Wk8jNTE0CYHoOtMykNqD0+GDGMBebmQvPn6+mVKJ8F/w4j e9XxyIdge/crytitqwS7VH7YAwcjNoW/RJU8yZib3f4VZ6FfxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOALisAtbuS/SW/+pX+5CQhpq8rKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTVjMTAxMWYtYTFmMC0z NWJmLWI0MjAtZmZmMWY3YzU3MTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYMGn27QO+HnlLQ9dSOGswYuTyeqzlHw5wULlS6At4HZXsJvxrPLh6z IgXDmDoavNb0M9oSYbDTL/20jsc27KQmBPpqVVwx1TGR6LeWRrhPiorfGut6xG8W AMlcsLD7EtJ9sx0IcysltFvu4ckRq+RH9F+XXSn9b4goVc792gE6hxWof9Wu+e88 YdJ8AX31p1UOIc9/mdsxazYBwiob9HD/qg4F7pWtZW9IsecN6SGmo4mQP37jISoV Aq0Ssqn2e2T2NNk24fQ94eL2Vqz0ALqj9aSEDcQWJJ7V86UOiu8YkzH7QRhgx1qS SKQYDvEKoP0Q+/gx7ir0iyS8Si1bJa4= -----END CERTIFICATE-----Generated at Tue Oct 21 19:37:35 2025 by rpki-client