$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0fac3a1-a3c2-3e42-9c53-1c788d47dafe.roa File: a0fac3a1-a3c2-3e42-9c53-1c788d47dafe.roa (raw, json) Hash identifier: fsVALSZTVBsVNfYe0vUL7TRIfSx/wVOWswjANJxMRSA= Subject key identifier: 6D:96:A0:8A:B1:D2:D1:DA:50:CF:47:87:C8:A9:22:F2:B9:06:38:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A98C55830EBAED92D5D880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0fac3a1-a3c2-3e42-9c53-1c788d47dafe.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 76.138.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:8c:55:83:0e:ba:ed:92:d5:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8c680eb2-5613-4d1a-9f94-7e9c724e0595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d9:31:85:5a:96:4d:33:e4:61:58:a5:57:6a: c5:95:26:fc:7b:66:53:01:02:b9:be:b5:06:d9:d1: 82:56:bd:35:3d:fd:09:5b:65:b3:94:c2:4a:3f:40: 08:62:9c:d4:e5:26:2e:73:de:6b:5c:ac:51:9e:aa: b6:59:55:00:9f:97:05:22:4e:5d:c0:74:7a:de:56: 53:f8:6f:03:8b:8d:77:12:9b:57:4d:04:1b:7f:51: 6c:b0:a7:da:4e:4c:14:ec:92:6d:54:23:8f:3a:07: 0c:c6:a9:ed:fd:ac:be:f4:b9:8d:42:0e:c3:42:5b: fa:b0:79:ab:d5:20:65:39:2b:14:0b:a3:ce:e8:37: d3:bb:00:4d:7d:aa:66:50:aa:ff:db:cf:fe:4e:f9: c7:c5:2b:01:9b:00:6f:a3:a4:8e:7d:12:a4:2f:67: db:40:39:06:ad:61:c9:30:aa:05:0f:63:49:ac:fc: 97:07:72:4c:ab:14:09:9f:ae:45:81:51:67:e5:7b: f7:d6:60:9b:0c:87:ee:47:1b:ba:5a:9f:44:29:d2: 9e:84:d5:8b:fc:c5:44:c7:53:a2:5c:15:d8:53:96: 31:23:7b:36:9f:9c:d8:2f:4f:24:96:ee:bb:79:b0: 37:11:6a:3c:b7:06:f2:d1:79:fb:9f:43:91:9e:f0: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:96:A0:8A:B1:D2:D1:DA:50:CF:47:87:C8:A9:22:F2:B9:06:38:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0fac3a1-a3c2-3e42-9c53-1c788d47dafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8c:d4:9f:2e:f9:87:35:a4:9d:fe:41:87:46:10:c4:29:0e: 9f:28:34:4f:aa:ff:c2:7f:b3:82:9c:47:ac:7d:3d:38:c5:41: 3b:10:48:a2:67:73:0b:07:87:bc:a3:66:6b:fc:82:57:3d:17: 32:e4:35:6c:bf:01:68:43:ec:0d:3b:cc:52:17:7a:e1:94:51: 46:f2:d2:b2:91:30:51:8e:ab:a9:cb:3f:3d:79:9a:49:55:12: 60:ec:96:bb:bd:31:ba:73:7c:65:ff:5c:24:8e:d8:c0:c1:af: 8c:36:eb:7c:65:2a:08:f5:a5:cb:9b:fd:bb:68:cb:38:6b:3f: 21:55:dd:6b:d5:8a:72:68:bc:46:5f:33:26:40:e1:16:4c:e7: 1d:f9:f8:de:07:7f:e6:21:10:6b:da:13:16:05:67:9b:73:c3: f3:b9:7f:b7:fb:42:95:89:ee:1d:b2:05:2b:fd:17:ae:de:e4: 80:16:8d:78:95:02:5a:3b:07:3a:e0:4a:33:10:11:0d:f0:34: 5e:72:ba:e2:c2:d9:cc:49:9c:18:40:34:52:8e:2a:77:ce:90: 30:86:20:46:eb:ce:c6:bc:00:72:47:ac:d2:d7:5a:b1:5d:aa: 00:70:ff:48:ad:c0:4f:d1:bc:30:15:f0:fe:0d:15:25:46:be: 25:5e:f6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqYxVgw667ZLV2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGM2ODBlYjItNTYxMy00ZDFhLTlmOTQtN2U5YzcyNGUwNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtkxhVqWTTPkYVilV2rFlSb8e2ZTAQK5vrUG 2dGCVr01Pf0JW2WzlMJKP0AIYpzU5SYuc95rXKxRnqq2WVUAn5cFIk5dwHR63lZT +G8Di413EptXTQQbf1FssKfaTkwU7JJtVCOPOgcMxqnt/ay+9LmNQg7DQlv6sHmr 1SBlOSsUC6PO6DfTuwBNfapmUKr/28/+TvnHxSsBmwBvo6SOfRKkL2fbQDkGrWHJ MKoFD2NJrPyXB3JMqxQJn65FgVFn5Xv31mCbDIfuRxu6Wp9EKdKehNWL/MVEx1Oi XBXYU5YxI3s2n5zYL08klu67ebA3EWo8twby0Xn7n0ORnvDjVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2WoIqx0tHaUM9Hh8ipIvK5BjhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBmYWMzYTEtYTNjMi0z ZTQyLTljNTMtMWM3ODhkNDdkYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmM1J8u+Yc1pJ3+QYdGEMQpDp8oNE+q/8J/s4KcR6x9PTjFQTsQSKJn cwsHh7yjZmv8glc9FzLkNWy/AWhD7A07zFIXeuGUUUby0rKRMFGOq6nLPz15mklV EmDslru9MbpzfGX/XCSO2MDBr4w263xlKgj1pcub/btoyzhrPyFV3WvVinJovEZf MyZA4RZM5x35+N4Hf+YhEGvaExYFZ5tzw/O5f7f7QpWJ7h2yBSv9F67e5IAWjXiV Alo7BzrgSjMQEQ3wNF5yuuLC2cxJnBhANFKOKnfOkDCGIEbrzsa8AHJHrNLXWrFd qgBw/0itwE/RvDAV8P4NFSVGviVe9s0= -----END CERTIFICATE-----Generated at Tue Oct 21 21:33:15 2025 by rpki-client