$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afcb48cc-9b05-30d2-8eae-0652208407eb.roa File: afcb48cc-9b05-30d2-8eae-0652208407eb.roa (raw, json) Hash identifier: kV4uJeBDs8I9wnDtisDoRlvZv5UZ8C7VtFB1+YG/WzA= Subject key identifier: 0C:6C:7D:AF:92:39:F5:91:79:5A:2C:44:9C:17:24:B4:06:B2:3C:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA313A56094D24CDCE388D Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afcb48cc-9b05-30d2-8eae-0652208407eb.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.23.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:31:3a:56:09:4d:24:cd:ce:38:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=67e71abb-aefa-4c3c-8b49-57768bc759b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:af:7b:9a:a1:7a:99:cc:6b:1e:dd:8e:13: 77:32:8a:fb:9b:cd:bb:7e:96:f6:e5:33:12:da:92: 78:38:c8:5f:39:74:ed:b0:1b:fb:39:50:b6:9f:d9: 27:09:e2:14:a1:cc:e5:86:23:b8:f9:31:af:9d:4d: e9:24:3c:e4:eb:e4:c8:ac:af:ec:08:2f:a2:06:7d: ab:0c:0e:63:65:7b:f5:18:0b:1b:ba:66:89:5d:53: 88:99:80:75:c7:41:ff:cc:a4:f1:b6:9c:d4:89:4b: 22:07:d5:18:b7:14:d5:c6:b0:17:f4:39:36:73:11: 79:95:94:bf:51:9c:a2:12:c5:4c:a1:4b:8c:fe:0c: 14:da:74:67:19:ef:ad:8b:eb:e8:c4:80:62:a6:a4: 0b:8c:fb:93:fc:75:40:4f:a5:c4:23:f9:80:61:db: d8:4c:70:0b:9d:19:71:82:f1:dc:6e:ed:30:e8:83: 30:39:cb:92:a1:47:f3:e0:aa:e3:aa:22:01:0a:82: ad:46:b4:30:2e:94:b1:f7:ae:93:e1:c8:27:39:5b: 5c:34:dd:20:d2:f8:dd:6b:6e:cd:f6:46:90:54:5c: e9:43:03:1f:bc:94:48:65:d8:50:79:bb:f9:e3:a9: 80:02:26:31:ad:fd:29:45:7b:16:8d:c2:d8:49:da: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6C:7D:AF:92:39:F5:91:79:5A:2C:44:9C:17:24:B4:06:B2:3C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afcb48cc-9b05-30d2-8eae-0652208407eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.23.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1e:3a:63:ab:3c:77:0d:19:3a:a4:55:68:77:93:ac:5f:a7: 8e:9e:d0:bf:f6:f8:3b:69:09:98:dc:40:73:bd:d3:da:83:4e: 4c:95:c5:22:94:41:66:91:cf:7d:28:15:6d:bb:a4:38:ca:14: e2:fa:d9:a5:a5:f3:a4:5b:a4:1d:a0:ac:89:4a:5c:79:38:d0: 91:19:e1:8c:2b:55:b2:db:65:28:3b:16:a9:ad:20:47:ab:bf: 75:ef:99:d3:cd:53:ea:30:f6:16:cb:73:cb:f5:8b:b2:4e:8c: 1f:7e:ec:e9:93:0c:5e:b2:55:08:cf:6c:30:80:7d:6b:ca:7d: f7:d0:47:b8:d7:15:d6:11:cd:5d:9f:e6:98:a2:43:e6:9a:a9: dc:af:24:34:7e:b2:bd:e2:cb:2d:64:e9:f4:27:26:fc:4a:95: 94:bf:e4:0f:cc:fc:90:a4:ad:74:cc:07:42:c1:f3:c2:64:23: 64:4b:46:e5:e4:63:27:19:9d:9a:d8:97:71:0e:cb:ad:2b:03: 17:83:a4:96:9f:90:21:15:b5:1c:f1:2f:c3:27:0c:3d:f7:11: 69:31:58:57:ec:58:93:42:86:47:d9:11:c8:63:ef:9d:60:6a: 3f:f9:15:b6:a0:46:f1:82:54:47:f9:8c:7f:f6:94:41:2c:27: 49:19:66:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqjE6VglNJM3OOI0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjdlNzFhYmItYWVmYS00YzNjLThiNDktNTc3NjhiYzc1OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2eve5qhepnMax7djhN3Mor7m827fpb25TMS 2pJ4OMhfOXTtsBv7OVC2n9knCeIUoczlhiO4+TGvnU3pJDzk6+TIrK/sCC+iBn2r DA5jZXv1GAsbumaJXVOImYB1x0H/zKTxtpzUiUsiB9UYtxTVxrAX9Dk2cxF5lZS/ UZyiEsVMoUuM/gwU2nRnGe+ti+voxIBipqQLjPuT/HVAT6XEI/mAYdvYTHALnRlx gvHcbu0w6IMwOcuSoUfz4KrjqiIBCoKtRrQwLpSx966T4cgnOVtcNN0g0vjda27N 9kaQVFzpQwMfvJRIZdhQebv546mAAiYxrf0pRXsWjcLYSdpqAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxsfa+SOfWReVosRJwXJLQGsjzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZjYjQ4Y2MtOWIwNS0z MGQyLThlYWUtMDY1MjIwODQwN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYeOmOrPHcNGTqkVWh3k6xfp46e0L/2+DtpCZjcQHO909qDTkyVxSKU QWaRz30oFW27pDjKFOL62aWl86RbpB2grIlKXHk40JEZ4YwrVbLbZSg7FqmtIEer v3XvmdPNU+ow9hbLc8v1i7JOjB9+7OmTDF6yVQjPbDCAfWvKfffQR7jXFdYRzV2f 5piiQ+aaqdyvJDR+sr3iyy1k6fQnJvxKlZS/5A/M/JCkrXTMB0LB88JkI2RLRuXk YycZnZrYl3EOy60rAxeDpJafkCEVtRzxL8MnDD33EWkxWFfsWJNChkfZEchj751g aj/5FbagRvGCVEf5jH/2lEEsJ0kZZos= -----END CERTIFICATE-----Generated at Tue Oct 21 19:28:25 2025 by rpki-client