$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b98f1c5e-7c7e-3bc8-96fa-98938690bef3.roa File: b98f1c5e-7c7e-3bc8-96fa-98938690bef3.roa (raw, json) Hash identifier: zGvl7VDqQ64Aha63UJ1mJboYuxfwa/Gv0e/6PofU4A8= Subject key identifier: C1:01:B2:42:F9:68:FE:8E:B4:30:E1:DF:8E:72:AD:BB:B3:A0:27:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A88A64B78288D423835000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b98f1c5e-7c7e-3bc8-96fa-98938690bef3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.19.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:8a:64:b7:82:88:d4:23:83:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f113b452-474b-48a0-bd31-8015c3baff4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:fc:26:10:3e:53:71:a9:68:ec:24:fa:89: 75:bf:c0:1b:a2:0b:0d:46:91:08:15:a5:cc:d7:0a: b1:c1:ff:88:c4:25:6f:f6:e1:3e:7a:2f:66:99:4b: 9e:a4:fb:a1:a0:89:13:69:1c:d3:23:92:22:1b:61: 9f:8e:37:d7:59:df:55:19:78:33:74:ee:2a:39:f1: d2:f0:9c:52:e2:68:7e:72:c4:74:e2:ef:1c:05:14: f9:d0:a2:e5:f0:ad:fe:de:53:53:35:90:86:02:33: 6c:e0:d9:01:f0:2a:27:19:35:6a:f2:01:f8:2a:12: 14:45:91:d4:49:0f:49:22:db:f0:f3:83:a6:9b:22: 8c:a1:58:dc:60:4a:9d:94:eb:09:c7:bc:ca:2a:55: c2:49:74:cf:c7:c3:3d:c9:63:d5:ad:43:ce:bf:27: b1:86:5e:08:4f:e9:49:60:93:60:3a:71:00:69:1e: b1:28:c7:1b:db:f2:c7:3a:7c:bd:e7:b0:5e:df:ff: bf:da:09:07:60:07:46:67:62:18:5a:27:fa:61:62: 8b:67:80:3c:4c:08:4a:8f:f6:a2:5a:39:31:f8:2b: 2b:db:fb:63:fd:18:9a:44:27:70:15:62:b1:4c:bc: e4:26:44:b6:4d:06:2b:c7:69:0b:29:07:20:38:f7: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:01:B2:42:F9:68:FE:8E:B4:30:E1:DF:8E:72:AD:BB:B3:A0:27:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b98f1c5e-7c7e-3bc8-96fa-98938690bef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.19.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4a:f4:08:62:26:07:76:c1:de:59:c3:5c:b9:e1:47:a4:3b: 90:7d:4c:fb:78:0d:36:bd:14:8d:c5:37:d3:48:36:5e:5c:c7: 41:20:c8:e8:ec:04:1b:22:ee:0c:2e:ce:04:7d:36:0a:00:d6: 1a:2d:51:cc:4c:8f:17:cf:b4:f2:d4:e1:db:45:3e:49:07:63: 41:8c:dd:0e:a9:91:96:f2:e9:2b:71:0b:02:03:c6:c7:5a:4f: eb:c1:c3:49:fd:8c:6c:30:46:b8:81:81:d3:20:c0:c5:55:19: c2:c7:51:0f:78:9d:45:43:ef:72:b5:61:69:de:6d:95:3e:ed: 6f:f8:05:cf:76:6f:fc:10:07:79:58:8f:b1:80:da:c6:bb:26: 71:a5:8f:8c:77:03:3a:a3:83:74:b4:b5:28:23:35:51:10:28: 1c:64:c5:1e:1a:ee:db:dc:24:f1:29:1b:c3:55:21:78:43:0a: 25:54:9c:5f:e1:b1:75:f9:2f:6c:10:2f:4b:8c:6b:98:2b:f2: 45:b0:3d:78:dd:5e:02:f1:06:c3:a4:3f:26:a1:df:29:17:24: 58:65:d9:8a:04:09:10:31:43:aa:21:20:6e:8f:fc:64:02:31: c2:30:75:d3:1d:4c:33:e4:fd:aa:17:39:30:03:ac:fd:5d:5c: a0:83:19:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqIpkt4KI1CODUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjExM2I0NTItNDc0Yi00OGEwLWJkMzEtODAxNWMzYmFmZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCv8JhA+U3GpaOwk+ol1v8AbogsNRpEIFaXM 1wqxwf+IxCVv9uE+ei9mmUuepPuhoIkTaRzTI5IiG2GfjjfXWd9VGXgzdO4qOfHS 8JxS4mh+csR04u8cBRT50KLl8K3+3lNTNZCGAjNs4NkB8ConGTVq8gH4KhIURZHU SQ9JItvw84OmmyKMoVjcYEqdlOsJx7zKKlXCSXTPx8M9yWPVrUPOvyexhl4IT+lJ YJNgOnEAaR6xKMcb2/LHOny957Be3/+/2gkHYAdGZ2IYWif6YWKLZ4A8TAhKj/ai Wjkx+Csr2/tj/RiaRCdwFWKxTLzkJkS2TQYrx2kLKQcgOPfmuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEBskL5aP6OtDDh345yrbuzoCdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjk4ZjFjNWUtN2M3ZS0z YmM4LTk2ZmEtOTg5Mzg2OTBiZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9K9AhiJgd2wd5Zw1y54UekO5B9TPt4DTa9FI3FN9NINl5cx0EgyOjs BBsi7gwuzgR9NgoA1hotUcxMjxfPtPLU4dtFPkkHY0GM3Q6pkZby6StxCwIDxsda T+vBw0n9jGwwRriBgdMgwMVVGcLHUQ94nUVD73K1YWnebZU+7W/4Bc92b/wQB3lY j7GA2sa7JnGlj4x3Azqjg3S0tSgjNVEQKBxkxR4a7tvcJPEpG8NVIXhDCiVUnF/h sXX5L2wQL0uMa5gr8kWwPXjdXgLxBsOkPyah3ykXJFhl2YoECRAxQ6ohIG6P/GQC McIwddMdTDPk/aoXOTADrP1dXKCDGZo= -----END CERTIFICATE-----Generated at Tue Oct 21 21:38:48 2025 by rpki-client