$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf872e76-6ded-377b-87f2-0715990e0080.roa File: cf872e76-6ded-377b-87f2-0715990e0080.roa (raw, json) Hash identifier: k0foKT3WmzIvcnXgJKgsH9AsaCcm74Y/avTbJzSvKwo= Subject key identifier: 51:F0:F9:9A:A4:ED:53:4E:28:59:3B:A6:F0:83:1B:2F:44:38:8C:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA2A33211DEF37149BFD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf872e76-6ded-377b-87f2-0715990e0080.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.118.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:2a:33:21:1d:ef:37:14:9b:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3daec3cd-bbf7-4624-9d7d-7f2f22dfb0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c1:c2:e1:39:a5:38:f7:3d:0a:2f:68:76:5f: 27:73:33:7b:a6:ed:1e:46:bb:6c:74:f1:b8:90:66: 77:9f:51:a1:06:95:5b:b4:9e:90:87:d8:06:f5:1b: 44:4c:5e:6c:ee:3b:74:82:22:4b:24:80:9f:dc:ee: ba:09:fd:a5:b8:06:fa:2f:7d:64:a2:ea:63:f1:90: 74:65:f9:c6:fb:21:21:df:39:4a:d3:99:f8:ea:d5: d5:5a:21:97:3a:b4:22:62:b8:db:b1:46:c9:0f:32: da:1a:f8:37:1d:44:5c:58:ff:4b:c1:ff:d3:b8:34: d5:c8:ba:31:1f:f9:91:b0:3e:22:19:f1:da:4c:ff: 46:1c:39:e1:3f:16:83:3c:05:49:b0:65:91:40:9e: 63:00:d8:31:e5:af:39:ad:ca:00:cf:23:64:20:66: fa:12:22:3e:77:fe:34:f9:e6:4d:37:f8:92:9c:ac: cd:99:b2:66:cb:ef:6e:9e:ff:1a:e1:49:e7:81:6b: d6:4c:6d:65:57:6f:2b:53:41:ba:39:92:90:67:e7: 8d:43:95:68:65:d7:3b:39:c4:1a:15:c5:56:b3:b8: 01:68:d8:67:47:63:f4:17:a1:c0:3d:78:87:42:68: d2:87:82:c0:8a:83:19:dc:4b:aa:e3:f1:48:67:f6: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F0:F9:9A:A4:ED:53:4E:28:59:3B:A6:F0:83:1B:2F:44:38:8C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf872e76-6ded-377b-87f2-0715990e0080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.118.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d9:1b:9c:ca:c4:b7:8b:68:13:0b:c0:5e:44:d8:da:b8:85: f1:c9:4c:25:49:e5:3f:5f:05:a9:da:d7:4f:12:bf:57:dc:51: 7f:96:df:53:ab:60:42:da:2b:27:57:be:84:c6:e6:82:4e:73: af:ab:eb:1f:2e:5e:86:e6:42:89:c2:fc:0d:79:b7:8b:aa:27: 3e:a6:19:1e:81:ea:d1:36:26:9a:ef:d2:ba:df:bb:b2:e0:81: 8b:35:c9:58:af:ea:26:df:01:57:72:03:50:4b:60:38:f3:0e: 93:a4:ce:93:23:15:e0:9c:83:9a:be:59:7e:0e:17:72:58:d0: 3f:35:c7:4c:6b:a3:5f:79:81:18:e9:5f:9b:52:30:bc:41:ae: fc:49:79:9b:30:da:00:94:a6:a0:69:b2:58:2e:79:72:74:26: 03:bf:da:cc:90:cc:65:1c:32:0c:1c:6a:c0:b2:93:6e:74:6a: 28:16:a1:f8:89:42:04:9e:3d:71:85:62:a6:07:c9:1a:61:1d: 43:ce:b0:38:da:dd:a0:18:b5:56:11:e5:e2:6b:70:cb:52:0e: 58:fd:00:16:ef:6f:05:27:57:8b:74:32:d1:04:ee:a8:b8:ac: 43:3e:24:5c:b3:41:a2:c6:aa:4f:b5:5b:ce:bf:e4:1d:1e:53: 81:4c:a4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqiozIR3vNxSb/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2RhZWMzY2QtYmJmNy00NjI0LTlkN2QtN2YyZjIyZGZiMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMHC4TmlOPc9Ci9odl8nczN7pu0eRrtsdPG4 kGZ3n1GhBpVbtJ6Qh9gG9RtETF5s7jt0giJLJICf3O66Cf2luAb6L31koupj8ZB0 ZfnG+yEh3zlK05n46tXVWiGXOrQiYrjbsUbJDzLaGvg3HURcWP9Lwf/TuDTVyLox H/mRsD4iGfHaTP9GHDnhPxaDPAVJsGWRQJ5jANgx5a85rcoAzyNkIGb6EiI+d/40 +eZNN/iSnKzNmbJmy+9unv8a4UnngWvWTG1lV28rU0G6OZKQZ+eNQ5VoZdc7OcQa FcVWs7gBaNhnR2P0F6HAPXiHQmjSh4LAioMZ3Euq4/FIZ/YJDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHw+Zqk7VNOKFk7pvCDGy9EOIxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y4NzJlNzYtNmRlZC0z NzdiLTg3ZjItMDcxNTk5MGUwMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnZG5zKxLeLaBMLwF5E2Nq4hfHJTCVJ5T9fBana108Sv1fcUX+W31Or YELaKydXvoTG5oJOc6+r6x8uXobmQonC/A15t4uqJz6mGR6B6tE2Jprv0rrfu7Lg gYs1yViv6ibfAVdyA1BLYDjzDpOkzpMjFeCcg5q+WX4OF3JY0D81x0xro195gRjp X5tSMLxBrvxJeZsw2gCUpqBpslgueXJ0JgO/2syQzGUcMgwcasCyk250aigWofiJ QgSePXGFYqYHyRphHUPOsDja3aAYtVYR5eJrcMtSDlj9ABbvbwUnV4t0MtEE7qi4 rEM+JFyzQaLGqk+1W86/5B0eU4FMpJU= -----END CERTIFICATE-----Generated at Wed Oct 22 02:51:43 2025 by rpki-client