$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8305f7f-b36e-309e-8f1e-7dde7bd00465.roa File: d8305f7f-b36e-309e-8f1e-7dde7bd00465.roa (raw, json) Hash identifier: 9D+Ny1YdWUN2JNvRUAgpVBRnT8lHgsk59g1xf+JF0sk= Subject key identifier: E1:47:8E:BF:D9:D1:97:DC:90:37:3A:7C:3A:ED:C4:E0:09:C5:5F:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7DF43E8D003D2C82F5080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8305f7f-b36e-309e-8f1e-7dde7bd00465.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 76.115.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:df:43:e8:d0:03:d2:c8:2f:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8dfd3d39-797a-4e58-914f-e82182b4fe45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:2f:bd:d6:3b:7d:58:bf:46:98:2e:f8:61: 71:3d:80:80:13:ee:64:f9:47:ca:70:5a:65:fb:7b: dd:8f:bf:d1:4e:7c:18:77:17:dd:59:37:71:b2:32: b0:83:99:2b:ef:6c:94:b0:f4:b9:84:d6:bc:85:58: c4:42:7d:39:35:af:05:9c:72:8e:65:47:e2:ef:8c: 65:d0:a9:16:77:a3:e8:e5:3c:ce:d2:af:a4:28:bf: bb:5e:35:43:78:17:c6:35:eb:b0:dd:5d:c7:d8:ff: f4:8e:91:fa:d9:ac:f4:29:9c:de:66:49:44:6c:21: c3:a0:05:80:ac:74:b2:b8:c8:91:aa:58:64:98:94: 4d:ed:0d:35:e3:94:9b:06:15:4d:a5:47:b1:c0:22: dc:26:4a:66:cd:8b:96:54:0e:f4:32:a2:69:e4:f5: 3a:79:f7:bc:4a:3c:3f:61:03:19:f3:df:96:44:57: 40:5b:7a:28:71:10:59:cd:e2:55:70:f4:75:f5:32: 88:9b:30:c8:25:28:02:1a:fd:9d:e7:e9:5b:d4:ec: 3d:f4:5a:02:0a:a1:bb:b9:30:0b:70:d7:15:ac:56: 83:11:a6:e1:a8:15:c4:7e:f6:b6:19:af:1a:f4:9e: eb:66:3f:61:51:81:a0:61:8b:67:7e:18:4e:36:f7: c8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:8E:BF:D9:D1:97:DC:90:37:3A:7C:3A:ED:C4:E0:09:C5:5F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8305f7f-b36e-309e-8f1e-7dde7bd00465.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.115.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a3:04:ee:98:3d:57:25:47:ab:98:08:9f:fd:c4:11:e2:3c: 6c:60:97:0f:3b:ca:ed:29:1f:41:f9:c6:2f:50:5f:7c:a6:d1: 25:b0:ba:43:27:34:48:89:00:a6:51:63:8b:04:f4:c1:3b:8f: 6f:de:5f:5f:3f:f0:ae:53:3b:d3:ce:ff:ff:46:b6:dd:1d:a5: fb:dd:80:1b:28:0c:53:1a:e7:5c:03:98:5d:09:a3:8c:1c:29: e0:bf:f3:43:20:cb:79:e6:ec:0e:33:ef:1c:ba:65:f0:d7:c6: a1:d3:b5:7c:a3:6c:e6:56:a7:f3:40:46:10:55:dc:82:be:e0: 2c:a6:96:4a:e7:d0:68:c3:a4:99:21:81:dc:c6:33:a6:79:a4: ad:2c:76:34:69:4f:8d:0c:03:53:3a:1c:d6:4f:88:2a:04:f6: fb:00:ba:10:dc:a7:e8:09:de:50:22:82:e4:ab:06:a7:75:8b: 01:55:ef:95:ea:62:17:41:04:2f:bc:0a:42:fc:62:1c:8d:aa: 96:21:7d:ad:6c:4c:d8:87:f1:5c:77:66:01:de:9d:19:f9:b3: ac:c0:be:ab:c1:0c:10:f6:13:c1:eb:9b:8a:ef:17:77:dd:30: ea:96:36:d6:f5:b8:1c:0d:d9:d8:e7:44:1c:91:69:f3:ba:01: 6c:ec:43:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp99D6NAD0sgvUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGRmZDNkMzktNzk3YS00ZTU4LTkxNGYtZTgyMTgyYjRmZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M0vvdY7fVi/Rpgu+GFxPYCAE+5k+UfKcFpl +3vdj7/RTnwYdxfdWTdxsjKwg5kr72yUsPS5hNa8hVjEQn05Na8FnHKOZUfi74xl 0KkWd6Po5TzO0q+kKL+7XjVDeBfGNeuw3V3H2P/0jpH62az0KZzeZklEbCHDoAWA rHSyuMiRqlhkmJRN7Q0145SbBhVNpUexwCLcJkpmzYuWVA70MqJp5PU6efe8Sjw/ YQMZ89+WRFdAW3oocRBZzeJVcPR19TKImzDIJSgCGv2d5+lb1Ow99FoCCqG7uTAL cNcVrFaDEabhqBXEfva2Ga8a9J7rZj9hUYGgYYtnfhhONvfILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFHjr/Z0ZfckDc6fDrtxOAJxV/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDgzMDVmN2YtYjM2ZS0z MDllLThmMWUtN2RkZTdiZDAwNDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKjBO6YPVclR6uYCJ/9xBHiPGxglw87yu0pH0H5xi9QX3ym0SWwukMn NEiJAKZRY4sE9ME7j2/eX18/8K5TO9PO//9Gtt0dpfvdgBsoDFMa51wDmF0Jo4wc KeC/80Mgy3nm7A4z7xy6ZfDXxqHTtXyjbOZWp/NARhBV3IK+4Cymlkrn0GjDpJkh gdzGM6Z5pK0sdjRpT40MA1M6HNZPiCoE9vsAuhDcp+gJ3lAiguSrBqd1iwFV75Xq YhdBBC+8CkL8YhyNqpYhfa1sTNiH8Vx3ZgHenRn5s6zAvqvBDBD2E8Hrm4rvF3fd MOqWNtb1uBwN2djnRByRafO6AWzsQ4M= -----END CERTIFICATE-----Generated at Tue Oct 21 19:23:39 2025 by rpki-client