$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1d4f41d-61f5-38c6-9687-79413b66b728.roa File: f1d4f41d-61f5-38c6-9687-79413b66b728.roa (raw, json) Hash identifier: vhae1sozJZiOkeOliYE7Xn93meH+4H/i4+FoZ/vTSpo= Subject key identifier: 45:D3:2C:6C:C0:CE:5E:80:85:7C:28:B0:36:6F:69:FC:F5:8C:E8:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9323C31451D4F191ACA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1d4f41d-61f5-38c6-9687-79413b66b728.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 76.143.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:32:3c:31:45:1d:4f:19:1a:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=86274b9a-9d97-4071-a5c7-6faf54abe47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:72:75:ff:4a:c0:e7:d6:e4:f6:b5:72:50:24: 21:ea:eb:58:d6:4b:37:ef:39:63:4d:67:73:3d:15: 90:79:3a:5b:a6:50:8b:89:f0:e3:ea:fc:aa:3f:76: a2:b5:ca:66:c8:2d:8a:2f:ab:8c:4e:dd:79:52:1e: 0e:52:da:24:4f:0c:6c:ef:8c:5e:e7:b5:b5:4e:3d: 60:f6:ef:0f:a1:0a:53:f5:6d:fc:f0:27:0e:67:58: e2:47:0f:40:cb:63:71:d2:c2:3d:12:cc:a9:76:6e: f5:61:0f:6c:d9:b5:c1:9a:1f:06:1e:12:4e:ed:93: 42:1e:8f:1a:a5:c8:92:0c:83:23:3a:87:cd:65:d8: 25:74:39:eb:c7:d8:06:53:6f:f6:3e:65:96:4c:57: 26:86:ee:c4:80:90:f0:b2:9b:59:c7:a8:59:1f:f2: de:37:8b:51:cd:f6:bd:9a:a9:5c:9a:61:dd:00:b6: 99:23:62:82:17:ec:2f:c0:21:c0:8f:36:df:b5:1f: 93:54:ae:05:ab:9f:be:e5:88:06:ad:f9:da:cd:a8: e3:6c:a6:0c:13:45:81:45:ef:b7:07:ca:bf:ca:9c: e0:ba:79:55:90:61:a2:40:a8:54:73:37:0c:7b:df: ec:71:5e:ff:45:c8:1e:84:04:80:ba:4a:d4:fa:c0: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D3:2C:6C:C0:CE:5E:80:85:7C:28:B0:36:6F:69:FC:F5:8C:E8:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1d4f41d-61f5-38c6-9687-79413b66b728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e1:b2:88:08:99:58:d0:82:66:79:e8:f9:39:f4:1a:49:35: c8:0a:2a:7b:3a:56:4d:1c:02:77:ab:49:a4:dd:0e:5b:ed:8e: 88:4c:32:a2:09:e7:c3:c6:10:f3:ae:4b:8d:05:ed:ee:8b:5a: 94:e2:c8:c4:fa:9e:80:8d:c0:8c:ab:d1:74:ce:b6:1c:41:7c: b0:0c:98:1c:3b:90:0b:d9:4f:e8:0b:fc:7c:55:35:cd:b7:dd: 76:24:44:a5:21:2d:ac:b9:2b:96:1c:51:5f:e7:ab:9b:73:62: fd:cf:5a:2e:4f:60:6b:be:8d:41:b3:4e:b0:c6:00:2b:55:00: 54:d1:45:df:c4:7f:cc:22:f0:96:74:39:78:5a:eb:b1:59:93: a9:6a:32:4b:20:7e:e6:d6:6f:dd:61:de:5e:3f:12:cf:e3:2c: af:d6:97:09:48:7f:7c:18:18:c3:e1:7d:6f:1a:8e:1a:e9:d4: 25:34:3b:1b:8c:ac:b6:48:ab:d6:e7:1a:da:19:05:c5:57:0e: 40:1c:4f:a6:5f:df:8a:9f:62:cc:4d:b6:b1:62:ae:74:7b:a1: cf:9a:d9:89:8c:c4:94:90:cb:a2:f2:c3:2e:b9:82:ac:3a:0a: a6:9f:f4:1b:0b:de:77:65:8f:3a:de:9e:46:0b:52:43:0b:90: 2e:fa:26:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqTI8MUUdTxkayoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODYyNzRiOWEtOWQ5Ny00MDcxLWE1YzctNmZhZjU0YWJlNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHJ1/0rA59bk9rVyUCQh6utY1ks37zljTWdz PRWQeTpbplCLifDj6vyqP3aitcpmyC2KL6uMTt15Uh4OUtokTwxs74xe57W1Tj1g 9u8PoQpT9W388CcOZ1jiRw9Ay2Nx0sI9Esypdm71YQ9s2bXBmh8GHhJO7ZNCHo8a pciSDIMjOofNZdgldDnrx9gGU2/2PmWWTFcmhu7EgJDwsptZx6hZH/LeN4tRzfa9 mqlcmmHdALaZI2KCF+wvwCHAjzbftR+TVK4Fq5++5YgGrfnazajjbKYME0WBRe+3 B8q/ypzgunlVkGGiQKhUczcMe9/scV7/RcgehASAukrU+sD8wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXTLGzAzl6AhXwosDZvafz1jOjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjFkNGY0MWQtNjFmNS0z OGM2LTk2ODctNzk0MTNiNjZiNzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI9qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3hsogImVjQgmZ56Pk59BpJNcgKKns6Vk0cAnerSaTdDlvtjohMMqIJ 58PGEPOuS40F7e6LWpTiyMT6noCNwIyr0XTOthxBfLAMmBw7kAvZT+gL/HxVNc23 3XYkRKUhLay5K5YcUV/nq5tzYv3PWi5PYGu+jUGzTrDGACtVAFTRRd/Ef8wi8JZ0 OXha67FZk6lqMksgfubWb91h3l4/Es/jLK/WlwlIf3wYGMPhfW8ajhrp1CU0OxuM rLZIq9bnGtoZBcVXDkAcT6Zf34qfYsxNtrFirnR7oc+a2YmMxJSQy6Lywy65gqw6 Cqaf9BsL3ndljzrenkYLUkMLkC76JmQ= -----END CERTIFICATE-----Generated at Tue Oct 21 22:03:21 2025 by rpki-client