$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17766e48-b911-3c59-839c-a54d5c122795.roa File: 17766e48-b911-3c59-839c-a54d5c122795.roa (raw, json) Hash identifier: eQINyabnpB6ex7LI07Ovzg2ofJjWeZTAEpx7CDPXcIQ= Subject key identifier: 8B:3F:02:23:70:5D:D3:28:8D:D9:93:86:56:C3:B9:19:7B:19:C6:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B5141C7A5EC5535D26EA24380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17766e48-b911-3c59-839c-a54d5c122795.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 76.159.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c7:a5:ec:55:35:d2:6e:a2:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=413d2767-1957-4548-94b6-bdd3f8ffc67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:25:1f:69:9b:93:bb:42:ae:31:24:4f:39: 39:32:ef:1a:8f:9d:a1:9e:93:d5:a0:40:1e:6f:24: 63:81:1f:a0:64:87:8b:88:9e:c4:77:58:27:a6:a6: 75:1b:c0:8c:bc:90:13:22:e4:0d:d3:d1:1f:04:c3: 32:1e:a9:85:1c:5b:1c:43:ff:4c:ed:f2:60:e6:6e: ac:41:a6:08:6f:76:90:18:16:1e:70:ef:c2:39:e6: e9:d2:ac:bd:c6:94:d9:97:63:bd:bd:3c:75:2b:5b: 81:7d:59:8c:9c:17:9b:7d:5d:47:9c:7c:51:10:6e: 58:16:f6:6b:70:5a:5d:5d:ab:33:a1:56:bf:a4:20: f1:56:24:18:2b:a3:a4:92:f9:dd:54:3c:5a:90:89: 5f:75:cc:10:16:3f:cf:ae:92:5a:1a:6b:84:fe:1b: 17:4f:21:cd:c4:2d:7c:f8:36:d0:54:50:78:d5:89: c9:ec:2f:b4:25:ec:b7:f6:7c:ad:c7:fd:f7:39:91: 48:8d:08:2b:61:6e:ff:88:fc:b1:7f:12:f5:c7:8c: 25:4a:1a:5f:d8:f7:17:36:cc:f8:0c:d8:be:aa:95: 12:f0:19:84:9e:36:90:a9:e6:27:8a:b0:30:66:80: 21:6a:aa:62:3a:e7:5d:2c:86:b3:56:5e:99:c4:3f: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:02:23:70:5D:D3:28:8D:D9:93:86:56:C3:B9:19:7B:19:C6:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17766e48-b911-3c59-839c-a54d5c122795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.159.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b2:86:a6:5b:8f:f3:e5:71:a5:dc:8a:1c:74:fe:f8:08:b2: 4a:e5:23:a8:9e:0d:96:47:04:b4:23:19:67:6a:ad:9a:c9:04: 4f:65:13:93:81:d0:84:dc:c7:6c:c9:e4:e4:df:bf:2b:69:04: e2:9c:8a:82:a9:17:b0:19:26:53:15:28:fd:df:50:9c:8a:1c: e8:27:1c:fd:4e:d5:15:3e:bb:62:ba:9b:eb:b8:d5:3b:1c:93: 43:c7:69:45:e8:ef:8c:ba:62:3e:2f:3a:01:a9:cf:c9:47:62: 8d:7f:ff:d4:1b:c4:e8:bb:33:19:a5:d7:93:34:cb:f9:6a:e9: a6:a6:cb:4b:af:0f:db:a0:7f:07:91:d5:b1:74:46:de:d7:28: 8d:f0:44:d6:ae:d6:4a:d7:92:30:dc:87:28:08:9c:83:7a:4c: e2:54:93:18:71:d6:d1:16:24:d8:55:58:a4:bc:fd:13:68:e1: 59:84:ba:61:b0:dc:12:8c:78:99:5e:58:06:3b:44:d8:75:87: d3:38:a0:40:6c:33:40:87:55:ab:91:71:f3:c8:fe:a5:f3:3e: 4e:29:40:71:5a:ea:cd:a4:28:04:c8:59:6e:8d:87:bf:f8:7c: f8:ec:ea:18:06:96:98:53:13:7e:c0:a8:e4:1a:65:b0:69:33: 60:a9:c8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQcel7FU10m6iQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NDEzZDI3NjctMTk1Ny00NTQ4LTk0YjYtYmRkM2Y4ZmZjNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB8lH2mbk7tCrjEkTzk5Mu8aj52hnpPVoEAe byRjgR+gZIeLiJ7Ed1gnpqZ1G8CMvJATIuQN09EfBMMyHqmFHFscQ/9M7fJg5m6s QaYIb3aQGBYecO/COebp0qy9xpTZl2O9vTx1K1uBfVmMnBebfV1HnHxREG5YFvZr cFpdXaszoVa/pCDxViQYK6OkkvndVDxakIlfdcwQFj/PrpJaGmuE/hsXTyHNxC18 +DbQVFB41YnJ7C+0Jey39nytx/33OZFIjQgrYW7/iPyxfxL1x4wlShpf2PcXNsz4 DNi+qpUS8BmEnjaQqeYnirAwZoAhaqpiOuddLIazVl6ZxD+0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs/AiNwXdMojdmThlbDuRl7GcZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTc3NjZlNDgtYjkxMS0z YzU5LTgzOWMtYTU0ZDVjMTIyNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETJ8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGyhqZbj/PlcaXcihx0/vgIskrlI6ieDZZHBLQjGWdqrZrJBE9lE5OB 0ITcx2zJ5OTfvytpBOKcioKpF7AZJlMVKP3fUJyKHOgnHP1O1RU+u2K6m+u41Tsc k0PHaUXo74y6Yj4vOgGpz8lHYo1//9QbxOi7Mxml15M0y/lq6aamy0uvD9ugfweR 1bF0Rt7XKI3wRNau1krXkjDchygInIN6TOJUkxhx1tEWJNhVWKS8/RNo4VmEumGw 3BKMeJleWAY7RNh1h9M4oEBsM0CHVauRcfPI/qXzPk4pQHFa6s2kKATIWW6Nh7/4 fPjs6hgGlphTE37AqOQaZbBpM2CpyMI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:13:47 2025 by rpki-client