$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598e5684-8e1d-3730-8b70-72fb1a223a22.roa File: 598e5684-8e1d-3730-8b70-72fb1a223a22.roa (raw, json) Hash identifier: SXivmmt7pZG4od3Y6EfjI9ne8w0Bi1mbSPlhC7vQgjE= Subject key identifier: 17:8A:CF:D2:55:DC:24:F0:3E:96:D1:98:84:67:5E:24:44:E6:0D:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9EC86798F836943F371F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598e5684-8e1d-3730-8b70-72fb1a223a22.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 76.111.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:ec:86:79:8f:83:69:43:f3:71:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=526b0be1-e373-4af2-8a15-e89fbdd2bc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:74:ba:6f:e7:24:bc:90:8f:4d:a4:3e:0e: 82:48:fb:19:5c:98:6b:88:e1:9d:b4:fa:c9:88:f8: 7e:3f:4f:72:7d:d5:64:43:ee:18:25:de:da:9c:db: ac:5d:83:a0:e3:a8:c2:77:1c:3e:b1:55:0c:7d:73: 01:6d:7f:77:dd:4c:17:df:e7:f9:84:eb:5a:4e:d2: 84:09:9e:5c:2f:f7:23:b1:19:7f:65:0f:ca:e6:7b: 34:59:01:3e:80:8d:94:f2:98:95:4a:d5:ee:cf:9a: 39:bd:2a:76:55:18:a3:0d:06:4f:67:67:1a:4a:15: 8a:ec:76:3e:0d:c8:3b:76:67:84:16:c0:98:4e:e3: e7:e0:ec:3c:63:7a:f4:34:18:52:7f:de:d2:8c:c4: 3b:18:81:bf:ba:30:2a:ca:ec:f4:58:3a:d7:1c:ad: 4d:3f:a3:9b:b8:ce:46:2e:bb:c2:e0:e2:c1:f6:6a: 73:6f:3e:29:a9:6c:d5:fb:ca:e8:6a:7c:64:53:1a: cb:20:b2:13:30:c7:18:9e:57:75:c8:3d:ee:9c:b4: 50:c7:e2:4c:2c:28:5d:d0:ae:67:ab:37:41:27:1c: 39:0f:9f:90:61:0d:97:da:d6:ff:7c:47:ca:a6:a5: d9:29:4d:4d:c9:32:42:8e:cb:8d:50:e4:eb:ac:81: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:CF:D2:55:DC:24:F0:3E:96:D1:98:84:67:5E:24:44:E6:0D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/598e5684-8e1d-3730-8b70-72fb1a223a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.111.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f4:2f:91:ab:03:7b:b9:e4:56:88:90:86:cf:4f:77:fd:33: b3:cd:68:15:a4:a6:1d:c7:1c:49:f7:ba:c0:ef:22:f8:50:6e: 06:69:51:1a:64:85:df:0f:c1:44:4b:65:17:69:ac:74:91:5a: ac:c8:48:dd:2f:29:d1:7d:73:99:80:0c:74:e6:99:25:a9:8e: d9:fe:d6:64:52:ca:b5:d0:43:7e:f9:4f:82:dd:e3:cf:b5:20: d6:b6:72:7a:e6:c0:3e:e2:0b:44:87:1b:f1:63:9c:fe:a5:17: 64:5e:e0:1a:75:c7:56:f7:6e:e9:42:14:eb:41:44:b3:18:96: f6:60:b5:70:c9:4e:12:8e:ca:ad:a6:b2:49:95:b1:6a:16:6b: 2b:7b:a1:90:ab:92:6a:bb:4b:0a:11:1e:8b:e1:89:92:57:d4: f3:bf:7d:d0:98:18:b8:08:1c:04:78:d4:d0:65:23:35:c5:19: 2f:cc:5b:27:02:16:fe:d1:0e:cc:5a:a5:d6:72:6e:76:52:92: 9a:c9:50:6b:06:08:fe:91:05:15:41:df:9a:2f:25:77:68:b1: c5:c0:0b:82:e7:59:11:fb:b1:33:69:81:00:8a:9f:d9:14:c6: 5b:45:e5:40:72:4d:cb:b6:fa:cb:cc:36:2d:b5:db:f9:cb:2d: 70:97:b1:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ueyGeY+DaUPzcfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTI2YjBiZTEtZTM3My00YWYyLThhMTUtZTg5ZmJkZDJiYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX90um/nJLyQj02kPg6CSPsZXJhriOGdtPrJ iPh+P09yfdVkQ+4YJd7anNusXYOg46jCdxw+sVUMfXMBbX933UwX3+f5hOtaTtKE CZ5cL/cjsRl/ZQ/K5ns0WQE+gI2U8piVStXuz5o5vSp2VRijDQZPZ2caShWK7HY+ Dcg7dmeEFsCYTuPn4Ow8Y3r0NBhSf97SjMQ7GIG/ujAqyuz0WDrXHK1NP6ObuM5G LrvC4OLB9mpzbz4pqWzV+8roanxkUxrLILITMMcYnld1yD3unLRQx+JMLChd0K5n qzdBJxw5D5+QYQ2X2tb/fEfKpqXZKU1NyTJCjsuNUOTrrIHJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeKz9JV3CTwPpbRmIRnXiRE5g0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTk4ZTU2ODQtOGUxZC0z NzMwLThiNzAtNzJmYjFhMjIzYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTG9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF70L5GrA3u55FaIkIbPT3f9M7PNaBWkph3HHEn3usDvIvhQbgZpURpk hd8PwURLZRdprHSRWqzISN0vKdF9c5mADHTmmSWpjtn+1mRSyrXQQ375T4Ld48+1 INa2cnrmwD7iC0SHG/FjnP6lF2Re4Bp1x1b3bulCFOtBRLMYlvZgtXDJThKOyq2m skmVsWoWayt7oZCrkmq7SwoRHovhiZJX1PO/fdCYGLgIHAR41NBlIzXFGS/MWycC Fv7RDsxapdZybnZSkprJUGsGCP6RBRVB35ovJXdoscXAC4LnWRH7sTNpgQCKn9kU xltF5UByTcu2+svMNi212/nLLXCXsVo= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:39 2025 by rpki-client