$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e932e42-dbc6-3285-89cc-264fcc30e622.roa File: 5e932e42-dbc6-3285-89cc-264fcc30e622.roa (raw, json) Hash identifier: zSWBfZ8ZCq3ub2+EHTRNZO04w4x8j9W+04zXkAK7M+Q= Subject key identifier: F5:8F:F3:82:CE:A2:98:F3:20:C4:5B:CE:CC:0B:69:BB:4E:C2:C1:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B5141E21F3E20649690181E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e932e42-dbc6-3285-89cc-264fcc30e622.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 76.96.228.112/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:e2:1f:3e:20:64:96:90:18:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=d4a5baa4-0498-47dc-9b38-c062a597c761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:ae:36:73:ab:1c:c7:23:b0:34:74:cd:ca: 05:b8:b9:e6:8c:16:f7:5f:c3:63:bd:b4:7a:c3:18: 34:0f:cf:a1:56:99:73:60:0e:fb:b9:49:b8:fc:78: b6:9c:dd:7b:4c:14:24:b5:a4:ac:b3:96:50:67:3b: c9:94:52:e4:42:b9:55:8d:2b:30:c7:e8:ba:92:24: 71:0f:0e:94:14:c4:5f:76:ae:3a:62:98:4f:cf:48: 65:b5:14:35:4b:16:15:78:e2:59:31:1e:f1:76:d7: 06:e3:51:e7:23:16:19:df:95:f6:b8:55:4c:ff:90: 73:41:56:4b:ee:d1:9a:c5:2a:36:a7:01:d5:75:93: a4:e9:99:99:30:55:df:f6:b4:b7:a5:86:90:9e:57: c3:60:0a:5e:11:f4:f5:f3:bc:84:c5:ff:2a:f8:44: 49:ec:7b:4d:f5:e2:7e:5b:29:99:0a:3a:42:e4:2a: 16:b5:6f:ba:9c:75:81:d5:85:90:2e:8f:12:66:56: 47:49:29:03:b3:78:f7:ab:80:2e:bc:26:a3:7f:eb: 74:aa:6a:50:60:10:eb:60:bf:f2:89:19:02:4f:c3: 30:97:45:19:bf:cf:e0:54:eb:98:84:ec:cd:11:b1: 7d:61:29:8b:9d:df:99:ca:17:7d:09:ec:74:2b:b6: 05:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8F:F3:82:CE:A2:98:F3:20:C4:5B:CE:CC:0B:69:BB:4E:C2:C1:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e932e42-dbc6-3285-89cc-264fcc30e622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.96.228.112/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7c:6a:8e:0c:ee:86:60:7f:ad:9b:18:74:24:0a:47:dd:30: 8a:c1:94:53:be:65:17:c0:97:34:32:6f:97:75:b9:ec:c2:b3: 28:d7:3a:18:ae:36:44:b7:79:d1:d8:d2:56:85:05:9f:9e:04: 7e:2a:e1:bd:99:72:0a:28:11:dd:00:57:8b:97:ec:85:bc:9a: d7:9b:34:79:e0:38:40:0c:b4:3c:76:8f:5d:44:ce:21:da:1e: f9:ff:50:63:98:34:a1:7a:ae:67:7a:dd:8f:f8:ce:16:5d:26: f8:59:9f:e5:96:12:78:26:f5:1d:91:01:d8:46:ca:80:1c:25: 24:99:ec:58:43:63:e8:7e:49:ef:8f:d7:f7:80:09:50:d5:87: 25:3f:a7:52:8f:cb:9a:a9:12:20:ee:f7:2e:42:7b:0a:bd:fc: 25:49:c7:48:4c:76:ee:7b:54:c0:81:04:5a:c8:56:27:9f:fa: d7:df:61:7c:7e:81:60:0d:fb:28:56:5e:69:20:19:b0:a9:8e: b6:84:80:eb:9c:0d:da:1c:06:cc:c6:fa:0c:f8:d3:c0:54:4b: d6:50:2d:12:f4:db:05:43:5f:06:75:f8:e2:d9:64:7d:84:17: a4:3c:f7:13:05:77:0b:b4:d0:23:c1:aa:ea:1e:27:97:77:d2: 7e:25:e4:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtRQeIfPiBklpAYHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ZDRhNWJhYTQtMDQ5OC00N2RjLTliMzgtYzA2MmE1OTdjNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBeuNnOrHMcjsDR0zcoFuLnmjBb3X8NjvbR6 wxg0D8+hVplzYA77uUm4/Hi2nN17TBQktaSss5ZQZzvJlFLkQrlVjSswx+i6kiRx Dw6UFMRfdq46YphPz0hltRQ1SxYVeOJZMR7xdtcG41HnIxYZ35X2uFVM/5BzQVZL 7tGaxSo2pwHVdZOk6ZmZMFXf9rS3pYaQnlfDYApeEfT187yExf8q+ERJ7HtN9eJ+ WymZCjpC5CoWtW+6nHWB1YWQLo8SZlZHSSkDs3j3q4AuvCajf+t0qmpQYBDrYL/y iRkCT8Mwl0UZv8/gVOuYhOzNEbF9YSmLnd+Zyhd9Cex0K7YFzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPWP84LOopjzIMRbzswLabtOwsE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWU5MzJlNDItZGJjNi0z Mjg1LTg5Y2MtMjY0ZmNjMzBlNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUETGDkcDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdfGqODO6GYH+tmxh0JApH3TCKwZRTvmUXwJc0Mm+XdbnswrMo1zoY rjZEt3nR2NJWhQWfngR+KuG9mXIKKBHdAFeLl+yFvJrXmzR54DhADLQ8do9dRM4h 2h75/1BjmDSheq5net2P+M4WXSb4WZ/llhJ4JvUdkQHYRsqAHCUkmexYQ2Pofknv j9f3gAlQ1YclP6dSj8uaqRIg7vcuQnsKvfwlScdITHbue1TAgQRayFYnn/rX32F8 foFgDfsoVl5pIBmwqY62hIDrnA3aHAbMxvoM+NPAVEvWUC0S9NsFQ18Gdfji2WR9 hBekPPcTBXcLtNAjwarqHieXd9J+JeQy -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:32 2025 by rpki-client