$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6743c11a-ed5f-322d-8425-e2953b9f8954.roa File: 6743c11a-ed5f-322d-8425-e2953b9f8954.roa (raw, json) Hash identifier: Pn2ErmMYzvP/biOgKEi6gdhwI17HWxj5xpYmb6ByoTw= Subject key identifier: 6E:78:2D:21:59:B3:9E:38:5E:8D:42:7E:9D:F6:BA:8D:4D:8C:55:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB857DFE30F7717F2CCC000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6743c11a-ed5f-322d-8425-e2953b9f8954.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 76.114.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:57:df:e3:0f:77:17:f2:cc:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ae8d31c0-7a54-4eb5-93fa-d6f3291a7d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:d6:94:80:05:04:35:b8:3a:ac:b7:ce:b9: 93:55:08:27:b1:36:3a:33:1b:8f:90:53:64:d0:7f: 71:32:89:3d:27:53:c4:0c:1b:0f:8c:3e:59:b2:b3: 55:ae:b6:b6:09:8c:de:b6:d0:08:f9:5b:88:ee:d2: 24:5c:eb:74:6a:e0:07:33:61:a9:e7:bf:0d:7c:15: 6c:01:af:f9:4e:f4:bb:a1:ee:09:92:4c:b1:f0:73: e7:09:6b:2d:2e:8c:54:e9:48:c3:82:d3:e7:0c:31: 4a:92:11:af:28:66:9a:6a:c8:6c:92:3a:e7:5c:b2: a8:7e:56:80:3f:1e:16:00:9a:cc:ba:a2:0c:91:d8: 40:8b:8b:93:48:36:30:9e:fc:56:cc:72:c0:39:5b: 41:08:fc:d7:00:f4:5e:6e:01:9e:7b:1c:59:44:74: a3:18:b6:b4:fb:c6:95:e6:8b:2c:91:03:67:51:52: 4e:89:cd:ce:b1:08:25:84:8f:61:a2:76:22:30:92: a3:b3:ad:5a:15:a3:56:1c:6f:e7:9e:ce:23:6e:03: 73:94:99:5d:3a:68:fe:cc:62:f8:ca:63:b8:d7:ec: 04:73:cf:08:08:3a:b8:e1:06:6d:35:5f:44:b0:48: 9f:4f:d8:88:19:d4:05:9d:9e:a7:02:ff:21:18:8e: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:78:2D:21:59:B3:9E:38:5E:8D:42:7E:9D:F6:BA:8D:4D:8C:55:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6743c11a-ed5f-322d-8425-e2953b9f8954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.114.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:23:07:b5:d7:6b:70:b2:71:b2:e9:46:59:76:2d:b1:a5:a4: af:c1:c0:4f:1d:bf:aa:b6:99:de:32:bf:ce:18:04:f6:58:17: 67:19:fa:ca:f6:bb:a3:65:75:ca:9d:8b:e7:0c:08:ee:87:18: 3f:6a:50:e2:2d:19:a4:04:c4:32:e5:80:30:99:af:00:3d:e5: a6:5b:5e:7f:66:11:ee:e0:1c:e0:df:f8:ba:dd:d0:af:65:b1: 5d:8d:b0:da:9c:fa:00:56:7e:2e:48:17:df:7b:48:47:6e:0d: df:25:16:45:05:9f:13:79:3a:33:cf:35:79:16:51:77:37:cd: b8:8f:16:86:24:66:77:cc:ce:dc:4d:fa:08:cc:d2:9a:4f:7e: b9:d3:5a:df:ad:49:45:fd:a5:56:96:4c:82:38:c7:fb:2a:13: ab:63:c4:a4:d1:40:af:f8:9d:85:ad:7f:c0:b1:7e:2e:f4:2f: d1:04:f9:04:c5:24:e0:9a:c4:40:f9:f0:95:db:16:fd:c6:76: 12:85:eb:6f:31:7c:28:e2:6f:14:62:b4:c7:20:02:4a:1c:14: 44:1d:19:5d:c6:24:7d:7d:a3:3b:43:a4:2f:1f:f0:4a:dc:9d: 54:a1:63:22:e8:db:41:0a:9b:d7:0c:bb:2c:38:05:d5:13:7d: b5:6d:da:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uFff4w93F/LMwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YWU4ZDMxYzAtN2E1NC00ZWI1LTkzZmEtZDZmMzI5MWE3ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6rWlIAFBDW4Oqy3zrmTVQgnsTY6MxuPkFNk 0H9xMok9J1PEDBsPjD5ZsrNVrra2CYzettAI+VuI7tIkXOt0auAHM2Gp578NfBVs Aa/5TvS7oe4Jkkyx8HPnCWstLoxU6UjDgtPnDDFKkhGvKGaaashskjrnXLKoflaA Px4WAJrMuqIMkdhAi4uTSDYwnvxWzHLAOVtBCPzXAPRebgGeexxZRHSjGLa0+8aV 5osskQNnUVJOic3OsQglhI9honYiMJKjs61aFaNWHG/nns4jbgNzlJldOmj+zGL4 ymO41+wEc88ICDq44QZtNV9EsEifT9iIGdQFnZ6nAv8hGI5nswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG54LSFZs544Xo1Cfp32uo1NjFXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjc0M2MxMWEtZWQ1Zi0z MjJkLTg0MjUtZTI5NTNiOWY4OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHTHKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUjB7XXa3CycbLpRll2LbGlpK/BwE8dv6q2md4yv84YBPZYF2cZ+sr2 u6Nldcqdi+cMCO6HGD9qUOItGaQExDLlgDCZrwA95aZbXn9mEe7gHODf+Lrd0K9l sV2NsNqc+gBWfi5IF997SEduDd8lFkUFnxN5OjPPNXkWUXc3zbiPFoYkZnfMztxN +gjM0ppPfrnTWt+tSUX9pVaWTII4x/sqE6tjxKTRQK/4nYWtf8Cxfi70L9EE+QTF JOCaxED58JXbFv3GdhKF628xfCjibxRitMcgAkocFEQdGV3GJH19oztDpC8f8Erc nVShYyLo20EKm9cMuyw4BdUTfbVt2jg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:45:02 2025 by rpki-client