$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cae2a62-a7b4-3004-8aef-557eb2e9f007.roa File: 6cae2a62-a7b4-3004-8aef-557eb2e9f007.roa (raw, json) Hash identifier: 9O0fZyP+J2//KkLM9Va0rMlBJNFQvDAu5pxTTQ6A9fk= Subject key identifier: 95:E4:51:0A:C4:40:32:4C:4D:AA:32:B7:35:B5:E8:8E:2B:DB:BF:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A98B55A30EB5A85F2D4380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cae2a62-a7b4-3004-8aef-557eb2e9f007.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 76.138.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:8b:55:a3:0e:b5:a8:5f:2d:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=cbe2b2d6-1209-480b-bbb3-235bbd34ae59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:79:51:45:67:1e:52:ec:b7:3a:cd:ff:01:dd: 5a:f8:f3:e4:1b:f8:84:f3:ae:ba:62:65:c0:cc:bd: 34:94:6e:5c:8c:ab:86:48:15:c3:9c:ab:2a:c5:2c: e3:29:49:93:78:2f:c5:1f:74:dd:8d:5f:df:fc:8e: e1:7d:35:5a:71:15:a5:09:c1:e7:65:62:ae:6b:c1: c3:b6:89:ef:1d:34:be:9c:0f:25:99:00:41:eb:76: 62:98:b6:0f:68:45:2b:e2:13:7e:8b:a2:0c:8d:a8: 52:64:7d:8f:16:81:4c:9e:62:69:7d:49:cc:e7:37: a6:c2:7c:d7:24:2e:4d:b1:de:90:f2:c6:e2:19:44: 7e:ed:9d:b5:f4:11:03:f3:24:c5:b9:d8:5a:16:4f: b8:8e:19:cf:9f:b3:78:12:0e:38:8a:ef:06:8e:7a: 82:b1:25:c0:cd:08:25:6c:e0:5e:eb:7f:a3:53:1a: 95:1c:6d:5b:e5:8a:2f:87:ca:ec:66:69:2f:f4:5e: 23:da:5e:a0:84:da:63:9c:6c:54:ca:2d:a2:5d:8e: f3:59:40:dc:17:d9:84:91:93:b2:f4:fa:05:8d:48: 88:a6:dd:7d:e1:b5:56:0d:5f:35:5d:6d:99:92:fd: 82:90:08:fb:7b:97:53:5d:cb:bf:8b:f6:51:47:62: 7b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E4:51:0A:C4:40:32:4C:4D:AA:32:B7:35:B5:E8:8E:2B:DB:BF:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cae2a62-a7b4-3004-8aef-557eb2e9f007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3e:36:90:7e:91:f9:0c:94:e6:03:c9:86:2b:e2:f0:da:57: a4:77:e0:02:33:a2:79:b8:b7:db:05:4e:ac:a5:2e:c3:1b:6a: 1e:a1:4e:af:ef:b5:2b:bf:b6:4e:ba:36:0b:3c:30:b3:94:cf: 33:1d:87:e6:cc:a6:99:35:8e:db:c4:23:50:7a:2d:c0:44:49: 47:c8:89:0d:a9:97:1c:90:61:57:a5:1f:96:b9:5b:e7:bc:b0: 76:bb:5c:c1:3a:01:84:6d:40:26:b4:fe:48:c7:10:59:11:fd: d2:47:98:5d:90:63:40:4f:ac:51:59:fe:f8:38:44:3a:10:2d: 8c:e7:b7:a2:17:e0:8d:33:34:92:5f:53:d7:70:e9:33:8e:34: 62:3b:57:e5:22:96:10:c4:d2:57:01:2e:04:98:6c:b1:6d:04: e3:99:9c:da:b9:35:d7:ca:24:52:75:fd:19:80:66:cf:cd:26: 3d:6e:39:94:b8:bb:33:97:32:28:78:b9:e7:86:fe:10:5e:45: 26:cb:bc:1a:c1:46:0f:e9:d6:d8:ac:de:59:e5:64:4a:86:ee: ba:ea:a8:15:1f:41:9d:32:50:d9:0c:cf:ba:f6:7b:59:90:e4: 89:b1:63:71:b4:cf:d4:d3:04:c3:db:9c:0b:b1:4a:c4:93:47: ed:b1:be:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqYtVow61qF8tQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Y2JlMmIyZDYtMTIwOS00ODBiLWJiYjMtMjM1YmJkMzRhZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHlRRWceUuy3Os3/Ad1a+PPkG/iE8666YmXA zL00lG5cjKuGSBXDnKsqxSzjKUmTeC/FH3TdjV/f/I7hfTVacRWlCcHnZWKua8HD tonvHTS+nA8lmQBB63ZimLYPaEUr4hN+i6IMjahSZH2PFoFMnmJpfUnM5zemwnzX JC5Nsd6Q8sbiGUR+7Z219BED8yTFudhaFk+4jhnPn7N4Eg44iu8GjnqCsSXAzQgl bOBe63+jUxqVHG1b5Yovh8rsZmkv9F4j2l6ghNpjnGxUyi2iXY7zWUDcF9mEkZOy 9PoFjUiIpt194bVWDV81XW2Zkv2CkAj7e5dTXcu/i/ZRR2J7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXkUQrEQDJMTaoytzW16I4r279dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmNhZTJhNjItYTdiNC0z MDA0LThhZWYtNTU3ZWIyZTlmMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0+NpB+kfkMlOYDyYYr4vDaV6R34AIzonm4t9sFTqylLsMbah6hTq/v tSu/tk66Ngs8MLOUzzMdh+bMppk1jtvEI1B6LcBESUfIiQ2plxyQYVelH5a5W+e8 sHa7XME6AYRtQCa0/kjHEFkR/dJHmF2QY0BPrFFZ/vg4RDoQLYznt6IX4I0zNJJf U9dw6TOONGI7V+UilhDE0lcBLgSYbLFtBOOZnNq5NdfKJFJ1/RmAZs/NJj1uOZS4 uzOXMih4ueeG/hBeRSbLvBrBRg/p1tis3lnlZEqG7rrqqBUfQZ0yUNkMz7r2e1mQ 5ImxY3G0z9TTBMPbnAuxSsSTR+2xvjk= -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:35 2025 by rpki-client