$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c43d162-213d-38de-9e16-4475d98bbe16.roa File: 7c43d162-213d-38de-9e16-4475d98bbe16.roa (raw, json) Hash identifier: Y16mhEd7bq7nSqboFT2OX8zWY2xonq7jTm0qbklRZyA= Subject key identifier: B1:81:5C:B8:C7:5C:76:E9:22:3E:6D:16:75:61:4B:CE:98:DE:C4:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A771A2AC17E0A1951B8480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c43d162-213d-38de-9e16-4475d98bbe16.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33651 IP address blocks: 76.21.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:71:a2:ac:17:e0:a1:95:1b:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=62b0ced7-b0d9-46ae-b4ea-c4ce9c165a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:a4:22:d7:58:54:f3:8f:31:54:ca:05:f9: 62:e8:26:fa:0a:fd:ac:43:6d:26:2e:23:35:d2:18: 9a:2a:38:6f:ed:10:b5:7f:cd:53:ad:92:2c:91:73: 21:1d:c3:61:a4:c5:d9:a3:6c:e0:7d:35:fb:fa:86: 23:aa:78:a6:cf:6e:b9:84:aa:63:8c:f7:30:7b:ff: dd:36:87:13:8d:cd:0b:24:62:54:73:a1:27:0e:46: f4:f6:5d:a0:f8:91:f1:e5:da:43:a9:eb:e3:5c:d5: e7:87:6d:af:ad:e8:9f:2b:8f:82:17:ce:34:9e:42: e2:e8:03:5f:43:c0:87:6f:bb:12:da:de:33:80:ba: e6:f6:8f:4f:6b:c5:4f:c0:43:88:57:f6:35:56:46: f4:27:5e:ba:af:fa:70:68:67:5e:43:0f:bc:b9:3d: b3:56:fd:82:80:58:81:4b:ae:1e:40:15:75:94:e4: 63:0a:46:b7:b9:42:22:14:8b:b6:eb:ee:b8:34:31: 90:74:39:84:c9:56:9c:d4:be:8d:b4:33:a9:c5:c8: 60:3a:e5:a2:6b:eb:bb:91:f8:d6:3e:0a:46:8a:3d: fa:2b:50:d0:6e:86:f8:50:5f:4c:56:a5:00:6e:92: 85:93:7b:1e:e9:4e:25:84:05:e3:5d:d3:7e:e6:cb: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:81:5C:B8:C7:5C:76:E9:22:3E:6D:16:75:61:4B:CE:98:DE:C4:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c43d162-213d-38de-9e16-4475d98bbe16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.21.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:40:6d:be:02:b8:f5:cb:29:7a:b0:fb:68:aa:48:72:e9:90: 47:cd:3c:36:03:b1:0c:5f:70:ce:82:e2:d9:c4:7e:fd:8c:d4: 7c:13:6e:a0:28:cf:69:0d:6d:d3:48:20:30:75:31:80:c9:74: 27:65:d0:a0:69:70:0c:70:27:ce:60:fe:15:f2:ac:1d:ca:e0: f0:82:6c:93:89:b7:7f:e0:bb:9e:29:a1:fe:94:21:db:4e:72: ce:54:99:73:af:d5:d9:aa:94:c7:87:1c:32:af:3e:cc:f9:45: 8b:02:b9:ae:68:e1:e2:b3:37:35:43:67:8b:82:13:e6:87:87: 59:8f:0b:16:b6:8d:52:43:23:b3:1c:6d:30:f5:1f:c1:76:fe: 53:ef:39:97:67:b3:fa:0c:42:c8:3a:81:b7:7c:3f:ce:b7:f5: af:cc:3f:ce:dd:a3:34:d5:ff:d5:58:59:94:a0:a3:19:7b:e6: 23:21:2b:e9:a5:62:65:ba:ea:fe:d2:27:b3:53:42:97:34:37: b5:54:34:ba:7c:c2:fc:fa:d4:49:2e:d2:51:f1:56:4d:a8:5c: 2e:be:7b:ee:e5:d0:76:f6:ed:25:e9:9f:f5:d8:5d:14:e1:96: f1:6d:95:8b:37:b5:c4:fc:94:fd:6b:e4:22:b6:02:4f:6b:30: 15:8b:51:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3GirBfgoZUbhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NjJiMGNlZDctYjBkOS00NmFlLWI0ZWEtYzRjZTljMTY1YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndmkItdYVPOPMVTKBfli6Cb6Cv2sQ20mLiM1 0hiaKjhv7RC1f81TrZIskXMhHcNhpMXZo2zgfTX7+oYjqnimz265hKpjjPcwe//d NocTjc0LJGJUc6EnDkb09l2g+JHx5dpDqevjXNXnh22vreifK4+CF840nkLi6ANf Q8CHb7sS2t4zgLrm9o9Pa8VPwEOIV/Y1Vkb0J166r/pwaGdeQw+8uT2zVv2CgFiB S64eQBV1lORjCka3uUIiFIu26+64NDGQdDmEyVac1L6NtDOpxchgOuWia+u7kfjW PgpGij36K1DQbob4UF9MVqUAbpKFk3se6U4lhAXjXdN+5stHTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGBXLjHXHbpIj5tFnVhS86Y3sQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2M0M2QxNjItMjEzZC0z OGRlLTllMTYtNDQ3NWQ5OGJiZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVAbb4CuPXLKXqw+2iqSHLpkEfNPDYDsQxfcM6C4tnEfv2M1HwTbqAo z2kNbdNIIDB1MYDJdCdl0KBpcAxwJ85g/hXyrB3K4PCCbJOJt3/gu54pof6UIdtO cs5UmXOv1dmqlMeHHDKvPsz5RYsCua5o4eKzNzVDZ4uCE+aHh1mPCxa2jVJDI7Mc bTD1H8F2/lPvOZdns/oMQsg6gbd8P8639a/MP87dozTV/9VYWZSgoxl75iMhK+ml YmW66v7SJ7NTQpc0N7VUNLp8wvz61Eku0lHxVk2oXC6+e+7l0Hb27SXpn/XYXRTh lvFtlYs3tcT8lP1r5CK2Ak9rMBWLUcs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:15 2025 by rpki-client