$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8648e273-a20f-346a-bbc4-fc432814907f.roa File: 8648e273-a20f-346a-bbc4-fc432814907f.roa (raw, json) Hash identifier: kyTqHkKowQv94jPt51vj5xjW8jelIC2bo5lLhQS6nmM= Subject key identifier: 03:D9:DF:BC:57:DB:A7:C2:5E:92:5D:B9:9B:9C:B8:9B:F8:B0:B7:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A7610B49A35A4DCD0FE860 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8648e273-a20f-346a-bbc4-fc432814907f.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 76.29.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:61:0b:49:a3:5a:4d:cd:0f:e8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=431a15e7-4775-4a93-b710-1600e9e50a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:63:83:31:05:ee:05:88:54:f8:3f:de:29: ed:d8:14:ec:a3:55:92:b7:ab:4e:24:44:b0:58:d9: c2:17:12:8d:19:db:11:9a:11:fc:ad:d3:50:70:78: c7:1c:d7:1b:b5:a5:e2:6e:fa:59:7a:88:e1:80:a4: 52:73:91:50:47:73:21:64:28:8e:8c:42:ed:dc:4b: 84:c1:4e:42:d0:24:5b:5f:61:7c:12:8a:1c:e0:9c: f3:38:07:e4:b8:5e:ff:58:6c:39:ef:c6:94:98:ee: d9:bf:e1:06:d8:5b:03:5c:c0:e5:bd:72:5a:5c:91: 7a:14:c4:43:2b:35:d8:7b:ee:56:78:6f:c0:02:1f: 2b:c4:41:fb:eb:d0:44:30:11:9b:1f:a5:da:ad:f5: c6:7e:a7:80:df:8f:97:c3:e7:7e:f7:3d:b8:bc:99: 78:f0:dd:74:6c:39:23:1e:01:3a:59:f8:c9:1d:fd: f2:c7:39:5d:51:b5:a3:7e:56:80:42:94:2f:f1:6d: f2:27:a1:83:c0:60:6c:f1:b6:28:a4:12:ba:43:dc: b7:40:83:30:42:d1:69:b2:64:19:49:1e:88:cf:ab: 1f:8c:46:2f:4a:40:41:f7:75:19:2d:d7:fe:24:2e: 09:08:b0:4f:f5:0b:b6:aa:0e:a6:42:3b:ab:83:b2: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D9:DF:BC:57:DB:A7:C2:5E:92:5D:B9:9B:9C:B8:9B:F8:B0:B7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8648e273-a20f-346a-bbc4-fc432814907f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.29.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b0:01:8d:29:58:8d:a6:1e:3c:ca:8c:3e:8c:bb:ff:d0:b1: f0:15:d0:17:ab:ad:c9:45:fe:38:d6:ce:41:cf:3d:d4:19:27: a3:c0:45:b0:7d:0f:2e:54:94:9d:af:33:b7:9e:96:c0:d1:9d: 34:ae:f6:cc:ea:5f:a2:79:94:e3:5a:6c:f5:94:d8:e8:22:0a: 0a:e5:16:f6:9f:17:c0:30:bf:f0:de:ae:b6:f6:02:b2:82:04: 7f:95:86:e2:62:17:45:a9:0b:1c:be:67:c4:1a:e6:fa:05:21: e5:83:b5:60:57:79:63:bc:b9:98:ba:31:c1:03:42:bc:7b:ff: 25:fd:32:d2:b4:26:70:08:ab:a5:18:21:c0:82:d7:1f:8e:0e: 28:6a:99:2f:71:ad:5e:22:60:c8:d4:0e:be:1f:cb:3f:6e:ba: 45:37:78:b4:75:9c:cc:bf:f8:6f:ff:ae:1b:47:5f:11:c0:0a: b5:37:35:a9:3f:56:b0:11:88:0e:3d:6c:ba:20:3d:f9:57:22: fb:fd:15:17:1e:88:af:56:3a:43:00:44:88:1e:16:8f:76:8a: bc:3c:57:89:e6:45:9d:2a:d1:02:37:6e:93:29:f7:e4:38:1f: 49:61:e7:39:2c:cc:b8:11:3e:da:12:97:e9:68:df:77:1c:c0: 91:69:79:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2ELSaNaTc0P6GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDMxYTE1ZTctNDc3NS00YTkzLWI3MTAtMTYwMGU5ZTUwYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpxjgzEF7gWIVPg/3int2BTso1WSt6tOJESw WNnCFxKNGdsRmhH8rdNQcHjHHNcbtaXibvpZeojhgKRSc5FQR3MhZCiOjELt3EuE wU5C0CRbX2F8Eooc4JzzOAfkuF7/WGw578aUmO7Zv+EG2FsDXMDlvXJaXJF6FMRD KzXYe+5WeG/AAh8rxEH769BEMBGbH6XarfXGfqeA34+Xw+d+9z24vJl48N10bDkj HgE6WfjJHf3yxzldUbWjflaAQpQv8W3yJ6GDwGBs8bYopBK6Q9y3QIMwQtFpsmQZ SR6Iz6sfjEYvSkBB93UZLdf+JC4JCLBP9Qu2qg6mQjurg7J9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPZ37xX26fCXpJduZucuJv4sLfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY0OGUyNzMtYTIwZi0z NDZhLWJiYzQtZmM0MzI4MTQ5MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTB1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABawAY0pWI2mHjzKjD6Mu//QsfAV0BerrclF/jjWzkHPPdQZJ6PARbB9 Dy5UlJ2vM7eelsDRnTSu9szqX6J5lONabPWU2OgiCgrlFvafF8Awv/Derrb2ArKC BH+VhuJiF0WpCxy+Z8Qa5voFIeWDtWBXeWO8uZi6McEDQrx7/yX9MtK0JnAIq6UY IcCC1x+ODihqmS9xrV4iYMjUDr4fyz9uukU3eLR1nMy/+G//rhtHXxHACrU3Nak/ VrARiA49bLogPflXIvv9FRceiK9WOkMARIgeFo92irw8V4nmRZ0q0QI3bpMp9+Q4 H0lh5zkszLgRPtoSl+lo33ccwJFpeao= -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:49 2025 by rpki-client