$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3734f4-a270-3753-aacd-1b46abc35a3d.roa File: aa3734f4-a270-3753-aacd-1b46abc35a3d.roa (raw, json) Hash identifier: s4M3byDtY4/DR2m0a3tSNkiT4zSsJv/mUbnT93EgzWg= Subject key identifier: 70:CE:0B:CC:5A:45:DF:18:DB:B5:F1:C1:70:D1:2C:72:E8:40:6C:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9B183396F75232B5A7200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3734f4-a270-3753-aacd-1b46abc35a3d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 76.156.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:b1:83:39:6f:75:23:2b:5a:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8935b555-82fe-48c4-b7bd-bac76c7c9f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:59:47:7b:4b:0e:1a:3a:63:93:6d:94:c6: 01:95:23:36:7e:21:ac:d0:3b:1f:5f:a3:0a:7d:79: 28:0e:08:be:c9:3c:60:fb:5c:16:81:1a:79:9f:aa: e8:6e:7d:a0:b8:23:c0:d5:74:f7:19:52:35:1e:17: 79:c7:91:be:fa:f6:97:31:bf:bb:f5:3d:67:e9:7f: 16:81:0f:b7:89:89:de:f2:0b:8b:96:f0:63:57:bd: 61:bd:77:bf:06:2d:09:4d:22:b2:b1:3d:6d:ef:e0: 4d:3e:0b:f6:9a:4a:2a:8d:3b:9a:92:5a:ce:19:6e: ba:f5:2a:38:1f:2f:de:2e:7b:d0:3c:0a:3f:83:59: a6:f3:2f:52:2c:79:60:2e:2e:37:cd:e4:da:a0:38: 3a:2a:54:17:25:00:c2:34:43:ad:c4:dc:c6:f3:d4: 5d:b5:5c:58:64:c9:2d:f3:c1:18:2e:09:e1:6b:33: cb:62:80:46:30:8e:f0:5e:a3:59:fe:f7:d2:10:0c: 5f:f6:63:d6:6a:f0:94:68:f6:78:c5:b0:73:73:95: df:de:a3:ab:82:51:57:39:71:65:d8:54:5c:93:57: 20:dc:4c:23:d8:f0:7b:b9:fd:b6:08:5a:53:08:eb: b3:f6:4b:08:a5:1a:b3:fc:1a:c0:8d:b9:0a:14:5a: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CE:0B:CC:5A:45:DF:18:DB:B5:F1:C1:70:D1:2C:72:E8:40:6C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3734f4-a270-3753-aacd-1b46abc35a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.156.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:60:3a:e6:3f:86:92:c9:2d:ce:f2:2b:ed:ad:e9:95:11:01: 51:84:33:5d:6c:73:a1:93:d3:66:b5:5a:70:e4:47:00:7f:5b: 0a:99:07:5f:97:24:02:0d:90:e2:28:5b:ed:d0:9b:7c:3e:0d: 96:ea:0d:93:7c:66:97:25:fb:f2:81:9d:fc:be:ec:52:91:e7: fa:9a:8f:15:8a:3a:5e:92:09:4f:a1:93:b9:e3:e0:22:96:11: 9d:ec:89:43:0b:ed:22:4f:88:d0:00:55:55:56:92:30:03:4d: c5:fa:2b:50:45:05:75:bf:d5:8b:6c:bb:71:7b:1e:71:bf:cd: 19:7a:32:1f:c4:9a:87:a4:1e:64:d5:58:33:43:d0:96:a2:33: dc:d6:41:ae:f4:22:7b:39:7d:31:da:ac:fb:1d:bb:22:dc:56: 90:44:c5:4b:db:b5:79:7a:ca:f0:53:5f:c9:19:da:5a:3a:5c: d5:bb:25:ba:a4:2a:74:4b:e3:cb:9c:d2:50:12:af:80:57:5a: bb:66:39:99:ad:97:e2:71:73:5e:7d:42:da:7a:fe:7c:b7:e3: a8:5a:ce:66:97:42:e0:53:6d:33:e4:b8:b4:69:99:98:39:2f: a0:dd:79:98:20:e0:36:5b:e9:8f:65:49:82:9d:ce:1a:59:11: a7:9a:43:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ubGDOW91IytacgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODkzNWI1NTUtODJmZS00OGM0LWI3YmQtYmFjNzZjN2M5ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xdZR3tLDho6Y5NtlMYBlSM2fiGs0DsfX6MK fXkoDgi+yTxg+1wWgRp5n6robn2guCPA1XT3GVI1Hhd5x5G++vaXMb+79T1n6X8W gQ+3iYne8guLlvBjV71hvXe/Bi0JTSKysT1t7+BNPgv2mkoqjTuaklrOGW669So4 Hy/eLnvQPAo/g1mm8y9SLHlgLi43zeTaoDg6KlQXJQDCNEOtxNzG89RdtVxYZMkt 88EYLgnhazPLYoBGMI7wXqNZ/vfSEAxf9mPWavCUaPZ4xbBzc5Xf3qOrglFXOXFl 2FRck1cg3Ewj2PB7uf22CFpTCOuz9ksIpRqz/BrAjbkKFFq5pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDOC8xaRd8Y27XxwXDRLHLoQGx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEzNzM0ZjQtYTI3MC0z NzUzLWFhY2QtMWI0NmFiYzM1YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNgOuY/hpLJLc7yK+2t6ZURAVGEM11sc6GT02a1WnDkRwB/WwqZB1+X JAINkOIoW+3Qm3w+DZbqDZN8Zpcl+/KBnfy+7FKR5/qajxWKOl6SCU+hk7nj4CKW EZ3siUML7SJPiNAAVVVWkjADTcX6K1BFBXW/1Ytsu3F7HnG/zRl6Mh/EmoekHmTV WDND0JaiM9zWQa70Ins5fTHarPsduyLcVpBExUvbtXl6yvBTX8kZ2lo6XNW7Jbqk KnRL48uc0lASr4BXWrtmOZmtl+Jxc159Qtp6/ny346hazmaXQuBTbTPkuLRpmZg5 L6DdeZgg4DZb6Y9lSYKdzhpZEaeaQ34= -----END CERTIFICATE-----Generated at Mon Oct 20 06:43:45 2025 by rpki-client