$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e0c583-56ba-30f0-b950-26aac67102f4.roa File: b8e0c583-56ba-30f0-b950-26aac67102f4.roa (raw, json) Hash identifier: jKe/iotLcMXqfTWKtua9L+3UTbo/96ie6KdqEyS3qTs= Subject key identifier: 12:86:1B:A9:5E:A7:4E:3D:5D:7A:21:BF:B3:5D:0F:82:C5:B7:88:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B5141C98DCE2BB90D1394CD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e0c583-56ba-30f0-b950-26aac67102f4.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 76.96.248.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c9:8d:ce:2b:b9:0d:13:94:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=3df21dbd-7877-4839-8a71-b20defc5f74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:ab:3b:96:52:b0:f0:fa:10:0c:f9:48:33: 58:8a:60:0b:91:19:13:70:32:c5:e0:1e:45:f6:5a: 1d:b5:00:9a:d0:8a:6d:39:e4:78:19:7d:9b:72:15: 31:61:13:09:5c:ef:90:3e:e6:a8:e0:23:2f:44:74: 7c:38:b6:1b:78:54:52:55:c0:ac:92:74:c9:45:fb: d0:95:6f:5f:6c:eb:75:77:47:83:e4:16:49:69:63: 55:c9:69:50:13:cc:7b:4b:09:ab:0a:e6:d2:da:9f: 47:ad:e2:e5:5f:e6:81:8b:9b:f9:98:31:31:43:83: 9a:09:7a:86:8e:e2:de:ff:64:2e:0a:7f:dd:18:34: 62:7e:7b:75:8a:bc:2e:72:2b:cd:96:85:12:91:ed: 65:74:4e:80:0e:e0:86:5d:f5:d7:35:f8:8c:49:62: a4:8c:29:50:62:2c:64:f5:dc:b6:f5:d1:e8:70:e9: 90:48:f2:95:3c:d8:d7:83:ef:f4:26:3f:e8:7f:c4: 7f:01:31:89:d9:f7:14:2d:9e:e9:4c:ce:25:1d:65: fa:e3:79:a1:69:a7:ab:75:36:de:c2:46:17:e2:ba: 0c:44:46:42:47:3a:1a:0f:ed:95:1a:68:30:db:19: 39:3b:42:d8:03:33:b2:ec:cc:2c:2c:70:aa:44:51: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:86:1B:A9:5E:A7:4E:3D:5D:7A:21:BF:B3:5D:0F:82:C5:B7:88:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8e0c583-56ba-30f0-b950-26aac67102f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.96.248.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:e0:4d:3f:ae:b9:5b:1c:41:63:a0:bf:bb:42:ea:e0:f0:a9: 82:b0:99:ce:da:93:a1:ee:a3:98:c2:d7:2c:aa:69:df:4f:82: d5:0a:b8:5b:c4:63:38:2c:d7:8a:25:a1:31:db:2c:29:60:bc: e4:d6:28:b7:80:51:be:64:ca:5c:56:9f:6a:f0:c6:ee:58:d8: 33:6d:05:3f:dc:f4:40:77:f6:71:29:9e:ea:81:a3:81:e4:13: 36:2a:8e:4f:f9:15:a1:a0:fa:f2:44:20:cc:04:ce:ef:c5:f5: 74:21:f8:39:fc:d0:b1:ab:49:c0:d4:24:c8:c7:b7:b9:7f:df: d1:61:cb:41:0c:76:50:6b:5f:2b:31:f6:84:68:a6:d6:4f:fd: 51:56:32:e3:0e:df:42:14:c7:3b:37:8d:b7:54:ec:44:26:1a: 6f:b8:37:f7:0c:ab:6c:c6:fb:d6:fe:dd:9b:97:b2:7e:ed:18: 68:16:df:6a:76:00:df:df:79:64:61:b0:83:d1:a8:eb:72:2b: 11:86:73:bd:18:b7:5b:ad:62:65:01:36:ba:09:d2:5b:ea:b2: 42:4e:51:75:85:12:65:11:ff:dd:eb:24:ae:c6:1c:ba:8d:36: 39:01:94:44:17:70:e6:cc:86:62:36:6c:78:7e:11:f6:cd:9b: ff:35:63:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtRQcmNziu5DROUzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk M2RmMjFkYmQtNzg3Ny00ODM5LThhNzEtYjIwZGVmYzVmNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysyrO5ZSsPD6EAz5SDNYimALkRkTcDLF4B5F 9lodtQCa0IptOeR4GX2bchUxYRMJXO+QPuao4CMvRHR8OLYbeFRSVcCsknTJRfvQ lW9fbOt1d0eD5BZJaWNVyWlQE8x7SwmrCubS2p9HreLlX+aBi5v5mDExQ4OaCXqG juLe/2QuCn/dGDRifnt1irwucivNloUSke1ldE6ADuCGXfXXNfiMSWKkjClQYixk 9dy29dHocOmQSPKVPNjXg+/0Jj/of8R/ATGJ2fcULZ7pTM4lHWX643mhaaerdTbe wkYX4roMREZCRzoaD+2VGmgw2xk5O0LYAzOy7MwsLHCqRFFwzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBKGG6lep049XXohv7NdD4LFt4iPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjhlMGM1ODMtNTZiYS0z MGYwLWI5NTAtMjZhYWM2NzEwMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUETGD4QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCu4E0/rrlbHEFjoL+7Qurg8KmCsJnO2pOh7qOYwtcsqmnfT4LVCrhb xGM4LNeKJaEx2ywpYLzk1ii3gFG+ZMpcVp9q8MbuWNgzbQU/3PRAd/ZxKZ7qgaOB 5BM2Ko5P+RWhoPryRCDMBM7vxfV0Ifg5/NCxq0nA1CTIx7e5f9/RYctBDHZQa18r MfaEaKbWT/1RVjLjDt9CFMc7N423VOxEJhpvuDf3DKtsxvvW/t2bl7J+7RhoFt9q dgDf33lkYbCD0ajrcisRhnO9GLdbrWJlATa6CdJb6rJCTlF1hRJlEf/d6ySuxhy6 jTY5AZREF3DmzIZiNmx4fhH2zZv/NWMC -----END CERTIFICATE-----Generated at Mon Oct 20 03:54:56 2025 by rpki-client