$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c695c61b-a10a-37c5-bc93-a119e774e872.roa File: c695c61b-a10a-37c5-bc93-a119e774e872.roa (raw, json) Hash identifier: /ejiXzkJDoFYQMNiybvRdcCngANvY+YkRdHJiARnFaA= Subject key identifier: FE:B3:23:52:34:32:FF:0D:EF:74:43:02:C4:05:D8:7D:CF:81:B5:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB732BF8B2532AB9E00F280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c695c61b-a10a-37c5-bc93-a119e774e872.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 76.123.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:32:bf:8b:25:32:ab:9e:00:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4cf50d5f-c0e1-489b-83df-4b26e7e5eb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:c0:5c:72:ab:28:ae:2d:26:20:dc:05:50: 90:14:3e:61:e0:ec:56:51:71:b7:74:78:9b:40:24: 56:9c:40:22:e4:c8:54:46:08:d0:02:5d:ff:41:a1: 14:0a:a3:2b:f2:e4:bc:ca:cf:85:53:c2:04:41:d3: 31:30:7b:67:14:a9:5c:d1:d4:56:a1:7f:10:9b:b5: 0f:48:b0:cd:bc:1f:a2:12:88:eb:df:68:89:06:92: 24:8f:d2:26:58:a8:f6:d9:1b:f0:af:62:50:ce:36: 46:f0:86:28:ae:71:f1:3e:a3:8b:be:61:b4:82:53: a6:b9:af:9a:ef:e0:49:55:e1:31:5d:b6:5e:c8:0f: 7f:f2:ed:8d:e2:e9:b3:29:46:7b:ad:2a:04:49:b4: 9e:b2:bb:ab:91:a8:a4:77:3d:a5:c8:bb:b8:87:ac: be:6a:6c:13:9a:71:1d:a0:24:03:04:16:7d:2f:be: aa:c4:da:3b:86:6a:7a:d0:cb:ec:48:09:58:cc:b0: 07:d1:30:7f:ee:ed:ae:b7:0d:e4:c7:b6:2d:fb:e6: 16:85:ac:e5:d7:f2:33:da:3a:d7:dc:25:b0:79:fd: 9f:41:63:ca:85:43:b5:d4:fe:dc:f2:10:76:6a:93: f1:cd:f7:e3:bc:80:c1:39:37:b7:ca:76:0a:aa:12: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:23:52:34:32:FF:0D:EF:74:43:02:C4:05:D8:7D:CF:81:B5:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c695c61b-a10a-37c5-bc93-a119e774e872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.123.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8d:df:c0:3f:3e:3c:3a:09:50:24:b6:6e:5b:70:4a:8c:46: a7:5a:45:85:75:d8:f6:86:49:51:39:55:1a:67:20:a5:ab:9e: c8:ac:4c:4e:99:9c:7b:c6:49:be:c4:88:1a:8e:b4:87:e0:9d: e1:2e:a2:e8:d6:8c:1b:66:f0:d9:a6:60:cc:74:25:01:c2:3f: 28:e4:94:d9:97:95:b4:31:29:14:ab:49:6c:1d:fc:df:77:99: c7:b4:57:35:12:51:30:9d:7e:8e:23:5f:c9:32:1b:de:62:f4: 36:59:82:5d:ff:c8:4d:8f:93:1e:6f:53:59:c5:fb:69:ac:8f: 65:01:e9:b1:8e:74:2a:fb:32:51:4b:4a:05:8d:73:7a:29:b6: c1:e6:29:9e:8b:4d:b6:1c:34:9b:fe:18:cb:a1:a4:6b:7b:a7: 73:43:d1:54:e8:e5:45:d7:2c:9b:02:e9:27:c0:74:9f:e6:21: a2:82:66:37:5a:a4:b8:a2:c4:00:32:ba:c9:c6:c2:ec:24:ca: 1d:ef:79:fd:94:d3:f1:b4:b4:5c:e8:59:14:a6:8d:5f:c3:87: 6e:53:19:8d:c9:87:0f:c3:e2:0f:11:99:fa:d5:bb:27:fc:41: 2a:1d:f5:f4:0d:2f:da:f7:47:58:fe:21:a6:ea:c8:0b:78:31: 6d:08:f2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tzK/iyUyq54A8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NGNmNTBkNWYtYzBlMS00ODliLTgzZGYtNGIyNmU3ZTVlYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/rAXHKrKK4tJiDcBVCQFD5h4OxWUXG3dHib QCRWnEAi5MhURgjQAl3/QaEUCqMr8uS8ys+FU8IEQdMxMHtnFKlc0dRWoX8Qm7UP SLDNvB+iEojr32iJBpIkj9ImWKj22Rvwr2JQzjZG8IYornHxPqOLvmG0glOmua+a 7+BJVeExXbZeyA9/8u2N4umzKUZ7rSoESbSesrurkaikdz2lyLu4h6y+amwTmnEd oCQDBBZ9L76qxNo7hmp60MvsSAlYzLAH0TB/7u2utw3kx7Yt++YWhazl1/Iz2jrX 3CWwef2fQWPKhUO11P7c8hB2apPxzffjvIDBOTe3ynYKqhIBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6zI1I0Mv8N73RDAsQF2H3PgbVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzY5NWM2MWItYTEwYS0z N2M1LWJjOTMtYTExOWU3NzRlODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmN38A/Pjw6CVAktm5bcEqMRqdaRYV12PaGSVE5VRpnIKWrnsisTE6Z nHvGSb7EiBqOtIfgneEuoujWjBtm8NmmYMx0JQHCPyjklNmXlbQxKRSrSWwd/N93 mce0VzUSUTCdfo4jX8kyG95i9DZZgl3/yE2Pkx5vU1nF+2msj2UB6bGOdCr7MlFL SgWNc3optsHmKZ6LTbYcNJv+GMuhpGt7p3ND0VTo5UXXLJsC6SfAdJ/mIaKCZjda pLiixAAyusnGwuwkyh3vef2U0/G0tFzoWRSmjV/Dh25TGY3Jhw/D4g8RmfrVuyf8 QSod9fQNL9r3R1j+IabqyAt4MW0I8s4= -----END CERTIFICATE-----Generated at Mon Oct 20 16:54:25 2025 by rpki-client