$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da733adf-d40f-3e12-aae5-5d080ab3e861.roa File: da733adf-d40f-3e12-aae5-5d080ab3e861.roa (raw, json) Hash identifier: v6hQhw+0+xoJs3WVkXq5K7KfkgkovdusmRQ6PVUxoGQ= Subject key identifier: 21:67:B5:3D:FC:B4:7C:40:B0:2D:C8:99:39:73:77:50:83:4A:0B:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B5141C8BC03D4CD7D246EB380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da733adf-d40f-3e12-aae5-5d080ab3e861.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 76.96.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c8:bc:03:d4:cd:7d:24:6e:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=b09afc98-640e-40aa-9c1b-90b3e9af1d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:ca:1e:4a:c7:74:58:e3:68:6e:a7:8e:74: c6:49:69:b8:4d:0d:12:50:32:f2:4e:96:5d:9c:96: cb:9b:7d:fa:28:d2:8d:41:a0:85:69:4a:7f:d6:64: 37:1d:8d:77:38:eb:0f:bc:c4:f3:5d:fe:03:19:9c: 26:31:ea:a9:30:19:09:92:0c:e9:93:a5:32:1b:85: 21:97:b3:56:fa:14:3a:86:ab:04:2a:bb:d8:c8:3e: 2f:3d:74:d5:7e:8b:77:03:10:7a:90:79:3b:9b:97: 0b:89:ac:6d:8f:0e:b6:ee:67:e5:8a:ab:0e:cf:31: e2:70:13:97:4c:48:0a:c3:37:53:ae:3f:2a:09:4e: fb:11:c5:c7:da:2f:f8:f3:72:31:1a:6e:3a:c7:bd: 69:33:71:84:78:ce:49:d8:5c:eb:d8:c8:cb:f8:22: 73:1a:76:d8:fb:18:be:b3:90:14:b2:07:d1:e7:16: 1d:48:4b:48:a7:a3:44:cc:39:1f:7a:b8:d6:c1:00: 5c:cb:ec:58:40:fb:eb:a5:94:a1:e8:3e:d7:c3:0e: 29:f7:d7:1b:f5:76:35:6d:e8:f6:8d:27:1b:05:02: b3:ac:05:e9:c4:d7:3b:d0:ba:ce:4a:18:b4:45:70: ee:d2:4f:6f:46:ee:b9:64:74:d8:5a:5c:18:77:fe: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:67:B5:3D:FC:B4:7C:40:B0:2D:C8:99:39:73:77:50:83:4A:0B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da733adf-d40f-3e12-aae5-5d080ab3e861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.96.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9d:29:75:a8:28:b6:8b:7b:7f:70:cf:e8:9f:d8:af:5c:e0: f6:31:ff:43:f0:8f:d2:f4:10:b0:31:79:62:49:c8:6e:0b:d1: 63:bb:0b:38:c4:16:81:bd:27:2e:bb:bb:a8:08:63:1a:cd:87: 44:11:54:44:dc:77:ad:72:81:89:9c:21:45:d3:1a:da:7d:96: a0:26:42:7b:21:57:86:8a:9b:33:2c:1b:39:8a:88:91:8a:16: 5a:9c:03:d2:54:bb:51:e5:7d:21:e7:3b:78:49:3a:d6:05:cd: fe:08:f4:06:34:0a:36:b1:4d:f4:29:05:8b:82:76:44:6c:a5: 5b:ab:19:65:15:8d:23:1f:95:96:da:60:8f:2a:cf:cc:80:2a: bb:ef:2a:3f:9a:a2:9a:5f:3e:97:88:de:22:98:f1:23:e2:32: 15:0a:ef:4b:c0:8d:e4:32:19:b9:cc:57:b0:d6:f6:92:d1:62: 24:59:47:cf:69:a4:0a:d8:e1:b4:4b:ab:f5:28:8c:0e:a7:cd: 89:3e:c4:c8:61:7b:d1:24:81:da:29:67:a0:f0:7c:eb:d4:67: ea:5b:94:41:18:52:8d:b4:2b:5f:f9:d5:d3:d9:91:d7:d5:12: 00:59:0c:ed:7d:1f:45:a6:04:be:3a:40:f0:b2:09:0d:9c:1b: c6:82:5d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQci8A9TNfSRus4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YjA5YWZjOTgtNjQwZS00MGFhLTljMWItOTBiM2U5YWYxZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RnKHkrHdFjjaG6njnTGSWm4TQ0SUDLyTpZd nJbLm336KNKNQaCFaUp/1mQ3HY13OOsPvMTzXf4DGZwmMeqpMBkJkgzpk6UyG4Uh l7NW+hQ6hqsEKrvYyD4vPXTVfot3AxB6kHk7m5cLiaxtjw627mfliqsOzzHicBOX TEgKwzdTrj8qCU77EcXH2i/483IxGm46x71pM3GEeM5J2Fzr2MjL+CJzGnbY+xi+ s5AUsgfR5xYdSEtIp6NEzDkferjWwQBcy+xYQPvrpZSh6D7Xww4p99cb9XY1bej2 jScbBQKzrAXpxNc70LrOShi0RXDu0k9vRu65ZHTYWlwYd/5uTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFntT38tHxAsC3ImTlzd1CDSgszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE3MzNhZGYtZDQwZi0z ZTEyLWFhZTUtNWQwODBhYjNlODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIadKXWoKLaLe39wz+if2K9c4PYx/0Pwj9L0ELAxeWJJyG4L0WO7CzjE FoG9Jy67u6gIYxrNh0QRVETcd61ygYmcIUXTGtp9lqAmQnshV4aKmzMsGzmKiJGK FlqcA9JUu1HlfSHnO3hJOtYFzf4I9AY0CjaxTfQpBYuCdkRspVurGWUVjSMflZba YI8qz8yAKrvvKj+aoppfPpeI3iKY8SPiMhUK70vAjeQyGbnMV7DW9pLRYiRZR89p pArY4bRLq/UojA6nzYk+xMhhe9EkgdopZ6DwfOvUZ+pblEEYUo20K1/51dPZkdfV EgBZDO19H0WmBL46QPCyCQ2cG8aCXU8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:53 2025 by rpki-client