$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5ac618-f638-3a94-bbef-a4a1cd2c1ee2.roa File: dd5ac618-f638-3a94-bbef-a4a1cd2c1ee2.roa (raw, json) Hash identifier: 2c3HbOmpPpSu2EU83tSV/kH3UZNonW351tupNxaQplg= Subject key identifier: E1:3B:F4:1A:76:CA:9F:7E:B5:D3:C5:EE:58:3C:45:64:AD:64:82:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9326D7E15F8F1A6FD8D20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5ac618-f638-3a94-bbef-a4a1cd2c1ee2.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 76.143.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:32:6d:7e:15:f8:f1:a6:fd:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c153d3f6-6030-40a9-b29c-4a57689a7003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:40:88:ca:bc:ef:70:e8:62:71:7d:11:6b: 96:d2:fe:b7:ec:22:8d:34:1d:6d:40:f3:ac:c8:3a: ab:ad:00:97:73:05:ad:df:78:c2:32:93:d5:69:21: 11:02:3c:89:44:e8:4b:48:ca:e3:c5:cc:3d:d0:09: c7:3f:ea:0b:df:73:16:ad:b0:7e:2a:0d:b3:57:a3: bd:5f:72:1a:4f:df:cc:97:6e:d3:0f:8f:b2:41:a2: 7e:b1:4b:a7:ea:34:e7:50:cd:4b:a7:68:ee:a5:4f: d7:4b:d9:3a:80:33:3c:cc:90:a2:c4:3c:4a:8c:84: 33:b9:44:55:73:44:25:5f:53:80:71:25:a0:8b:b8: e9:9d:77:40:b2:ac:f9:de:10:55:ab:09:fe:de:a9: 59:fd:95:c3:36:42:f5:a4:27:ee:33:71:8e:57:b1: 74:88:74:e9:d5:f0:f4:58:5a:eb:66:24:ae:6c:ad: 0a:79:af:98:49:34:f0:55:e2:87:9b:9e:a4:1a:e6: 9d:12:e4:c8:7e:e7:2e:18:09:8f:b7:a7:2e:05:71: 78:8b:bc:bf:7c:df:97:9b:be:51:6a:88:f1:d2:b7: b9:ec:fe:fe:37:f0:20:c6:81:33:db:9f:19:66:bc: 32:79:20:0f:e7:5f:a1:5d:f6:c1:85:7b:a3:a0:8d: f5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3B:F4:1A:76:CA:9F:7E:B5:D3:C5:EE:58:3C:45:64:AD:64:82:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5ac618-f638-3a94-bbef-a4a1cd2c1ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:71:6c:7a:e3:d7:b7:fa:20:8b:56:5b:35:b6:86:b5:56:d3: 89:1e:20:71:93:58:ac:77:de:44:bc:57:36:29:2a:3e:fa:97: 41:5b:bf:39:7a:62:1a:49:dd:0c:33:1c:53:cb:db:d8:d4:45: ea:03:ec:82:a7:33:f3:40:89:eb:ab:1c:27:c7:26:b6:a4:a3: 9b:c2:56:56:d1:ea:49:9d:25:d5:ba:04:0b:51:31:79:69:65: 34:d4:ec:d2:97:61:b8:4e:2b:59:97:1d:78:67:90:02:12:7b: 90:04:f9:44:64:82:4f:5c:28:01:4c:51:a0:29:5c:14:d0:d4: 77:68:ee:0f:4f:ee:d6:13:87:9c:76:f2:8f:04:dd:42:bb:e2: 9e:dd:40:0a:6c:e1:45:ae:70:9a:d8:40:d0:b1:e8:3b:53:a7: 24:dc:7b:21:77:30:e4:14:43:db:89:78:06:63:fc:bf:f8:3b: 46:b3:88:06:d0:1d:b9:30:df:5f:6f:eb:29:ca:08:64:b7:8c: 3b:e7:10:21:3e:10:3b:9c:5a:01:6a:44:ee:88:00:2c:b4:20: 45:f8:1d:da:4c:3b:a6:2b:c9:b2:5c:cd:8c:4d:9c:1e:6c:53: 73:c1:3d:69:3a:80:c2:46:c0:ad:69:01:2f:97:b6:f5:5f:2e: 31:f0:f6:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqTJtfhX48ab9jSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzE1M2QzZjYtNjAzMC00MGE5LWIyOWMtNGE1NzY4OWE3MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNpAiMq873DoYnF9EWuW0v637CKNNB1tQPOs yDqrrQCXcwWt33jCMpPVaSERAjyJROhLSMrjxcw90AnHP+oL33MWrbB+Kg2zV6O9 X3IaT9/Ml27TD4+yQaJ+sUun6jTnUM1Lp2jupU/XS9k6gDM8zJCixDxKjIQzuURV c0QlX1OAcSWgi7jpnXdAsqz53hBVqwn+3qlZ/ZXDNkL1pCfuM3GOV7F0iHTp1fD0 WFrrZiSubK0Kea+YSTTwVeKHm56kGuadEuTIfucuGAmPt6cuBXF4i7y/fN+Xm75R aojx0re57P7+N/AgxoEz258ZZrwyeSAP51+hXfbBhXujoI31cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE79Bp2yp9+tdPF7lg8RWStZILXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQ1YWM2MTgtZjYzOC0z YTk0LWJiZWYtYTRhMWNkMmMxZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5xbHrj17f6IItWWzW2hrVW04keIHGTWKx33kS8VzYpKj76l0Fbvzl6 YhpJ3QwzHFPL29jUReoD7IKnM/NAieurHCfHJrako5vCVlbR6kmdJdW6BAtRMXlp ZTTU7NKXYbhOK1mXHXhnkAISe5AE+URkgk9cKAFMUaApXBTQ1Hdo7g9P7tYTh5x2 8o8E3UK74p7dQAps4UWucJrYQNCx6DtTpyTceyF3MOQUQ9uJeAZj/L/4O0aziAbQ Hbkw319v6ynKCGS3jDvnECE+EDucWgFqRO6IACy0IEX4HdpMO6YrybJczYxNnB5s U3PBPWk6gMJGwK1pAS+XtvVfLjHw9lY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:46 2025 by rpki-client