$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ce68af-d7c8-3da8-806c-aa8cf1949e47.roa File: f0ce68af-d7c8-3da8-806c-aa8cf1949e47.roa (raw, json) Hash identifier: Qyr4wiXGIj+RPpTMYq7XNSCHLfCCKXU1+iTQkdUdNbw= Subject key identifier: DA:13:8E:E6:7C:AA:63:92:CC:E6:F5:3F:60:8A:73:10:36:0A:77:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8CAFA54D233AC29C2E700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ce68af-d7c8-3da8-806c-aa8cf1949e47.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 76.22.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:ca:fa:54:d2:33:ac:29:c2:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ffb74e37-fcfa-4812-97af-0a70cde61912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:e1:a8:41:94:90:64:79:bf:7c:a3:3e:8d: e6:5d:7c:2d:fe:df:f5:a9:98:b9:d9:11:e2:fc:56: 27:0a:52:e0:98:27:e7:2b:91:dd:ea:28:07:42:25: dd:e3:a3:75:16:db:3f:31:e4:25:f2:ee:de:a9:12: ee:fd:f0:b6:7b:04:43:44:0e:5e:c2:b3:bd:ae:2e: d1:4c:06:28:15:38:9e:b3:5a:fc:75:95:91:ca:45: ac:36:8e:da:1d:3c:a8:b6:ec:1d:26:17:ca:dd:b0: 43:65:6a:32:1f:ad:bb:31:02:ca:68:a2:41:c3:75: 40:eb:ee:e0:84:2c:48:5e:0c:d6:74:55:08:6e:c3: 04:51:0b:f2:bd:36:a7:45:f4:6a:d9:e0:f9:f1:30: 55:13:67:0e:7c:fb:33:ea:f2:60:9f:fe:7a:cb:0f: 23:ac:f2:60:b0:5c:33:86:51:1a:e4:95:c5:1b:16: c8:dc:e2:54:e0:79:06:09:96:9e:bd:e2:62:e0:34: fe:c3:d7:0f:87:48:1a:5f:36:8e:44:55:30:fa:e0: 4c:74:e2:dd:d0:e8:80:3d:4e:3e:26:5d:29:57:9d: f6:d9:94:4c:94:68:4e:7e:f4:d5:7c:59:db:6d:53: c9:25:e6:dd:da:61:e5:10:70:b9:c2:64:2a:a0:f5: 25:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:13:8E:E6:7C:AA:63:92:CC:E6:F5:3F:60:8A:73:10:36:0A:77:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ce68af-d7c8-3da8-806c-aa8cf1949e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.22.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:df:7f:56:99:dd:16:80:19:d3:4e:ac:cc:4c:10:11:7a:ed: f9:df:1a:01:8c:6f:5e:f4:d5:5e:70:d0:55:98:49:6e:f7:4b: e1:47:6c:38:77:a9:e4:13:0f:34:f6:56:c1:f1:50:62:8f:db: fa:ec:1c:57:7b:a2:f0:63:06:93:58:aa:09:d4:25:bf:82:a9: d9:f7:9c:00:0b:19:c2:b1:51:2b:b8:9f:43:19:28:55:29:2f: d0:05:5d:73:01:4c:ca:02:01:33:e0:93:2f:93:3c:49:44:8f: b2:aa:c5:30:05:9e:d6:05:8a:7f:0d:84:4d:aa:71:cc:ce:8f: 34:90:76:5c:06:03:a2:d6:b1:52:f6:6c:1b:f1:0e:0d:41:11: 51:2b:a4:4a:1d:49:d2:11:2d:6b:4d:f3:ae:ff:20:1b:e3:56: 05:f2:e6:66:c4:14:92:3c:83:19:e4:02:61:ab:cf:66:d0:4c: 6b:c4:34:79:25:60:e8:f3:24:41:6a:01:04:6c:ed:57:82:3a: 27:84:0e:80:fa:f7:a0:db:0f:4c:04:ac:42:15:9a:ef:45:dc: 41:e5:23:3e:24:95:04:66:c5:c2:38:dc:fc:7d:a4:c7:97:97: fb:66:7a:c5:d4:83:a8:3f:ee:8b:35:63:ed:50:1a:d6:b2:23: 37:0c:1c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uMr6VNIzrCnC5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZmZiNzRlMzctZmNmYS00ODEyLTk3YWYtMGE3MGNkZTYxOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHLhqEGUkGR5v3yjPo3mXXwt/t/1qZi52RHi /FYnClLgmCfnK5Hd6igHQiXd46N1Fts/MeQl8u7eqRLu/fC2ewRDRA5ewrO9ri7R TAYoFTies1r8dZWRykWsNo7aHTyotuwdJhfK3bBDZWoyH627MQLKaKJBw3VA6+7g hCxIXgzWdFUIbsMEUQvyvTanRfRq2eD58TBVE2cOfPsz6vJgn/56yw8jrPJgsFwz hlEa5JXFGxbI3OJU4HkGCZaeveJi4DT+w9cPh0gaXzaORFUw+uBMdOLd0OiAPU4+ Jl0pV5322ZRMlGhOfvTVfFnbbVPJJebd2mHlEHC5wmQqoPUllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoTjuZ8qmOSzOb1P2CKcxA2CnfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjBjZTY4YWYtZDdjOC0z ZGE4LTgwNmMtYWE4Y2YxOTQ5ZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATBaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbff1aZ3RaAGdNOrMxMEBF67fnfGgGMb1701V5w0FWYSW73S+FHbDh3 qeQTDzT2VsHxUGKP2/rsHFd7ovBjBpNYqgnUJb+Cqdn3nAALGcKxUSu4n0MZKFUp L9AFXXMBTMoCATPgky+TPElEj7KqxTAFntYFin8NhE2qcczOjzSQdlwGA6LWsVL2 bBvxDg1BEVErpEodSdIRLWtN867/IBvjVgXy5mbEFJI8gxnkAmGrz2bQTGvENHkl YOjzJEFqAQRs7VeCOieEDoD696DbD0wErEIVmu9F3EHlIz4klQRmxcI43Px9pMeX l/tmesXUg6g/7os1Y+1QGtayIzcMHO0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:58 2025 by rpki-client