$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e95c61-7828-3db3-b6e8-968a4000c762.roa File: f3e95c61-7828-3db3-b6e8-968a4000c762.roa (raw, json) Hash identifier: wQFmNAH/i30q3a8xScMvuqqRcaU1yXWo/35gCALV6H4= Subject key identifier: 7B:FD:09:3D:58:56:CC:C5:53:82:99:64:D1:1A:7B:81:25:13:A5:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB733A21E1EC86D268A7980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e95c61-7828-3db3-b6e8-968a4000c762.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 76.123.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:33:a2:1e:1e:c8:6d:26:8a:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e4970b13-307d-40fd-8283-4f73e39eadcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:69:10:99:52:67:16:4f:81:29:73:12:3c:df: 66:a1:15:c9:ac:e9:64:04:19:a8:1b:8c:bc:0e:b5: 9f:2e:ea:ac:47:39:de:20:65:b8:fa:c0:73:43:80: 6a:c3:f5:78:81:e5:ce:59:e9:dc:74:0e:da:c8:ca: 11:1d:e3:04:fb:d8:cc:a5:b4:76:3c:be:86:89:92: f1:f3:35:94:a6:3e:d9:21:25:ab:83:40:0a:2c:d4: ad:50:81:ae:ba:49:25:51:24:5a:f3:5c:28:d5:6c: f1:f6:a6:65:b1:5a:39:de:91:cd:5a:03:21:a5:b4: 46:00:38:5b:29:88:a7:5e:ec:42:00:1e:cc:1c:84: cf:fa:bc:34:57:35:16:9e:ce:e1:f4:2b:03:9d:e2: 21:00:ec:9b:fa:e6:15:a1:43:89:d7:4e:f0:61:b8: 45:ca:38:18:64:2c:6d:e4:29:c9:b8:a3:9d:fb:87: b8:68:76:52:11:0d:46:5a:55:41:29:92:9a:fe:a3: 86:94:4f:b2:dd:8e:58:a0:56:40:e7:b2:30:da:14: ad:3f:58:f9:86:ff:7a:1e:52:fa:37:37:02:8c:63: ca:a8:3e:ed:a1:95:a8:3b:5a:15:dc:47:2a:22:bb: af:8d:0d:db:ed:09:67:2d:8b:4b:52:dc:60:e1:92: 71:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:09:3D:58:56:CC:C5:53:82:99:64:D1:1A:7B:81:25:13:A5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e95c61-7828-3db3-b6e8-968a4000c762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.123.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7f:a6:37:4d:be:5d:af:48:12:97:e4:80:a3:96:e4:1f:f3: cb:4c:cc:36:e5:17:6b:c7:82:77:2a:9e:91:b5:b9:68:7c:f7: a3:8e:90:e7:61:61:33:a4:01:e4:07:0d:c4:c0:81:bb:14:79: 6c:d9:c3:db:31:db:84:2f:e4:fb:00:92:99:a7:56:bd:41:ab: 46:75:cc:3e:70:fc:b3:cd:d8:b5:1d:7b:ef:cc:ab:0d:65:6a: 23:e5:5d:70:6a:67:61:b1:27:b8:8d:db:4c:81:cc:bf:24:43: 1c:e8:0a:b5:04:1f:19:56:e4:fa:4f:37:db:ae:97:c4:01:ac: b0:2d:38:0d:8c:d8:09:15:8f:db:5d:71:28:4d:08:96:3a:ce: 08:81:16:1f:08:2d:56:34:7a:3a:21:13:ce:f6:e9:9e:2d:05: 59:29:2d:10:7e:e0:47:ca:69:15:e7:63:4c:8e:6c:c0:b4:8e: aa:cb:b2:6a:96:c4:69:78:f6:da:ee:4b:99:a9:5c:98:90:43: ab:49:52:de:0d:37:fe:8b:af:f5:f0:2f:0e:fb:b3:c6:9f:00: 35:78:d1:17:23:95:46:04:bc:76:d5:ef:a0:f2:37:59:29:cf: 7b:14:1e:16:f8:67:42:5f:37:63:6e:84:b3:20:76:51:a4:fa: 4d:01:aa:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tzOiHh7IbSaKeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTQ5NzBiMTMtMzA3ZC00MGZkLTgyODMtNGY3M2UzOWVhZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mkQmVJnFk+BKXMSPN9moRXJrOlkBBmoG4y8 DrWfLuqsRzneIGW4+sBzQ4Bqw/V4geXOWencdA7ayMoRHeME+9jMpbR2PL6GiZLx 8zWUpj7ZISWrg0AKLNStUIGuukklUSRa81wo1Wzx9qZlsVo53pHNWgMhpbRGADhb KYinXuxCAB7MHITP+rw0VzUWns7h9CsDneIhAOyb+uYVoUOJ107wYbhFyjgYZCxt 5CnJuKOd+4e4aHZSEQ1GWlVBKZKa/qOGlE+y3Y5YoFZA57Iw2hStP1j5hv96HlL6 NzcCjGPKqD7toZWoO1oV3EcqIruvjQ3b7QlnLYtLUtxg4ZJxLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv9CT1YVszFU4KZZNEae4ElE6VeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjNlOTVjNjEtNzgyOC0z ZGIzLWI2ZTgtOTY4YTQwMDBjNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp/pjdNvl2vSBKX5ICjluQf88tMzDblF2vHgncqnpG1uWh896OOkOdh YTOkAeQHDcTAgbsUeWzZw9sx24Qv5PsAkpmnVr1Bq0Z1zD5w/LPN2LUde+/Mqw1l aiPlXXBqZ2GxJ7iN20yBzL8kQxzoCrUEHxlW5PpPN9uul8QBrLAtOA2M2AkVj9td cShNCJY6zgiBFh8ILVY0ejohE8726Z4tBVkpLRB+4EfKaRXnY0yObMC0jqrLsmqW xGl49truS5mpXJiQQ6tJUt4NN/6Lr/XwLw77s8afADV40RcjlUYEvHbV76DyN1kp z3sUHhb4Z0JfN2NuhLMgdlGk+k0BqqM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:34:04 2025 by rpki-client