$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238ee629-4f46-390c-b78d-f5dd35115a84.roa File: 238ee629-4f46-390c-b78d-f5dd35115a84.roa (raw, json) Hash identifier: vlOjPWq6GoXgddPvdrQJm8ZIJXDBrE1gmfur5YMzLYg= Subject key identifier: 20:1E:6B:D6:F7:82:C0:9E:79:F9:47:93:19:F0:50:9B:A3:31:29:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A965C43B7E8F265F13B100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238ee629-4f46-390c-b78d-f5dd35115a84.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.238.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:65:c4:3b:7e:8f:26:5f:13:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c0f66d98-30ff-4587-91b4-9868f9a022de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:6a:9c:b2:86:61:05:17:7e:d7:e5:8a:b4: 1e:5d:8e:14:63:e1:c0:78:7b:3c:6d:5d:c7:4d:cc: 6a:42:4b:77:8c:97:09:f8:ee:87:3d:ad:0b:64:5b: d9:e6:86:d4:8c:12:d1:e9:be:95:22:da:51:c6:c6: 6e:81:68:1f:e5:f9:dc:7d:16:76:89:f6:65:f2:0c: 95:63:ff:bf:51:b3:4a:a3:2f:18:49:29:df:e6:4b: 1f:fe:70:9a:0e:c8:e4:13:19:34:7d:47:96:ea:30: 66:81:9c:6b:c4:86:0e:c3:51:4b:68:12:52:3a:52: cd:62:68:fc:45:c3:13:ea:dc:f0:91:08:95:28:86: 89:3f:33:81:66:49:ce:1d:cd:f1:b1:9a:a1:ba:10: 92:e3:ca:26:c5:d9:b7:98:d7:93:fe:a0:6f:13:f1: e3:a6:42:b8:47:ad:f5:31:96:59:6b:2c:8d:95:36: b9:af:58:73:9b:1c:f8:b1:42:9e:3e:4f:b9:9d:0a: 26:3b:c5:31:c4:54:12:28:2c:89:bc:b4:eb:d0:9e: 93:8a:2c:4d:87:28:41:e5:d0:e9:75:69:8e:d6:99: fd:f0:8d:13:e0:c3:b1:d1:91:50:9d:3c:97:2c:ef: b2:8f:b8:78:a5:a5:2d:51:5d:14:64:6e:2d:32:44: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1E:6B:D6:F7:82:C0:9E:79:F9:47:93:19:F0:50:9B:A3:31:29:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/238ee629-4f46-390c-b78d-f5dd35115a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:67:05:ae:19:fa:bb:50:2d:87:7d:db:ee:ef:b3:fd:52:38: 5b:98:d8:18:d4:0d:f0:e5:01:a9:8e:e0:74:56:e3:4c:2a:e2: a4:b3:26:53:95:a2:c4:4d:7f:79:83:c2:ad:62:4f:b8:dc:25: e8:f2:a0:4e:0b:47:f5:4e:8b:a9:ac:00:e3:61:4b:e6:14:fc: 97:53:08:b3:1d:d5:7c:ba:bf:25:32:f5:1d:18:28:37:07:84: fa:2b:da:b3:ac:17:d8:96:53:24:02:83:91:a0:cb:12:99:6d: fc:93:31:2d:94:d0:74:89:eb:1b:49:ff:3d:95:e7:ea:ca:ce: 09:a7:e4:8b:c1:b0:77:8b:43:d3:30:30:83:89:f5:6a:22:d4: 36:e2:32:a7:c6:9d:8f:b1:f2:2f:c0:7c:f0:ad:16:ed:eb:a2: a7:00:eb:34:86:10:ba:aa:51:ad:2f:bb:d2:9f:8e:b5:60:dd: 0f:e9:67:e4:93:91:ba:46:78:11:33:a5:b3:c4:de:36:b7:4f: 81:53:f3:3d:23:82:5a:ce:b7:da:d1:e4:61:81:e3:be:ff:35: 62:ef:99:55:83:a7:d7:33:73:52:a5:f6:d7:f1:d9:2a:1a:ed: 3d:af:df:15:52:70:85:dc:0b:6e:95:2b:bf:d0:01:1e:25:b0: cb:4c:cc:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqWXEO36PJl8TsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzBmNjZkOTgtMzBmZi00NTg3LTkxYjQtOTg2OGY5YTAyMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHBqnLKGYQUXftflirQeXY4UY+HAeHs8bV3H TcxqQkt3jJcJ+O6HPa0LZFvZ5obUjBLR6b6VItpRxsZugWgf5fncfRZ2ifZl8gyV Y/+/UbNKoy8YSSnf5ksf/nCaDsjkExk0fUeW6jBmgZxrxIYOw1FLaBJSOlLNYmj8 RcMT6tzwkQiVKIaJPzOBZknOHc3xsZqhuhCS48omxdm3mNeT/qBvE/HjpkK4R631 MZZZayyNlTa5r1hzmxz4sUKePk+5nQomO8UxxFQSKCyJvLTr0J6TiixNhyhB5dDp dWmO1pn98I0T4MOx0ZFQnTyXLO+yj7h4paUtUV0UZG4tMkQ4nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAea9b3gsCeeflHkxnwUJujMSlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjM4ZWU2MjktNGY0Ni0z OTBjLWI3OGQtZjVkZDM1MTE1YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxnBa4Z+rtQLYd92+7vs/1SOFuY2BjUDfDlAamO4HRW40wq4qSzJlOV osRNf3mDwq1iT7jcJejyoE4LR/VOi6msAONhS+YU/JdTCLMd1Xy6vyUy9R0YKDcH hPor2rOsF9iWUyQCg5GgyxKZbfyTMS2U0HSJ6xtJ/z2V5+rKzgmn5IvBsHeLQ9Mw MIOJ9Woi1DbiMqfGnY+x8i/AfPCtFu3roqcA6zSGELqqUa0vu9KfjrVg3Q/pZ+ST kbpGeBEzpbPE3ja3T4FT8z0jglrOt9rR5GGB477/NWLvmVWDp9czc1Kl9tfx2Soa 7T2v3xVScIXcC26VK7/QAR4lsMtMzKA= -----END CERTIFICATE-----Generated at Tue Oct 21 22:13:33 2025 by rpki-client