$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa File: 24a30da4-284f-359d-a000-798bee3ee6c2.roa (raw, json) Hash identifier: PzOhDm3MQ+jgoABI3VU1OTzyQ2CHGqX49gsbQ7N/IUI= Subject key identifier: 6A:54:21:84:A8:7C:E3:48:EF:6C:77:1B:6D:34:9F:F5:A0:B8:61:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7B85216C59848B7DDDE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.237.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:b8:52:16:c5:98:48:b7:dd:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d62c158e-2b24-4a6f-a660-e194136bf025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:00:b2:43:ac:6e:22:9a:0a:0f:47:2b:fd: 78:8c:aa:8e:8d:5e:6e:95:77:1b:a4:46:6e:86:40: 44:f4:5e:cb:55:f1:e7:e4:51:bc:e5:d1:23:18:b3: da:b2:a0:f0:0c:5c:85:fa:50:58:2c:fe:1b:d7:61: cb:a7:60:e6:e7:09:47:8a:de:53:05:dd:48:5b:d9: bb:88:a8:29:f8:3d:2a:dd:6d:d9:d6:df:ef:95:2a: 01:8c:13:39:f4:43:e3:3e:8f:12:2a:39:d3:46:4e: b2:a6:6d:ad:ab:b3:1a:af:d1:cf:8f:d8:c8:e6:2f: 9c:e8:31:20:cf:15:16:01:e7:01:86:da:e2:3d:af: 38:c3:96:3e:8f:f5:33:1c:a7:10:8a:86:3c:7a:ef: ce:63:c4:ef:0d:f2:f9:cc:c8:73:84:4d:36:c3:6c: 6a:f6:e5:a3:b7:fe:73:44:81:4e:bd:e5:85:9c:fc: 8b:9e:02:f9:8c:93:d4:77:8f:a4:ed:39:98:a2:4e: 58:75:da:4a:2f:b8:02:8a:d2:77:2a:39:70:15:72: 4e:42:07:47:77:91:61:78:d5:46:28:d5:f4:88:c9: bb:02:cb:0e:ab:50:73:d9:1c:fd:ea:28:52:e0:ca: 76:3b:95:6f:fc:fe:f2:3d:95:54:bb:f0:b7:1f:bc: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:21:84:A8:7C:E3:48:EF:6C:77:1B:6D:34:9F:F5:A0:B8:61:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:41:28:96:5c:24:12:95:8a:fe:8e:c1:11:62:95:9c:0b:b3: e6:09:4c:45:f9:20:64:88:41:3e:28:cd:a4:7e:f0:59:5e:e7: 9a:68:34:86:b5:fe:40:14:3d:ba:7f:d8:40:c7:fd:86:2b:fd: 80:8c:c1:0d:82:ee:ff:00:5c:84:07:9d:1d:f0:b8:5c:94:2c: b1:a0:9a:f1:72:fb:66:03:16:ac:87:4b:e3:88:7a:35:79:9a: 8c:8a:32:7c:95:7c:a8:dc:40:b4:d7:ce:95:32:ff:74:a9:7f: 02:38:a6:6f:5b:28:e2:64:c5:7d:60:56:d7:33:b3:c2:a8:92: 82:24:2b:42:17:45:9b:4f:83:ad:9f:e6:02:0a:52:37:ac:88: 71:eb:9b:1e:7f:fb:4d:0f:e7:65:14:6f:d9:92:b1:ab:7d:3c: ef:a3:d0:bd:a1:f1:a1:3c:ab:58:b3:ec:89:b7:c8:e6:b5:76: 0c:fc:86:c3:2c:00:ac:98:23:0a:ea:e6:97:7a:8b:6f:c7:b8: ae:4c:b9:7a:7e:50:16:60:8d:87:01:6f:c1:9e:97:2e:cd:f3: 73:90:06:cd:d3:8d:43:dc:cb:4e:74:c7:62:17:99:e8:c2:64: 0f:3a:97:db:49:9f:1b:e3:df:21:f2:27:66:46:62:3b:66:99: 55:52:08:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp7hSFsWYSLfd3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDYyYzE1OGUtMmIyNC00YTZmLWE2NjAtZTE5NDEzNmJmMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5kAskOsbiKaCg9HK/14jKqOjV5ulXcbpEZu hkBE9F7LVfHn5FG85dEjGLPasqDwDFyF+lBYLP4b12HLp2Dm5wlHit5TBd1IW9m7 iKgp+D0q3W3Z1t/vlSoBjBM59EPjPo8SKjnTRk6ypm2tq7Mar9HPj9jI5i+c6DEg zxUWAecBhtriPa84w5Y+j/UzHKcQioY8eu/OY8TvDfL5zMhzhE02w2xq9uWjt/5z RIFOveWFnPyLngL5jJPUd4+k7TmYok5YddpKL7gCitJ3KjlwFXJOQgdHd5FheNVG KNX0iMm7AssOq1Bz2Rz96ihS4Mp2O5Vv/P7yPZVUu/C3H7wQQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpUIYSofONI72x3G200n/WguGFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRhMzBkYTQtMjg0Zi0z NTlkLWEwMDAtNzk4YmVlM2VlNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpBKJZcJBKViv6OwRFilZwLs+YJTEX5IGSIQT4ozaR+8Fle55poNIa1 /kAUPbp/2EDH/YYr/YCMwQ2C7v8AXIQHnR3wuFyULLGgmvFy+2YDFqyHS+OIejV5 moyKMnyVfKjcQLTXzpUy/3SpfwI4pm9bKOJkxX1gVtczs8KokoIkK0IXRZtPg62f 5gIKUjesiHHrmx5/+00P52UUb9mSsat9PO+j0L2h8aE8q1iz7Im3yOa1dgz8hsMs AKyYIwrq5pd6i2/HuK5MuXp+UBZgjYcBb8Gely7N83OQBs3TjUPcy050x2IXmejC ZA86l9tJnxvj3yHyJ2ZGYjtmmVVSCAU= -----END CERTIFICATE-----Generated at Tue Oct 21 21:45:12 2025 by rpki-client