$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d98a53a-0f78-3892-b98a-95d5e5120511.roa File: 2d98a53a-0f78-3892-b98a-95d5e5120511.roa (raw, json) Hash identifier: hzeqgqApWLZQxSjfKZxw6HS9npqC81poWFo2WMFh/4Y= Subject key identifier: 43:CC:28:77:2D:64:87:0B:12:24:E0:4B:ED:4E:D4:DD:6B:BD:6B:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A81D779134D045171D9C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d98a53a-0f78-3892-b98a-95d5e5120511.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.235.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:1d:77:91:34:d0:45:17:1d:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=dd260e71-1f99-4a2d-89d5-ad4d6538e73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:86:4c:08:82:08:d0:c5:4b:92:fb:2b:5e:61: 38:40:bb:e8:f9:85:51:2c:40:5c:9d:a1:61:0b:c5: 95:84:d7:cb:89:30:cc:8d:a6:59:07:6c:d2:f9:23: 4d:68:6d:db:a2:59:5e:de:0a:7e:e8:93:e1:50:bb: 7d:8e:5b:0a:8a:d1:50:1d:b1:c9:db:f9:13:f1:5c: 85:d2:65:4a:51:04:d7:3c:91:c8:eb:4d:96:72:54: 6f:ff:b9:b9:4f:27:88:e3:ab:e0:a8:15:84:1e:99: 47:84:cd:16:ee:24:4e:23:b8:fd:62:e4:62:27:9a: 50:6b:49:74:86:d2:dd:02:c7:43:79:1b:05:6e:53: 26:48:d0:98:01:c5:25:89:ff:64:2a:51:c4:de:44: e1:12:bb:1f:e1:23:0a:f6:2d:ad:0b:dd:1d:02:f0: 61:14:24:72:c0:5c:d5:7d:0b:5b:fc:6c:12:a3:06: 05:0c:82:43:66:f8:e0:45:e4:40:b4:4d:38:64:52: 23:49:73:70:73:e3:d3:3a:4d:15:e4:90:c6:09:2a: c2:37:21:43:12:fc:df:8e:81:80:23:56:90:4b:25: 60:01:81:33:34:db:75:1b:d6:ff:45:17:67:f2:ac: 10:5d:c9:22:56:1f:d4:40:df:1d:ac:c4:33:74:3a: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:28:77:2D:64:87:0B:12:24:E0:4B:ED:4E:D4:DD:6B:BD:6B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d98a53a-0f78-3892-b98a-95d5e5120511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.235.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:67:df:0c:84:9e:13:cb:b4:ea:41:ec:91:48:11:0d:3e:94: 7b:b6:f5:34:27:42:7f:f4:a3:a0:85:01:7b:e1:59:b5:43:8d: 3d:cc:4e:84:1b:34:2c:fb:00:8f:17:11:69:32:39:40:00:34: fd:ea:a8:c5:f5:d2:10:e1:d5:1e:d5:d3:31:a5:46:cf:08:36: 0f:40:d6:00:0e:67:ad:f0:0f:ed:8a:06:bd:8b:b0:41:c4:6f: 9b:75:36:08:99:ec:42:a2:ac:2b:b4:c1:3e:8a:59:ba:d8:1a: b7:61:d5:2e:fe:17:63:21:b2:3e:45:15:43:3b:9c:09:26:b5: 3b:b9:93:57:0d:64:6f:a9:99:70:28:2b:54:a9:af:48:cd:f3: 56:42:df:88:9c:db:70:63:83:37:9b:ff:8b:cc:5f:b6:07:89: 44:c0:3f:ab:3b:4c:bf:b1:46:34:8c:c2:75:4c:02:7c:ff:de: a7:62:c4:1d:9f:61:6f:8b:d6:bc:7b:08:05:cc:24:89:12:99: ed:74:47:0f:fc:26:d1:a6:bf:6b:5e:fb:d1:84:b8:0b:24:f9: 48:a0:f2:e2:56:47:2f:3a:5d:c0:08:34:9d:e5:73:99:cb:54: 12:2a:f1:55:c7:d5:b6:ba:eb:3d:61:10:4e:88:77:24:97:1b: f6:46:24:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqB13kTTQRRcdnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGQyNjBlNzEtMWY5OS00YTJkLTg5ZDUtYWQ0ZDY1MzhlNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IZMCIII0MVLkvsrXmE4QLvo+YVRLEBcnaFh C8WVhNfLiTDMjaZZB2zS+SNNaG3bolle3gp+6JPhULt9jlsKitFQHbHJ2/kT8VyF 0mVKUQTXPJHI602WclRv/7m5TyeI46vgqBWEHplHhM0W7iROI7j9YuRiJ5pQa0l0 htLdAsdDeRsFblMmSNCYAcUlif9kKlHE3kThErsf4SMK9i2tC90dAvBhFCRywFzV fQtb/GwSowYFDIJDZvjgReRAtE04ZFIjSXNwc+PTOk0V5JDGCSrCNyFDEvzfjoGA I1aQSyVgAYEzNNt1G9b/RRdn8qwQXckiVh/UQN8drMQzdDoAzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPMKHctZIcLEiTgS+1O1N1rvWuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ5OGE1M2EtMGY3OC0z ODkyLWI5OGEtOTVkNWU1MTIwNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhn3wyEnhPLtOpB7JFIEQ0+lHu29TQnQn/0o6CFAXvhWbVDjT3MToQb NCz7AI8XEWkyOUAANP3qqMX10hDh1R7V0zGlRs8INg9A1gAOZ63wD+2KBr2LsEHE b5t1NgiZ7EKirCu0wT6KWbrYGrdh1S7+F2Mhsj5FFUM7nAkmtTu5k1cNZG+pmXAo K1Spr0jN81ZC34ic23Bjgzeb/4vMX7YHiUTAP6s7TL+xRjSMwnVMAnz/3qdixB2f YW+L1rx7CAXMJIkSme10Rw/8JtGmv2te+9GEuAsk+Uig8uJWRy86XcAINJ3lc5nL VBIq8VXH1ba66z1hEE6IdySXG/ZGJHM= -----END CERTIFICATE-----Generated at Tue Oct 21 19:36:25 2025 by rpki-client