$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f4a9ae-e0c0-3b68-88d2-2a9487cc54a4.roa File: 35f4a9ae-e0c0-3b68-88d2-2a9487cc54a4.roa (raw, json) Hash identifier: vADTysOI/QAijr6bt58hHyceZgv97aSq3MVW/ub+QCg= Subject key identifier: D8:07:21:1F:ED:44:4C:67:6C:8A:9A:E3:BB:5C:9C:1F:84:2F:A6:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9BACE6C58E47D4D82E390 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f4a9ae-e0c0-3b68-88d2-2a9487cc54a4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.232.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:ba:ce:6c:58:e4:7d:4d:82:e3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bd9ccca7-a3b3-46a2-ab84-7c12c0877376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:73:97:fc:98:24:f7:0d:2e:3f:59:d4:7f:7d: b4:c6:5e:48:a2:64:d8:e6:e6:4b:17:2b:1e:86:c7: a9:05:97:f8:16:e5:a5:aa:09:b2:ae:f3:9e:13:a9: d7:7b:a5:09:d9:f9:bb:0d:56:40:bc:b1:12:c9:23: 61:ee:14:99:4c:2f:b0:34:4a:41:71:29:0e:cb:84: 3a:4d:38:cc:03:c1:69:41:30:08:c8:ee:d0:f5:9a: bc:cb:a5:e7:8a:5b:ea:7d:38:9e:b5:69:47:57:a4: 40:b3:bb:2a:3a:b5:0d:88:1b:75:c7:6a:d8:b7:5f: 30:e1:43:4a:96:d7:08:47:d8:93:92:11:11:1e:7c: 58:b7:63:c0:71:fa:b1:e9:5a:18:0c:e1:8e:a1:f7: 88:2e:89:82:92:48:78:ba:c4:ee:61:bd:d6:9e:e3: 1a:e8:2b:c3:7b:29:3a:8d:3d:9c:ec:ec:17:42:ad: 00:dd:84:c9:05:dc:99:ab:82:06:bc:d7:09:ec:81: e2:9e:f9:aa:29:71:fe:1d:6a:d4:b5:73:41:31:d6: 8a:bf:ff:56:79:ba:49:16:8e:f6:85:75:22:b6:bc: c1:16:b0:82:bc:1f:34:6b:c9:d5:f2:d9:a4:14:74: 63:96:ff:8b:2f:7d:be:08:23:0b:95:0b:4a:21:7c: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:07:21:1F:ED:44:4C:67:6C:8A:9A:E3:BB:5C:9C:1F:84:2F:A6:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f4a9ae-e0c0-3b68-88d2-2a9487cc54a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.232.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a1:ee:82:d1:87:14:67:0e:bb:ff:ae:bf:60:d8:c2:f6:6f: eb:b3:44:7a:55:c3:8b:a9:39:fb:f2:36:79:28:9f:ec:58:43: ad:36:bd:a8:2b:b8:29:7c:d4:2d:5a:16:40:fe:41:68:13:1f: b6:ca:7a:d9:55:14:c0:2f:f9:db:8f:19:44:13:9a:cc:23:ad: 8c:b1:5f:c0:10:aa:6c:e6:36:8c:94:95:8e:9c:94:53:6a:70: 3e:1e:56:30:6a:54:1e:0b:2b:52:d9:36:09:6f:fb:f7:96:e7: f1:39:fb:1f:53:84:5f:b4:96:2b:e6:1d:62:c8:1b:32:b2:a9: ef:a6:0a:23:bc:f4:04:72:b2:db:31:12:ed:80:27:6f:d4:80: b1:39:28:c4:82:25:ff:6c:42:70:91:5b:dd:23:29:10:1e:ed: c8:fb:3b:3f:f7:9f:0d:d4:5b:57:c4:a7:b4:58:49:9b:58:a2: 39:19:cb:26:be:61:dc:0f:82:14:14:31:d0:c3:a1:32:ed:eb: 7b:da:71:e1:47:38:04:6a:b6:07:00:85:46:ca:c9:7b:58:07: 67:5a:de:c6:ca:08:05:85:05:0f:22:b7:f0:36:f9:9e:1e:4e: fc:43:53:29:8e:f8:10:7f:a2:b9:b2:73:50:2f:19:bd:8f:be: d9:b0:9c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqbrObFjkfU2C45AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmQ5Y2NjYTctYTNiMy00NmEyLWFiODQtN2MxMmMwODc3Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHOX/Jgk9w0uP1nUf320xl5IomTY5uZLFyse hsepBZf4FuWlqgmyrvOeE6nXe6UJ2fm7DVZAvLESySNh7hSZTC+wNEpBcSkOy4Q6 TTjMA8FpQTAIyO7Q9Zq8y6XnilvqfTietWlHV6RAs7sqOrUNiBt1x2rYt18w4UNK ltcIR9iTkhERHnxYt2PAcfqx6VoYDOGOofeILomCkkh4usTuYb3WnuMa6CvDeyk6 jT2c7OwXQq0A3YTJBdyZq4IGvNcJ7IHinvmqKXH+HWrUtXNBMdaKv/9WebpJFo72 hXUitrzBFrCCvB80a8nV8tmkFHRjlv+LL32+CCMLlQtKIXzcowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgHIR/tRExnbIqa47tcnB+EL6adMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVmNGE5YWUtZTBjMC0z YjY4LTg4ZDItMmE5NDg3Y2M1NGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+jiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuh7oLRhxRnDrv/rr9g2ML2b+uzRHpVw4upOfvyNnkon+xYQ602vagr uCl81C1aFkD+QWgTH7bKetlVFMAv+duPGUQTmswjrYyxX8AQqmzmNoyUlY6clFNq cD4eVjBqVB4LK1LZNglv+/eW5/E5+x9ThF+0livmHWLIGzKyqe+mCiO89ARystsx Eu2AJ2/UgLE5KMSCJf9sQnCRW90jKRAe7cj7Oz/3nw3UW1fEp7RYSZtYojkZyya+ YdwPghQUMdDDoTLt63vaceFHOARqtgcAhUbKyXtYB2da3sbKCAWFBQ8it/A2+Z4e TvxDUymO+BB/ormyc1AvGb2PvtmwnFE= -----END CERTIFICATE-----Generated at Tue Oct 21 19:34:05 2025 by rpki-client