$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b27be7c-cd96-3fa6-9d8a-d940aa34cf97.roa File: 3b27be7c-cd96-3fa6-9d8a-d940aa34cf97.roa (raw, json) Hash identifier: kwIy1PkhZsNJ6fpjt+CgsVWHcpvArHG5Q3BTseV8CYk= Subject key identifier: D3:CE:B4:21:8B:9E:BD:81:C1:EB:5B:8C:E7:A2:C3:08:5D:C9:EF:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7BCD803FDFF552A6408E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b27be7c-cd96-3fa6-9d8a-d940aa34cf97.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.59.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:bc:d8:03:fd:ff:55:2a:64:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=69e24eec-cf71-4fb3-854b-9c85ecbc6058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:60:bd:e6:2c:81:c0:86:79:85:7a:ac:29: 58:bf:57:c7:51:df:98:69:3b:1f:58:c5:e7:6a:72: c4:6d:a3:6f:45:0d:62:51:6d:9d:86:c1:1b:7b:cd: 2e:2d:14:04:ad:3f:f4:42:7d:0d:c0:fc:27:30:36: 11:dd:e1:0f:73:81:9b:88:55:0a:54:83:c2:d4:c2: 17:61:c5:73:d0:9e:6b:42:23:7e:bf:63:04:84:29: da:09:91:18:d8:2d:39:a4:a1:2b:ec:e7:c9:45:38: 54:f1:a7:cf:d8:fe:2f:44:df:56:35:a9:99:79:bf: ce:3d:10:6d:31:85:25:8e:50:28:b7:87:ad:78:a0: 8a:50:9e:21:73:7c:86:ef:38:ac:ff:82:6e:43:db: 1a:62:49:93:d6:bd:2d:77:7e:bd:9c:1c:a4:90:8e: c8:7a:c8:a0:6b:10:ac:95:01:06:e4:92:87:4d:72: e5:30:7e:99:a6:ba:2a:55:9f:67:a7:56:bf:82:90: 8e:01:a5:23:e2:86:88:bd:2f:ac:a1:b9:ae:13:8d: 73:97:ce:0d:b0:c8:27:4d:69:5c:02:d3:d7:59:40: 4c:90:cf:fa:2a:4b:06:f4:4c:22:4d:25:d0:62:14: a8:ff:06:e6:51:9b:63:9b:54:99:3d:36:59:2f:ed: 20:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CE:B4:21:8B:9E:BD:81:C1:EB:5B:8C:E7:A2:C3:08:5D:C9:EF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b27be7c-cd96-3fa6-9d8a-d940aa34cf97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.59.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:51:89:c4:e1:9f:ad:5a:1f:3d:8b:ef:4d:a7:9c:6e:87:3a: 63:b2:f9:55:19:1d:0a:e0:23:1f:7b:73:d5:cb:7b:42:88:9f: fe:ae:86:d6:03:93:0e:20:5a:28:4b:57:d1:06:0c:92:93:01: 63:81:d6:fd:72:c3:f1:60:f4:6e:2f:1e:ee:3f:2e:19:b8:7e: 2c:40:9a:91:d2:23:69:9a:eb:61:45:5f:e6:04:f7:48:a8:8c: 21:e7:21:1f:3a:7a:9b:e0:26:a2:79:12:8c:57:00:f5:71:10: f3:0b:be:68:19:c7:9a:d7:61:9d:47:f6:4c:fd:64:52:cf:45: ac:22:11:df:2b:6a:f0:67:52:1a:8a:d2:6e:53:f8:f5:8c:39: a6:82:93:a4:f3:41:28:22:1b:0e:66:1a:1c:b3:f4:fe:d7:b2: 13:36:66:2f:e0:00:2e:6c:fd:b3:f3:6f:cd:60:01:44:46:71: 9e:7e:6a:98:56:05:13:71:c4:f4:dc:f4:7a:51:96:1d:63:66: 0a:89:93:1a:29:1b:79:bd:1f:80:07:6e:75:44:d1:ac:cf:31: 69:b2:79:c7:1c:a5:d2:94:3b:c1:ad:d0:0a:fc:24:a5:e2:24: be:73:ca:21:09:81:64:73:e7:53:1f:88:7d:27:eb:31:9e:16: 5a:b2:7f:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp7zYA/3/VSpkCOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjllMjRlZWMtY2Y3MS00ZmIzLTg1NGItOWM4NWVjYmM2MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6FgveYsgcCGeYV6rClYv1fHUd+YaTsfWMXn anLEbaNvRQ1iUW2dhsEbe80uLRQErT/0Qn0NwPwnMDYR3eEPc4GbiFUKVIPC1MIX YcVz0J5rQiN+v2MEhCnaCZEY2C05pKEr7OfJRThU8afP2P4vRN9WNamZeb/OPRBt MYUljlAot4eteKCKUJ4hc3yG7zis/4JuQ9saYkmT1r0td369nBykkI7IesigaxCs lQEG5JKHTXLlMH6ZproqVZ9np1a/gpCOAaUj4oaIvS+sobmuE41zl84NsMgnTWlc AtPXWUBMkM/6KksG9EwiTSXQYhSo/wbmUZtjm1SZPTZZL+0gOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPOtCGLnr2BwetbjOeiwwhdye/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2IyN2JlN2MtY2Q5Ni0z ZmE2LTlkOGEtZDk0MGFhMzRjZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRzvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhRicThn61aHz2L702nnG6HOmOy+VUZHQrgIx97c9XLe0KIn/6uhtYD kw4gWihLV9EGDJKTAWOB1v1yw/Fg9G4vHu4/Lhm4fixAmpHSI2ma62FFX+YE90io jCHnIR86epvgJqJ5EoxXAPVxEPMLvmgZx5rXYZ1H9kz9ZFLPRawiEd8ravBnUhqK 0m5T+PWMOaaCk6TzQSgiGw5mGhyz9P7XshM2Zi/gAC5s/bPzb81gAURGcZ5+aphW BRNxxPTc9HpRlh1jZgqJkxopG3m9H4AHbnVE0azPMWmyecccpdKUO8Gt0Ar8JKXi JL5zyiEJgWRz51MfiH0n6zGeFlqyfxk= -----END CERTIFICATE-----Generated at Tue Oct 21 19:16:28 2025 by rpki-client