$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40897a1a-3840-31cc-895d-e9322c980bdd.roa File: 40897a1a-3840-31cc-895d-e9322c980bdd.roa (raw, json) Hash identifier: axfyoWFkUknc4cOfGn3dDxuH/DTLmcaPqE3Xppcb9lQ= Subject key identifier: 40:58:03:3A:62:1D:36:56:D9:99:00:88:DD:F5:C2:FB:95:02:2B:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A81DE9F821EA8105CC1A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40897a1a-3840-31cc-895d-e9322c980bdd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.235.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:1d:e9:f8:21:ea:81:05:cc:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e018ba8e-9ddc-4011-8ac1-3de6881cd608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3e:e9:56:6a:d5:03:d0:48:eb:fe:9e:7f:67: bd:09:4c:50:1a:1d:b4:e3:8d:83:29:4d:bc:f0:fa: 62:41:d4:ea:67:1e:b1:cf:ca:53:e5:e7:97:ca:9c: c0:e0:18:78:f0:ff:62:be:30:3a:6c:8d:de:3b:59: b0:45:2b:a2:94:ad:bd:d7:c4:63:c3:e4:bc:94:9c: 12:90:35:e4:fa:6e:ed:72:86:02:ad:b5:cb:51:12: 32:9a:dd:f2:6f:61:08:e1:10:44:d2:32:28:d1:5d: b3:1b:48:66:09:56:9b:ba:28:7f:ab:d6:fb:dd:fa: ed:00:b5:3f:f7:8c:d3:55:77:4b:7c:22:46:dd:0d: 3a:ef:4a:5e:25:76:00:49:a1:0b:a0:74:cf:af:a3: 4d:15:0d:5f:b7:83:a6:0a:3e:93:6e:1f:9d:f4:1c: 05:7e:3a:ac:5f:1e:03:d9:11:e9:90:1a:1e:0d:f4: 10:a8:e5:7b:d3:9c:f1:ca:57:47:b9:83:c0:ed:50: 5c:7d:81:44:73:2e:89:ff:7b:c6:83:85:74:91:1e: 7d:8a:f6:e2:06:a6:95:b6:e1:67:d7:91:f7:61:26: 54:79:09:9a:ce:26:01:e3:ec:d0:ca:94:b2:d0:78: 5d:4f:db:dd:87:46:67:9c:51:94:10:63:49:29:17: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:58:03:3A:62:1D:36:56:D9:99:00:88:DD:F5:C2:FB:95:02:2B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40897a1a-3840-31cc-895d-e9322c980bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.235.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:d9:5a:30:e0:ec:a7:40:30:70:81:83:c9:41:ab:ed:19:84: 8d:74:57:b9:ce:5e:f3:9f:92:97:24:31:e2:81:4c:2b:6e:fe: d6:89:8f:a9:bc:be:90:23:4b:9d:3d:6d:b8:67:01:cf:2f:d2: 50:5b:92:d0:09:cc:a6:b8:97:9d:09:09:19:00:41:79:2a:38: 91:2a:9a:ec:34:eb:3a:05:17:fe:d5:24:2a:d2:b7:4f:9f:92: 95:67:b3:77:f0:bf:ce:56:24:55:2b:9f:54:fc:3f:11:36:c2: 2a:8d:89:45:f9:85:2a:06:0b:6d:a2:13:9b:eb:86:9e:f6:19: 07:f8:9a:37:8b:6f:e9:33:2c:31:37:8e:9b:7d:4b:3e:ab:09: b9:87:b7:c7:ee:19:88:07:ef:31:0c:e0:78:e9:e4:6b:6d:d6: 82:1f:7e:0d:21:23:29:55:6f:e1:91:cb:2c:b6:b0:a0:40:ca: 4a:0c:0f:ec:ea:11:ce:6b:e2:84:43:fb:82:1d:5a:0c:1a:28: af:ab:ea:d7:df:e6:42:e5:55:43:12:67:a3:c0:55:e9:f1:8a: c4:0c:05:50:a9:46:b9:5f:c7:db:60:61:69:ff:94:d5:65:40: 15:5f:7f:ff:d5:e7:e0:f8:fa:df:c1:d1:6a:42:ee:1a:27:cc: c0:35:5c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqB3p+CHqgQXMGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTAxOGJhOGUtOWRkYy00MDExLThhYzEtM2RlNjg4MWNkNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT7pVmrVA9BI6/6ef2e9CUxQGh20442DKU28 8PpiQdTqZx6xz8pT5eeXypzA4Bh48P9ivjA6bI3eO1mwRSuilK2918Rjw+S8lJwS kDXk+m7tcoYCrbXLURIymt3yb2EI4RBE0jIo0V2zG0hmCVabuih/q9b73frtALU/ 94zTVXdLfCJG3Q0670peJXYASaELoHTPr6NNFQ1ft4OmCj6Tbh+d9BwFfjqsXx4D 2RHpkBoeDfQQqOV705zxyldHuYPA7VBcfYFEcy6J/3vGg4V0kR59ivbiBqaVtuFn 15H3YSZUeQmaziYB4+zQypSy0HhdT9vdh0ZnnFGUEGNJKRdoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBYAzpiHTZW2ZkAiN31wvuVAivPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA4OTdhMWEtMzg0MC0z MWNjLTg5NWQtZTkzMjJjOTgwYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+s8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTZWjDg7KdAMHCBg8lBq+0ZhI10V7nOXvOfkpckMeKBTCtu/taJj6m8 vpAjS509bbhnAc8v0lBbktAJzKa4l50JCRkAQXkqOJEqmuw06zoFF/7VJCrSt0+f kpVns3fwv85WJFUrn1T8PxE2wiqNiUX5hSoGC22iE5vrhp72GQf4mjeLb+kzLDE3 jpt9Sz6rCbmHt8fuGYgH7zEM4Hjp5Gtt1oIffg0hIylVb+GRyyy2sKBAykoMD+zq Ec5r4oRD+4IdWgwaKK+r6tff5kLlVUMSZ6PAVenxisQMBVCpRrlfx9tgYWn/lNVl QBVff//V5+D4+t/B0WpC7honzMA1XNc= -----END CERTIFICATE-----Generated at Tue Oct 21 19:48:44 2025 by rpki-client