$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/493ce429-4caa-3d06-9d10-c32e1f1e4744.roa File: 493ce429-4caa-3d06-9d10-c32e1f1e4744.roa (raw, json) Hash identifier: 3/DH9UIZCD/So59J6i9DAsD42HvSxf9n5TRhBTS1Ius= Subject key identifier: CC:4F:A2:FB:B8:67:45:61:F3:28:EF:B2:34:DE:EA:F2:90:C5:96:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8182F935AD79D04F3AB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/493ce429-4caa-3d06-9d10-c32e1f1e4744.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.232.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:18:2f:93:5a:d7:9d:04:f3:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5bf92e57-a411-4409-b62a-07b5aa17b60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:ec:62:5e:86:51:17:40:d1:0b:ba:e9:9f: 77:4e:85:8e:9f:ea:c3:29:ca:00:5f:7b:cc:ce:b5: d8:ac:ce:61:e4:71:d6:b7:0b:1b:27:2b:f9:ec:06: 38:12:72:f1:78:bb:ac:54:13:b9:0e:e3:5e:d9:9e: 79:ae:7c:33:b7:5a:86:32:de:b1:a0:89:34:77:bc: 4c:77:4b:f2:23:39:06:c7:bf:b4:2c:d8:2f:aa:ef: 8a:da:46:b4:fe:91:4a:3a:06:0f:aa:22:52:58:e0: b3:4e:01:15:cf:14:f6:6c:a5:12:06:d4:d9:76:92: e2:bb:a9:eb:bc:00:37:0d:7b:9f:ea:76:9e:e9:56: 2e:28:dc:cf:18:39:c6:76:b4:7f:df:75:24:6a:6f: 20:6b:77:fe:e9:10:e3:d3:82:e9:8b:cd:d8:0b:48: 81:11:36:c9:85:f0:32:2f:a5:b4:23:ff:1e:e5:95: 17:c8:17:76:e9:9c:65:89:e7:8c:ba:7f:19:49:73: 1e:d8:15:bf:26:63:dd:d7:c5:7b:ab:09:e0:d8:47: 48:0a:eb:3f:f4:20:0b:40:df:45:07:97:3b:95:33: 09:5b:a8:d5:34:f4:da:09:41:f4:8e:5e:be:bb:30: 44:c5:37:6f:36:10:40:aa:27:b8:4f:3c:6f:50:23: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4F:A2:FB:B8:67:45:61:F3:28:EF:B2:34:DE:EA:F2:90:C5:96:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/493ce429-4caa-3d06-9d10-c32e1f1e4744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.232.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:78:dc:54:77:a6:05:a8:17:aa:63:b9:c3:9e:e9:00:cc:57: cc:ce:fc:e7:65:5f:fa:4c:4a:02:9e:b9:96:d1:a6:c1:5f:05: 73:74:a6:4c:85:7f:52:c3:99:40:1c:ef:97:53:a4:18:cf:00: a8:f2:9c:69:44:3a:f2:1e:12:ef:37:37:d1:43:0b:47:cb:f3: 8f:b8:b9:6e:34:5f:ca:ac:a0:68:58:ce:f8:9b:41:b2:a3:14: f0:f7:f5:34:4a:07:63:5f:d0:f6:f5:85:0e:be:5d:90:51:64: e3:4b:20:7f:8e:69:3e:6b:56:46:80:af:c6:37:5d:5f:79:77: a2:c8:64:cb:cd:c1:66:0d:eb:a2:ac:ee:33:48:d2:ab:80:6f: b5:52:68:1d:b2:a7:e9:7e:af:e7:fd:52:48:f5:d6:b3:47:49: 22:74:01:20:6a:df:69:2d:37:64:cb:77:f3:e9:f5:0d:e8:bd: 83:3f:9a:b8:b4:b3:0e:82:37:85:60:db:45:52:ab:a8:31:00: 2a:60:2b:7e:84:9d:94:e7:43:7d:54:94:f1:33:e0:f7:ae:d1: 48:fc:1f:d6:b3:8d:88:5a:0f:d0:4d:7d:14:27:73:89:ef:96: 57:b9:93:a3:ac:3f:9c:f4:80:ff:62:8a:21:70:b8:31:71:b5: dc:f7:be:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqBgvk1rXnQTzqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWJmOTJlNTctYTQxMS00NDA5LWI2MmEtMDdiNWFhMTdiNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQzsYl6GURdA0Qu66Z93ToWOn+rDKcoAX3vM zrXYrM5h5HHWtwsbJyv57AY4EnLxeLusVBO5DuNe2Z55rnwzt1qGMt6xoIk0d7xM d0vyIzkGx7+0LNgvqu+K2ka0/pFKOgYPqiJSWOCzTgEVzxT2bKUSBtTZdpLiu6nr vAA3DXuf6nae6VYuKNzPGDnGdrR/33Ukam8ga3f+6RDj04Lpi83YC0iBETbJhfAy L6W0I/8e5ZUXyBd26ZxlieeMun8ZSXMe2BW/JmPd18V7qwng2EdICus/9CALQN9F B5c7lTMJW6jVNPTaCUH0jl6+uzBExTdvNhBAqie4TzxvUCNHPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxPovu4Z0Vh8yjvsjTe6vKQxZadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDkzY2U0MjktNGNhYS0z ZDA2LTlkMTAtYzMyZTFmMWU0NzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+ioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt43FR3pgWoF6pjucOe6QDMV8zO/OdlX/pMSgKeuZbRpsFfBXN0pkyF f1LDmUAc75dTpBjPAKjynGlEOvIeEu83N9FDC0fL84+4uW40X8qsoGhYzvibQbKj FPD39TRKB2Nf0Pb1hQ6+XZBRZONLIH+OaT5rVkaAr8Y3XV95d6LIZMvNwWYN66Ks 7jNI0quAb7VSaB2yp+l+r+f9Ukj11rNHSSJ0ASBq32ktN2TLd/Pp9Q3ovYM/mri0 sw6CN4Vg20VSq6gxACpgK36EnZTnQ31UlPEz4Peu0Uj8H9azjYhaD9BNfRQnc4nv lle5k6OsP5z0gP9iiiFwuDFxtdz3vsY= -----END CERTIFICATE-----Generated at Wed Oct 22 00:19:33 2025 by rpki-client