$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c9c036a-723a-34c6-9bf2-98a59bcb5a66.roa File: 4c9c036a-723a-34c6-9bf2-98a59bcb5a66.roa (raw, json) Hash identifier: MjCKlcwqFqIkrEB/0PxpLw0WoFl9Yb4NNEcS8FWmb8Y= Subject key identifier: 6D:6C:E9:BE:24:33:0D:7D:5C:2D:E1:29:DB:E1:77:86:7B:E5:F7:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9BC6C130DD0E37A3EB780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c9c036a-723a-34c6-9bf2-98a59bcb5a66.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.233.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:bc:6c:13:0d:d0:e3:7a:3e:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2246e79a-8db4-4786-beeb-d5126aef8c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:1a:1a:49:0c:d9:94:da:ab:a3:ad:d9:eb: b0:05:90:94:a5:9c:3d:85:42:77:17:f7:c0:e8:56: 6d:95:f6:76:45:81:b0:b6:e5:6b:b8:3f:d3:d9:8f: 7e:16:0f:3b:bb:80:2f:78:25:a7:b8:83:58:c2:80: 82:42:09:26:5d:78:9a:61:7d:41:d0:64:4d:0f:50: 36:93:fe:9f:cd:6e:7b:19:7a:eb:f5:c3:bd:3c:27: ad:11:20:ee:a8:8e:1f:f8:77:c8:9f:50:51:a8:8f: c5:d2:e8:82:09:ba:36:de:cc:66:56:7e:65:e2:e4: 75:ba:b2:b7:04:80:a5:6c:23:5f:5b:aa:50:73:17: dc:4a:2f:0f:b1:c7:a8:de:95:97:85:fe:2a:64:fe: a5:e5:2c:b5:ec:89:ed:98:98:60:03:c4:78:e9:48: 36:87:88:e1:3b:81:2b:d1:bd:71:96:12:b8:7a:55: 02:32:25:3b:2e:0a:94:ea:bf:bd:27:9a:bc:14:35: 91:f1:90:29:cf:36:98:b3:93:f3:58:33:31:6a:4a: 38:d7:43:3f:2c:4f:75:72:84:7f:3f:72:1b:08:99: 4f:bc:22:c5:6c:85:c0:0b:7f:14:27:4f:06:ba:1b: 84:33:02:71:21:da:29:7d:bf:00:54:eb:26:8e:95: 1b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6C:E9:BE:24:33:0D:7D:5C:2D:E1:29:DB:E1:77:86:7B:E5:F7:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c9c036a-723a-34c6-9bf2-98a59bcb5a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.233.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:3c:63:e0:7a:d3:bb:8e:e1:0c:d5:dc:76:8a:ce:f8:6e:27: dd:08:f0:6b:ea:b3:47:56:08:b0:30:cf:00:07:4c:cc:ce:76: 1d:49:69:fe:04:67:13:d3:ee:19:db:20:4b:e5:be:6c:9b:10: 9d:29:c8:f8:7b:48:7e:62:47:5b:0d:6d:07:20:80:32:42:7f: 4a:8c:01:85:75:3f:21:f1:4b:02:d8:e3:e9:27:2f:96:8d:a4: 71:3c:e9:4a:34:95:05:b8:47:4a:e3:62:c7:85:a6:92:52:44: 87:61:0e:29:47:2c:de:81:20:ee:40:36:c0:c3:80:11:32:35: ab:8f:03:cc:db:72:69:0b:7f:69:a6:f9:da:e5:6d:b0:57:4d: 11:7b:7f:0f:05:c6:ad:88:a8:0c:19:c8:64:96:5a:26:f9:2a: e8:0d:c9:0b:5e:56:a5:93:b1:27:cf:bf:7e:e7:ab:cf:f1:df: d0:d2:44:e0:fd:d1:28:ea:b7:d6:96:b2:5f:b1:e8:50:05:7b: 1c:ed:73:5d:68:1b:7a:15:76:65:71:ed:7e:c6:59:4f:00:37: 79:07:54:b9:60:e3:e9:5a:1c:d2:e9:9b:97:bb:fc:07:e0:6c: 3e:06:69:2c:0f:86:65:21:e8:64:f3:70:b5:e8:67:11:6b:58: 25:c2:20:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqbxsEw3Q43o+t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjI0NmU3OWEtOGRiNC00Nzg2LWJlZWItZDUxMjZhZWY4YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXsaGkkM2ZTaq6Ot2euwBZCUpZw9hUJ3F/fA 6FZtlfZ2RYGwtuVruD/T2Y9+Fg87u4AveCWnuINYwoCCQgkmXXiaYX1B0GRND1A2 k/6fzW57GXrr9cO9PCetESDuqI4f+HfIn1BRqI/F0uiCCbo23sxmVn5l4uR1urK3 BIClbCNfW6pQcxfcSi8Psceo3pWXhf4qZP6l5Sy17IntmJhgA8R46Ug2h4jhO4Er 0b1xlhK4elUCMiU7LgqU6r+9J5q8FDWR8ZApzzaYs5PzWDMxako410M/LE91coR/ P3IbCJlPvCLFbIXAC38UJ08GuhuEMwJxIdopfb8AVOsmjpUb0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1s6b4kMw19XC3hKdvhd4Z75fdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM5YzAzNmEtNzIzYS0z NGM2LTliZjItOThhNTliY2I1YTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+kSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAME8Y+B607uO4QzV3HaKzvhuJ90I8Gvqs0dWCLAwzwAHTMzOdh1Jaf4E ZxPT7hnbIEvlvmybEJ0pyPh7SH5iR1sNbQcggDJCf0qMAYV1PyHxSwLY4+knL5aN pHE86Uo0lQW4R0rjYseFppJSRIdhDilHLN6BIO5ANsDDgBEyNauPA8zbcmkLf2mm +drlbbBXTRF7fw8Fxq2IqAwZyGSWWib5KugNyQteVqWTsSfPv37nq8/x39DSROD9 0Sjqt9aWsl+x6FAFexztc11oG3oVdmVx7X7GWU8AN3kHVLlg4+laHNLpm5e7/Afg bD4GaSwPhmUh6GTzcLXoZxFrWCXCIDQ= -----END CERTIFICATE-----Generated at Wed Oct 22 02:48:49 2025 by rpki-client