$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3d9f29-697f-39e7-ac69-41365d3c71bc.roa File: 5a3d9f29-697f-39e7-ac69-41365d3c71bc.roa (raw, json) Hash identifier: 1qVkJE5OOqyLrbL6fLotgR9VSyfW1mb4gcDTQ1WYmr4= Subject key identifier: F2:F4:79:73:2A:10:06:04:E9:A7:DE:10:20:B0:FD:2E:A4:4C:C7:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A811D65BCA5211F1AB9700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3d9f29-697f-39e7-ac69-41365d3c71bc.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 66.31.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:11:d6:5b:ca:52:11:f1:ab:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=70ab0cb3-d149-4486-a3b9-34a1c8a0bea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:e1:7f:5f:b1:f8:da:1a:51:c9:c3:ed:45: ed:3b:4b:9d:2c:24:d0:d1:d8:ce:81:d7:12:1b:4b: 0d:30:49:b3:c2:56:60:81:a8:fa:e9:57:56:b3:6f: 7b:35:8a:9f:07:68:c9:84:fe:5d:ff:cd:bc:c7:4b: fa:b0:3a:d5:21:e0:11:aa:6e:c7:60:51:ad:7f:d6: 25:88:8e:75:61:90:b9:86:1a:db:32:b4:69:98:5f: fa:24:6e:59:20:0a:1a:4c:4d:cf:82:fa:9a:26:d5: 17:00:c3:67:5d:5d:69:12:fe:3d:72:8b:a8:0b:7a: 92:42:8a:b6:3f:99:08:66:87:0d:7c:d9:3d:c7:ac: a5:9d:a7:4d:c8:19:af:a9:f1:94:b4:d2:8a:03:08: 3c:eb:7d:a3:bf:0f:2d:0c:b7:ce:4f:23:9d:01:14: 0a:81:b3:cd:35:57:59:e5:10:44:b9:97:72:88:71: 7e:80:dd:41:ee:2d:3e:15:a8:d2:9d:c2:4c:a3:0f: b5:41:eb:a2:d7:b3:8f:37:f5:f8:c8:ff:31:2a:63: 64:ea:af:18:20:e4:23:43:a0:f0:da:38:09:a3:94: c0:a2:c5:3b:87:7c:be:86:df:d5:76:c0:1f:85:25: a6:d6:0a:cb:bc:ff:9d:96:a7:bd:e5:5a:6c:c7:72: 35:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:79:73:2A:10:06:04:E9:A7:DE:10:20:B0:FD:2E:A4:4C:C7:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3d9f29-697f-39e7-ac69-41365d3c71bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.31.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1f:cd:e2:e0:9f:20:a4:e6:16:29:23:3d:6b:b2:b1:55:9e: 54:c9:64:4e:38:e1:7d:c4:bc:38:17:b2:ee:87:97:e3:09:ca: 75:ef:d9:e8:d8:e6:c5:66:69:e6:90:5b:68:39:60:34:64:b5: 9d:60:5c:0e:58:eb:7a:f7:c3:34:89:5f:eb:e8:51:27:9d:20: 84:d1:2f:7d:95:cf:2b:2f:fd:ae:72:50:02:47:e8:46:41:44: 30:30:88:37:59:0e:49:af:ef:74:70:c3:41:57:9c:45:32:87: 90:8d:98:82:be:b3:40:71:f0:4f:d3:b8:aa:bc:e7:5b:4c:6b: f8:74:7f:5a:83:f7:5b:70:6a:ff:29:db:bb:b0:71:cf:d1:35: 4c:70:ee:89:17:4f:c3:b7:91:e2:14:1d:c9:d9:6e:2b:18:8e: 1f:32:6d:b7:9a:c3:13:d0:af:85:19:7a:ec:2c:a7:d6:09:06: ca:76:56:3a:0a:e8:47:93:71:d1:1d:24:64:69:f7:78:1a:62: 8f:f0:62:8f:6e:83:cb:6f:a2:1c:e6:f4:6e:6d:bd:a9:fc:0d: f2:07:e5:03:c9:7c:2d:37:d7:03:4f:7a:9c:cd:98:6b:30:cb: 0b:46:31:29:52:18:ff:10:78:e1:23:6f:44:2f:32:ba:b4:4c: c2:d3:78:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqBHWW8pSEfGrlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzBhYjBjYjMtZDE0OS00NDg2LWEzYjktMzRhMWM4YTBiZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYvhf1+x+NoaUcnD7UXtO0udLCTQ0djOgdcS G0sNMEmzwlZggaj66VdWs297NYqfB2jJhP5d/828x0v6sDrVIeARqm7HYFGtf9Yl iI51YZC5hhrbMrRpmF/6JG5ZIAoaTE3PgvqaJtUXAMNnXV1pEv49couoC3qSQoq2 P5kIZocNfNk9x6ylnadNyBmvqfGUtNKKAwg8632jvw8tDLfOTyOdARQKgbPNNVdZ 5RBEuZdyiHF+gN1B7i0+FajSncJMow+1Qeui17OPN/X4yP8xKmNk6q8YIOQjQ6Dw 2jgJo5TAosU7h3y+ht/VdsAfhSWm1grLvP+dlqe95Vpsx3I1VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL0eXMqEAYE6afeECCw/S6kTMfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWEzZDlmMjktNjk3Zi0z OWU3LWFjNjktNDEzNjVkM2M3MWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQh+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACofzeLgnyCk5hYpIz1rsrFVnlTJZE444X3EvDgXsu6Hl+MJynXv2ejY 5sVmaeaQW2g5YDRktZ1gXA5Y63r3wzSJX+voUSedIITRL32Vzysv/a5yUAJH6EZB RDAwiDdZDkmv73Rww0FXnEUyh5CNmIK+s0Bx8E/TuKq851tMa/h0f1qD91twav8p 27uwcc/RNUxw7okXT8O3keIUHcnZbisYjh8ybbeawxPQr4UZeuwsp9YJBsp2VjoK 6EeTcdEdJGRp93gaYo/wYo9ug8tvohzm9G5tvan8DfIH5QPJfC031wNPepzNmGsw ywtGMSlSGP8QeOEjb0QvMrq0TMLTeIU= -----END CERTIFICATE-----Generated at Tue Oct 21 19:21:33 2025 by rpki-client