$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f7e942e-6799-3d1c-b1c8-ed768eae217c.roa File: 5f7e942e-6799-3d1c-b1c8-ed768eae217c.roa (raw, json) Hash identifier: 571sPuEU4qZ5KbAfrPUCVw7DvZTgRWlxMeagvEiD+ho= Subject key identifier: E1:78:A4:C1:12:71:AE:82:F2:43:17:4C:1C:29:AD:E0:EE:55:41:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7B4F5CCBB08F79E05E480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f7e942e-6799-3d1c-b1c8-ed768eae217c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.193.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:b4:f5:cc:bb:08:f7:9e:05:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2176cb7a-7794-49da-a4cb-71daa29f576f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:29:82:6f:7e:3b:d0:b5:47:47:e5:31:5a:ec: ba:25:90:f1:95:66:54:f5:00:f1:27:64:63:81:cb: f0:83:17:26:29:60:65:05:08:87:1d:0e:40:43:73: 54:dd:05:9e:d7:c1:81:de:ff:f8:02:32:cf:d0:bc: f6:37:18:c0:f5:ae:5c:23:6a:04:e9:d4:82:ec:77: aa:24:5d:4b:52:01:9a:af:24:16:82:c4:77:d0:f8: ac:ab:cb:e7:56:1b:f3:8d:9f:19:24:f3:86:23:b8: 44:86:75:ca:05:94:47:8c:6b:59:b7:59:70:f7:78: 74:3b:9b:18:21:92:48:db:c2:fe:ba:15:c2:2a:8c: 74:38:26:39:6e:61:10:4a:30:62:fc:47:39:bf:42: fe:f6:9d:4f:d4:af:ba:33:1c:c9:a6:ed:51:af:5c: 36:58:e7:f3:c2:bd:c2:4a:e2:0b:e7:9b:2c:79:d6: 7d:0a:df:73:36:00:72:e3:e3:22:8c:21:d3:6a:f9: 11:ad:7a:bd:ba:c6:0d:d5:6e:40:70:0b:b9:0f:ee: 00:86:bb:17:98:a1:d8:3e:9b:e6:70:fe:04:b9:bb: 1f:82:d3:46:c1:5b:42:6e:59:b5:ba:55:4b:dc:59: d0:2f:55:0e:5e:4f:74:1c:3e:b1:0a:3b:5a:15:8b: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:78:A4:C1:12:71:AE:82:F2:43:17:4C:1C:29:AD:E0:EE:55:41:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f7e942e-6799-3d1c-b1c8-ed768eae217c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:fd:e0:8a:e6:a8:24:7d:fc:e8:67:cc:83:bc:48:3d:41:1e: 59:f9:90:92:14:79:50:47:20:b0:c3:ca:13:a8:d5:61:5c:dc: 7e:06:f1:1e:5c:1d:c6:ea:e9:0f:ce:24:e1:7b:b9:5c:37:cb: 6b:f8:39:11:2b:66:22:69:f5:c6:49:2c:c1:4b:7c:56:f9:26: bf:6d:06:d8:78:d1:5a:9a:12:6a:db:a6:ba:54:b8:51:b2:c0: 83:f9:14:52:53:68:da:0a:9c:79:4d:ce:37:60:c5:22:f9:e1: 91:8d:a9:42:80:1b:28:ae:ba:84:e8:5f:8b:4c:fb:df:01:80: da:b4:8c:08:0c:d9:f4:01:25:7e:2f:a7:fd:66:78:2a:b3:75: 06:38:6b:b3:ed:25:2d:94:7a:6f:06:e0:ef:d0:da:74:8c:28: 99:d3:5e:b1:fa:f6:1c:21:1b:07:23:83:88:d0:03:6b:83:07: 4d:16:12:30:46:ad:1f:b1:0f:96:ba:36:3d:cc:e1:c3:07:58: 1c:6e:c5:98:55:30:73:cb:88:63:d1:ef:29:c5:e4:99:38:84: 37:64:e6:c3:c6:33:ed:60:4e:97:36:19:78:90:20:bd:35:5f: 61:20:f8:0c:38:fd:8f:50:de:2a:c9:76:9e:4c:51:b7:25:4f: 95:6c:15:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp7T1zLsI954F5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjE3NmNiN2EtNzc5NC00OWRhLWE0Y2ItNzFkYWEyOWY1NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuymCb3470LVHR+UxWuy6JZDxlWZU9QDxJ2Rj gcvwgxcmKWBlBQiHHQ5AQ3NU3QWe18GB3v/4AjLP0Lz2NxjA9a5cI2oE6dSC7Heq JF1LUgGaryQWgsR30Pisq8vnVhvzjZ8ZJPOGI7hEhnXKBZRHjGtZt1lw93h0O5sY IZJI28L+uhXCKox0OCY5bmEQSjBi/Ec5v0L+9p1P1K+6MxzJpu1Rr1w2WOfzwr3C SuIL55ssedZ9Ct9zNgBy4+MijCHTavkRrXq9usYN1W5AcAu5D+4AhrsXmKHYPpvm cP4EubsfgtNGwVtCblm1ulVL3FnQL1UOXk90HD6xCjtaFYu0hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF4pMESca6C8kMXTBwpreDuVUE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWY3ZTk0MmUtNjc5OS0z ZDFjLWIxYzgtZWQ3NjhlYWUyMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8HSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD94IrmqCR9/OhnzIO8SD1BHln5kJIUeVBHILDDyhOo1WFc3H4G8R5c Hcbq6Q/OJOF7uVw3y2v4ORErZiJp9cZJLMFLfFb5Jr9tBth40VqaEmrbprpUuFGy wIP5FFJTaNoKnHlNzjdgxSL54ZGNqUKAGyiuuoToX4tM+98BgNq0jAgM2fQBJX4v p/1meCqzdQY4a7PtJS2Uem8G4O/Q2nSMKJnTXrH69hwhGwcjg4jQA2uDB00WEjBG rR+xD5a6Nj3M4cMHWBxuxZhVMHPLiGPR7ynF5Jk4hDdk5sPGM+1gTpc2GXiQIL01 X2Eg+Aw4/Y9Q3irJdp5MUbclT5VsFY8= -----END CERTIFICATE-----Generated at Wed Oct 22 00:21:05 2025 by rpki-client