$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e0bfa1-2f92-3a69-90cc-d928ec10f00e.roa File: 68e0bfa1-2f92-3a69-90cc-d928ec10f00e.roa (raw, json) Hash identifier: OACSu/Rkq4HZ3+XMwhT0OVSEVITGmYJfR7NvyrI57s4= Subject key identifier: 7B:31:29:CC:34:7E:84:FB:30:E0:26:01:73:0C:23:CB:BC:11:EB:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9BA7477432983A29D1480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e0bfa1-2f92-3a69-90cc-d928ec10f00e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.232.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:ba:74:77:43:29:83:a2:9d:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=82acbf0b-9e34-4ffa-bb2f-b61bde9ab8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:02:df:c3:40:a6:ed:46:86:41:b3:10:87: a1:3f:1b:bf:d6:e6:4a:e0:75:f4:3e:79:ec:20:1e: 00:93:0a:00:6a:b9:b2:8f:1d:2e:59:67:80:b2:56: 3e:be:0b:b6:03:dd:ee:d8:a8:4c:dd:22:21:19:6d: 5e:5a:52:74:d9:58:e5:89:d5:0d:5f:22:75:55:eb: e9:15:b9:75:88:4f:5c:a3:72:e4:6c:e2:b6:be:ca: 3e:f8:b4:9b:cc:52:37:6a:2b:b2:68:8f:c6:53:cb: cc:b8:a0:b9:a6:e3:7e:2e:6c:06:90:5f:6a:9d:98: b5:26:ec:a0:87:48:65:50:21:5d:4d:f9:29:20:a0: 16:53:3c:77:f2:06:02:11:b0:54:5a:14:68:36:82: ee:32:fa:93:37:ef:87:7d:79:c7:a2:a8:74:33:66: 9c:f7:52:5b:67:9a:e1:2b:70:f8:50:fa:e3:3b:a9: ea:31:39:4b:1e:6c:d4:6d:f8:bd:af:85:f8:74:84: b3:9f:37:0e:bd:d6:7e:87:ae:e6:cf:58:b6:10:11: 60:03:85:d1:16:df:73:76:c5:55:76:39:ae:eb:4f: 04:20:55:88:d8:79:08:14:da:b6:37:29:fb:cd:b3: ee:dc:de:db:a5:ce:78:40:7b:4b:c7:2a:1c:e0:ac: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:31:29:CC:34:7E:84:FB:30:E0:26:01:73:0C:23:CB:BC:11:EB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e0bfa1-2f92-3a69-90cc-d928ec10f00e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.232.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:20:cd:3b:85:c6:89:63:f7:42:2c:b7:19:30:d6:5c:b6:34: 8f:df:84:d4:8b:ef:9c:c3:ea:94:36:0e:7c:1a:cb:8c:59:b5: cb:75:89:87:84:67:00:6d:55:32:0b:59:f8:b1:3b:64:e6:25: 98:6e:81:87:80:31:bf:9a:1d:45:36:dc:a6:e0:41:9b:f9:50: db:9a:f3:78:3c:79:4b:80:92:4d:48:0c:df:21:e8:ae:fe:56: e6:e0:09:d0:f8:29:9e:9d:f1:28:c8:c1:e2:2d:82:7d:70:b4: e4:39:ed:d9:43:21:41:d2:31:f4:ef:29:bf:16:f4:98:8b:68: 19:0f:92:58:f4:26:32:f9:5d:69:e7:4a:d2:5b:69:e7:14:a7: 73:40:75:32:df:c6:82:56:11:07:5b:90:c2:89:2d:3b:fd:a7: 33:d7:68:54:b8:ed:d2:59:0a:c5:fe:63:2e:52:82:24:2a:27: ab:74:95:bb:66:09:21:b0:1f:81:f1:cd:10:ed:cf:18:43:7a: dd:1e:e5:a9:99:42:67:cd:0a:c1:f4:a1:1b:4e:09:d8:cb:b4: 02:c8:f6:78:71:d2:0e:11:c4:c3:56:42:a0:0a:d5:ba:b5:cd: 87:01:13:5f:40:58:53:35:3b:66:67:ab:fb:43:98:c1:4c:97: 8e:71:f5:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqbp0d0Mpg6KdFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODJhY2JmMGItOWUzNC00ZmZhLWJiMmYtYjYxYmRlOWFiOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv8C38NApu1GhkGzEIehPxu/1uZK4HX0Pnns IB4AkwoAarmyjx0uWWeAslY+vgu2A93u2KhM3SIhGW1eWlJ02VjlidUNXyJ1Vevp Fbl1iE9co3LkbOK2vso++LSbzFI3aiuyaI/GU8vMuKC5puN+LmwGkF9qnZi1Juyg h0hlUCFdTfkpIKAWUzx38gYCEbBUWhRoNoLuMvqTN++HfXnHoqh0M2ac91JbZ5rh K3D4UPrjO6nqMTlLHmzUbfi9r4X4dISznzcOvdZ+h67mz1i2EBFgA4XRFt9zdsVV djmu608EIFWI2HkIFNq2Nyn7zbPu3N7bpc54QHtLxyoc4KyBlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsxKcw0foT7MOAmAXMMI8u8Eet7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhlMGJmYTEtMmY5Mi0z YTY5LTkwY2MtZDkyOGVjMTBmMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+gUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAgzTuFxolj90Istxkw1ly2NI/fhNSL75zD6pQ2Dnway4xZtct1iYeE ZwBtVTILWfixO2TmJZhugYeAMb+aHUU23KbgQZv5UNua83g8eUuAkk1IDN8h6K7+ VubgCdD4KZ6d8SjIweItgn1wtOQ57dlDIUHSMfTvKb8W9JiLaBkPklj0JjL5XWnn StJbaecUp3NAdTLfxoJWEQdbkMKJLTv9pzPXaFS47dJZCsX+Yy5SgiQqJ6t0lbtm CSGwH4HxzRDtzxhDet0e5amZQmfNCsH0oRtOCdjLtALI9nhx0g4RxMNWQqAK1bq1 zYcBE19AWFM1O2Znq/tDmMFMl45x9f8= -----END CERTIFICATE-----Generated at Tue Oct 21 19:29:25 2025 by rpki-client