$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80a0f2a9-f9aa-3e50-8954-bf561a0eec5c.roa File: 80a0f2a9-f9aa-3e50-8954-bf561a0eec5c.roa (raw, json) Hash identifier: 8m22/0ZgbHoUH2xjoIBPOXyO0OABf+S8i2GySe/teig= Subject key identifier: B8:DB:83:4C:34:2C:4D:A2:5E:4D:38:37:BC:D2:7D:6B:3F:A9:AD:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9BCD656044E7C345B2800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80a0f2a9-f9aa-3e50-8954-bf561a0eec5c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.233.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:bc:d6:56:04:4e:7c:34:5b:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e52f45b5-faca-4dca-b09c-f47bc08c90b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:02:b6:68:2c:d9:d5:ea:9d:aa:13:81:d8:bb: dc:18:db:01:7d:3a:80:ee:5a:5e:61:34:ec:f8:77: d8:cd:06:ff:cd:83:ad:18:ec:74:c9:20:a7:45:e4: 5d:bf:75:6d:d6:db:a8:e6:d0:ce:6b:1b:87:9a:a8: 82:c2:4c:66:64:f7:4a:9f:0b:98:8f:3a:4a:9c:30: 51:21:a7:48:e1:c5:22:c3:12:2f:c8:ea:66:21:79: ff:aa:e0:4c:6a:c7:54:8f:54:d7:44:10:4e:29:2e: 2d:df:1c:0f:fe:e9:99:f4:0f:03:3b:08:72:51:5c: ab:c7:41:53:07:48:e1:96:c0:2f:e3:36:dc:81:5e: c5:20:b2:74:3d:d1:52:74:df:2f:98:0c:9f:0a:c8: a3:c6:25:7c:fb:79:0a:85:71:89:0c:29:1f:1b:32: b9:96:8f:a3:01:93:31:eb:cd:5e:b7:a4:a8:a3:1d: b9:0e:ac:9d:dc:e8:cb:ae:48:8f:31:2a:e7:ab:22: 38:a8:a4:92:69:89:d4:18:81:79:c1:e3:0e:03:45: 97:b7:6f:5b:21:e8:df:87:0f:85:4c:ec:23:3c:d4: c6:1d:b8:25:91:3d:53:89:96:db:0b:9e:92:11:5d: a1:1b:13:8f:ca:70:4a:8d:32:35:68:9b:54:57:0b: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DB:83:4C:34:2C:4D:A2:5E:4D:38:37:BC:D2:7D:6B:3F:A9:AD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80a0f2a9-f9aa-3e50-8954-bf561a0eec5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.233.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:72:38:ea:6d:e4:5d:a8:ea:2c:d6:f9:3f:22:e9:00:cb:4a: 61:0e:b8:38:46:9a:28:25:14:8d:bd:b9:b0:37:51:73:fd:e0: 1a:84:35:a2:27:d9:29:77:4d:6f:bd:98:43:5f:4a:a3:72:b3: 70:e6:b0:9c:29:e0:8e:68:26:7a:96:25:5b:bd:bd:33:90:7c: 88:c8:e7:17:10:27:51:cb:e6:84:bb:65:59:56:91:73:05:71: 44:71:85:4c:28:4f:5e:49:79:ca:d8:86:41:03:85:8a:f4:74: 84:e0:a8:d8:b2:f6:ad:2b:32:ea:61:0c:e7:5b:2a:fd:47:72: 23:2b:2c:79:5d:42:fb:bd:78:9e:cc:c8:54:9e:46:43:80:2a: 1d:4d:de:4e:c1:f6:f9:48:65:eb:9c:94:95:24:98:37:ee:e6: dc:13:65:98:c5:30:65:dc:f8:db:64:95:2b:fa:9f:d9:16:9f: a7:ff:ec:6c:07:49:f8:2c:91:98:14:cb:65:db:24:61:7b:32: 6c:63:c5:09:9e:9c:60:fe:dc:10:09:b8:f0:68:ce:f1:d9:89: 18:df:22:d0:2f:d1:a2:1d:8e:4a:6f:42:25:bc:f9:ca:00:9c: 1f:e9:6a:b4:c7:89:90:3f:3b:66:14:8d:6b:09:c6:51:8d:ce: 04:5e:f6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqbzWVgROfDRbKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTUyZjQ1YjUtZmFjYS00ZGNhLWIwOWMtZjQ3YmMwOGM5MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQK2aCzZ1eqdqhOB2LvcGNsBfTqA7lpeYTTs +HfYzQb/zYOtGOx0ySCnReRdv3Vt1tuo5tDOaxuHmqiCwkxmZPdKnwuYjzpKnDBR IadI4cUiwxIvyOpmIXn/quBMasdUj1TXRBBOKS4t3xwP/umZ9A8DOwhyUVyrx0FT B0jhlsAv4zbcgV7FILJ0PdFSdN8vmAyfCsijxiV8+3kKhXGJDCkfGzK5lo+jAZMx 681et6Soox25Dqyd3OjLrkiPMSrnqyI4qKSSaYnUGIF5weMOA0WXt29bIejfhw+F TOwjPNTGHbglkT1TiZbbC56SEV2hGxOPynBKjTI1aJtUVwuqmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjbg0w0LE2iXk04N7zSfWs/qa2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODBhMGYyYTktZjlhYS0z ZTUwLTg5NTQtYmY1NjFhMGVlYzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+noMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhyOOpt5F2o6izW+T8i6QDLSmEOuDhGmiglFI29ubA3UXP94BqENaIn 2Sl3TW+9mENfSqNys3DmsJwp4I5oJnqWJVu9vTOQfIjI5xcQJ1HL5oS7ZVlWkXMF cURxhUwoT15JecrYhkEDhYr0dITgqNiy9q0rMuphDOdbKv1HciMrLHldQvu9eJ7M yFSeRkOAKh1N3k7B9vlIZeuclJUkmDfu5twTZZjFMGXc+NtklSv6n9kWn6f/7GwH SfgskZgUy2XbJGF7MmxjxQmenGD+3BAJuPBozvHZiRjfItAv0aIdjkpvQiW8+coA nB/parTHiZA/O2YUjWsJxlGNzgRe9ok= -----END CERTIFICATE-----Generated at Wed Oct 22 00:28:16 2025 by rpki-client