$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/867b4890-db46-317f-be02-f4ed44eb42d6.roa File: 867b4890-db46-317f-be02-f4ed44eb42d6.roa (raw, json) Hash identifier: iJ0ZG2yCbSLBckh4KrdSPuBS5aCK+7DEqk+GGcpwXjQ= Subject key identifier: B7:53:16:40:19:22:44:E7:11:5E:10:4F:C1:DC:74:DD:73:B5:C1:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A96293D3941DFC80182180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/867b4890-db46-317f-be02-f4ed44eb42d6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.193.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:62:93:d3:94:1d:fc:80:18:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=188831a9-c39e-486b-8bbc-a638971613f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:b8:4a:e3:b6:f2:7a:27:bf:a6:9f:8b:ef: 01:66:c3:bc:5c:f4:6d:ac:c9:76:3e:07:fb:33:d8: 3c:06:6d:f3:13:54:77:d2:19:1f:f6:23:86:d0:35: f4:4e:42:5f:a0:3b:c5:58:76:3a:91:09:76:00:84: 2d:9f:47:d3:61:bb:68:33:a6:3d:34:a6:80:db:84: b8:65:e1:e0:d2:90:a6:33:9e:2d:54:46:95:19:c7: a0:88:3e:fc:b5:86:29:b1:7c:f8:46:0f:87:0a:1b: 0f:f2:b9:0b:66:f8:47:f7:78:59:85:9e:28:c2:37: 60:70:eb:1b:3f:3e:0c:1f:9d:d7:06:f7:f4:54:01: cb:14:86:3c:71:14:df:94:e6:ae:22:78:ce:cd:d9: 8e:62:b1:6a:ec:84:3b:e6:7b:49:17:44:40:c5:86: 0b:da:12:c6:28:ec:6d:67:10:8d:47:9d:1f:af:90: d1:4c:e3:fb:79:26:2d:a9:54:2a:5a:52:fc:e7:33: 3e:39:3c:b6:c5:41:13:2b:16:e7:0e:ea:d2:2c:71: 26:9e:3d:00:f1:be:e7:d6:53:c1:b6:c4:2d:07:0f: 0a:c3:5f:9c:bf:40:bf:16:cf:8d:9d:9b:03:79:f7: f6:6b:cf:de:31:4e:28:13:bd:ed:9b:5f:6e:2a:7f: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:53:16:40:19:22:44:E7:11:5E:10:4F:C1:DC:74:DD:73:B5:C1:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/867b4890-db46-317f-be02-f4ed44eb42d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:58:3d:d2:c2:e4:9e:a9:03:ca:bd:f2:32:45:94:b2:44:02: 87:4a:b8:78:55:54:9a:b1:55:9e:2c:5a:36:96:05:5d:89:18: 85:31:a6:60:ef:1c:4b:d8:dd:5f:85:80:46:99:02:8a:0b:f6: 98:cc:54:c1:4e:ff:98:84:ee:bf:58:e0:3c:55:7c:20:f3:36: ae:cf:91:b2:ee:a5:43:8d:59:8e:1e:42:81:64:01:ac:02:49: be:c9:35:7e:bb:00:c1:46:85:4f:ca:91:ce:de:93:49:ec:74: 53:31:36:ba:81:de:1c:36:5d:4a:70:43:f7:54:65:49:90:0f: cf:1b:64:47:f3:22:fe:c2:bb:c1:6f:54:c2:b0:c3:8d:3e:e8: 75:14:8d:55:f6:ab:9a:e4:5d:63:9a:32:98:fb:ca:9c:81:cd: 8b:fa:61:d4:0c:f8:b8:29:1f:ff:3c:40:f7:a1:77:84:5c:c9: a6:ed:83:38:dd:00:c0:ee:27:f6:12:27:a2:84:38:32:96:3c: f0:6e:6b:1b:67:5c:d2:09:48:52:c0:ad:48:f6:3e:8a:b9:75: 07:9b:6f:62:9a:c7:fb:a7:ba:6c:cd:9f:d3:44:99:a9:92:18: 97:bc:e0:0a:22:36:4c:cc:5a:be:98:74:3d:a1:79:1f:83:12: 59:39:d3:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqWKT05Qd/IAYIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTg4ODMxYTktYzM5ZS00ODZiLThiYmMtYTYzODk3MTYxM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAW4SuO28nonv6afi+8BZsO8XPRtrMl2Pgf7 M9g8Bm3zE1R30hkf9iOG0DX0TkJfoDvFWHY6kQl2AIQtn0fTYbtoM6Y9NKaA24S4 ZeHg0pCmM54tVEaVGcegiD78tYYpsXz4Rg+HChsP8rkLZvhH93hZhZ4owjdgcOsb Pz4MH53XBvf0VAHLFIY8cRTflOauInjOzdmOYrFq7IQ75ntJF0RAxYYL2hLGKOxt ZxCNR50fr5DRTOP7eSYtqVQqWlL85zM+OTy2xUETKxbnDurSLHEmnj0A8b7n1lPB tsQtBw8Kw1+cv0C/Fs+NnZsDeff2a8/eMU4oE73tm19uKn+KUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdTFkAZIkTnEV4QT8HcdN1ztcGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY3YjQ4OTAtZGI0Ni0z MTdmLWJlMDItZjRlZDQ0ZWI0MmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8GKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRYPdLC5J6pA8q98jJFlLJEAodKuHhVVJqxVZ4sWjaWBV2JGIUxpmDv HEvY3V+FgEaZAooL9pjMVMFO/5iE7r9Y4DxVfCDzNq7PkbLupUONWY4eQoFkAawC Sb7JNX67AMFGhU/Kkc7ek0nsdFMxNrqB3hw2XUpwQ/dUZUmQD88bZEfzIv7Cu8Fv VMKww40+6HUUjVX2q5rkXWOaMpj7ypyBzYv6YdQM+LgpH/88QPehd4Rcyabtgzjd AMDuJ/YSJ6KEODKWPPBuaxtnXNIJSFLArUj2Poq5dQebb2Kax/unumzNn9NEmamS GJe84AoiNkzMWr6YdD2heR+DElk506c= -----END CERTIFICATE-----Generated at Wed Oct 22 00:19:14 2025 by rpki-client