$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab6d9b24-1ccc-3c54-b430-f61c07043d22.roa File: ab6d9b24-1ccc-3c54-b430-f61c07043d22.roa (raw, json) Hash identifier: f3J/c67v2H+8RX103RL7bSExJLfc9XsEavLG99Qfy0E= Subject key identifier: FC:A0:FF:6F:37:CB:8E:30:E1:45:FD:F2:AC:8F:3B:8C:63:08:07:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9BAB4730DE3417E8D2C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab6d9b24-1ccc-3c54-b430-f61c07043d22.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.232.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:ba:b4:73:0d:e3:41:7e:8d:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1b817649-eb58-4942-92aa-957551376cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:06:5f:a3:b0:1c:7c:8a:43:08:5a:85:d7: 17:02:31:6b:e0:df:30:9a:10:32:21:4e:46:7e:81: f1:2d:2b:d0:da:eb:33:43:68:bc:98:f7:54:ff:5b: d3:09:61:4a:c9:a4:7d:e0:f6:35:43:cd:5c:b7:4c: c2:df:4f:24:db:0d:f1:80:2d:ad:dc:94:6f:16:d2: a2:25:ca:06:d4:df:29:18:ce:4a:11:da:9b:31:dd: 6e:a3:0a:c4:5e:d1:fa:2f:8b:f7:7f:2d:f3:27:03: b1:56:46:1b:a3:d3:3a:76:be:65:8c:c7:4d:ad:d7: 38:a4:92:74:01:26:61:71:8a:a9:9f:43:ce:49:34: a1:17:af:0c:87:51:46:c6:7c:a5:34:66:37:72:e3: c9:d2:20:c4:b1:fa:4d:5e:69:62:73:aa:9f:59:a5: 0a:cf:52:02:74:77:3f:1c:9c:cf:f1:64:c1:2a:15: ae:c5:e8:a4:c9:76:42:20:81:65:68:d4:b5:c8:12: c3:ab:f0:1a:00:1e:62:e1:dc:f1:ce:d7:b0:de:fe: be:fe:7a:d9:51:9f:bf:93:7f:83:96:54:0b:f1:e3: 16:f1:91:db:c2:36:59:c7:3c:57:f5:19:56:36:6a: d0:1c:82:5e:cc:19:5d:fa:2a:85:31:9a:7f:82:4c: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A0:FF:6F:37:CB:8E:30:E1:45:FD:F2:AC:8F:3B:8C:63:08:07:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab6d9b24-1ccc-3c54-b430-f61c07043d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.232.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fb:00:c5:bc:2d:47:9a:9c:a3:00:31:c6:0c:4e:7f:4e:5c: 65:4f:39:f7:2e:d8:66:14:19:b9:4c:09:94:1c:d0:03:bf:46: ae:91:12:6b:b0:80:ea:bc:70:d8:62:c3:56:97:8f:28:68:c3: 83:f0:9d:72:4f:e7:26:c3:4f:2b:6d:18:1b:1e:38:18:d0:57: 47:8f:4b:a5:6e:07:e9:99:81:ab:ab:77:96:e1:83:89:9a:04: 23:b2:09:cc:a1:f1:27:68:cb:c7:0e:08:3d:46:48:2b:b2:44: 78:7e:e6:8a:aa:8b:1c:76:bf:73:c8:2c:c2:70:ca:77:26:eb: 62:c4:aa:5b:f6:e9:96:d6:1b:85:1b:1a:6b:bf:90:56:4d:ff: 82:85:d1:f2:ed:be:27:57:99:a1:ed:cb:8f:34:6f:8b:6e:cd: c9:73:28:3d:55:ca:da:4f:16:63:d9:ff:47:78:72:6c:f1:ed: f8:d7:8b:8f:d4:ac:94:df:59:d4:06:c1:75:7e:06:a3:59:e4: 36:9a:a0:a6:45:0b:80:ae:ed:6e:6d:ab:54:ae:2f:fd:2c:44: 3e:b4:24:92:f0:1e:81:5b:72:af:0a:7b:fa:78:7b:f3:f9:89: 07:6a:84:23:28:fc:84:cf:d1:cd:0b:1e:f8:ff:7a:17:b4:48: 61:b1:77:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqbq0cw3jQX6NLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWI4MTc2NDktZWI1OC00OTQyLTkyYWEtOTU3NTUxMzc2Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJUGX6OwHHyKQwhahdcXAjFr4N8wmhAyIU5G foHxLSvQ2uszQ2i8mPdU/1vTCWFKyaR94PY1Q81ct0zC308k2w3xgC2t3JRvFtKi JcoG1N8pGM5KEdqbMd1uowrEXtH6L4v3fy3zJwOxVkYbo9M6dr5ljMdNrdc4pJJ0 ASZhcYqpn0POSTShF68Mh1FGxnylNGY3cuPJ0iDEsfpNXmlic6qfWaUKz1ICdHc/ HJzP8WTBKhWuxeikyXZCIIFlaNS1yBLDq/AaAB5i4dzxztew3v6+/nrZUZ+/k3+D llQL8eMW8ZHbwjZZxzxX9RlWNmrQHIJezBld+iqFMZp/gkzJlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyg/283y44w4UX98qyPO4xjCAdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWI2ZDliMjQtMWNjYy0z YzU0LWI0MzAtZjYxYzA3MDQzZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+jcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT7AMW8LUeanKMAMcYMTn9OXGVPOfcu2GYUGblMCZQc0AO/Rq6REmuw gOq8cNhiw1aXjyhow4PwnXJP5ybDTyttGBseOBjQV0ePS6VuB+mZgaurd5bhg4ma BCOyCcyh8Sdoy8cOCD1GSCuyRHh+5oqqixx2v3PILMJwyncm62LEqlv26ZbWG4Ub Gmu/kFZN/4KF0fLtvidXmaHty480b4tuzclzKD1VytpPFmPZ/0d4cmzx7fjXi4/U rJTfWdQGwXV+BqNZ5DaaoKZFC4Cu7W5tq1SuL/0sRD60JJLwHoFbcq8Ke/p4e/P5 iQdqhCMo/ITP0c0LHvj/ehe0SGGxd+4= -----END CERTIFICATE-----Generated at Tue Oct 21 19:23:32 2025 by rpki-client