$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed16eef-2a78-39ae-ba4e-35df9f587173.roa File: aed16eef-2a78-39ae-ba4e-35df9f587173.roa (raw, json) Hash identifier: 5xst0JOgBIRiptzuAxzHtKfW52C6HHNW7gctiiWgp1k= Subject key identifier: D4:EE:AC:3D:08:F8:37:C2:01:99:7F:80:6E:5C:C8:9A:3E:83:D4:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7BD3A227E8A1FB9D0DCC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed16eef-2a78-39ae-ba4e-35df9f587173.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.59.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:bd:3a:22:7e:8a:1f:b9:d0:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4f294315-77e9-4d65-a9a3-7e9e3aae6b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5b:03:f1:a4:5a:9e:5e:60:f5:41:4e:4f:7f: 4c:3b:94:e1:eb:9d:15:f1:cb:9c:c6:ef:64:97:cb: 46:02:14:dd:28:93:04:35:a5:45:f5:91:a4:1a:e8: e4:00:e2:c4:91:94:fb:ba:02:b7:6c:53:1a:81:90: ff:83:17:b6:85:2a:d4:d8:f9:89:05:c7:47:43:27: 3d:34:6f:af:b1:6c:72:cd:b7:d6:23:b5:3a:6d:ae: 28:bf:3d:39:d9:f1:dc:56:b4:3b:94:d0:fa:6b:2d: 7a:4f:40:43:63:25:42:14:5c:29:2a:c7:c9:1f:ed: 03:de:d7:c4:ea:39:77:63:7a:7b:66:56:14:d4:c2: 2b:cd:74:1f:af:ac:11:0e:6c:6d:85:c3:cb:2e:a0: d6:b2:63:2d:26:70:f7:40:04:b1:c7:a7:72:c0:70: 6b:34:1f:2b:42:77:0d:04:e1:6e:8a:07:32:76:d4: cc:7a:a3:d1:65:7a:5e:ac:6b:d1:6f:96:cd:a3:07: 0a:bd:15:3e:c2:70:40:5c:62:37:db:78:73:98:62: c8:d4:e6:68:c9:b6:53:cf:dd:7c:d9:04:d1:20:58: 27:a5:9a:5e:e9:cd:8b:0e:34:d7:70:44:3b:9f:83: b0:37:bc:a6:cf:ff:0e:8f:97:49:23:0c:5f:31:af: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EE:AC:3D:08:F8:37:C2:01:99:7F:80:6E:5C:C8:9A:3E:83:D4:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed16eef-2a78-39ae-ba4e-35df9f587173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.59.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bf:6c:7d:50:51:88:a2:b4:8b:d6:fb:58:d1:b6:44:63:d0: c8:4a:61:b7:c5:4e:4a:8b:da:3e:f1:f2:71:d9:79:15:0a:ff: 61:a4:ac:1c:93:cc:57:f1:69:1a:41:d5:c3:c2:b7:19:58:35: c7:c3:29:97:7b:85:22:14:70:a7:a5:06:2e:50:d0:54:b8:eb: ea:fa:c8:28:23:ca:35:55:0b:4d:b3:11:be:b2:b1:5b:62:97: 6c:fe:96:bb:35:fe:9b:0d:1d:18:c8:da:e4:4f:87:ae:51:f2: 19:a8:5a:dc:4f:08:03:cb:98:ae:a5:e1:f5:b7:da:7e:54:21: a5:10:ca:1a:2e:63:79:1d:2b:1a:c9:33:85:f9:25:62:13:f2: 68:9e:cb:b2:f8:e4:7e:31:43:41:26:a6:66:2b:26:c4:32:4d: 90:58:a2:10:24:17:75:a0:64:41:d5:80:02:7f:af:c5:dd:36: b3:6b:1a:e0:32:b7:98:2d:dd:bd:1c:73:76:5a:f9:ed:bb:2b: 8a:9b:71:c7:c8:0d:6d:28:40:bb:51:b5:ad:11:ad:2e:63:fd: 8a:26:42:9b:9d:3c:84:82:2f:07:42:38:fc:f0:2b:f9:29:b1: a0:bc:24:f5:d1:a7:e8:6d:7a:e1:8e:43:78:3f:18:44:83:2e: 3c:95:dd:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp706In6KH7nQ3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGYyOTQzMTUtNzdlOS00ZDY1LWE5YTMtN2U5ZTNhYWU2Yjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklsD8aRanl5g9UFOT39MO5Th650V8cucxu9k l8tGAhTdKJMENaVF9ZGkGujkAOLEkZT7ugK3bFMagZD/gxe2hSrU2PmJBcdHQyc9 NG+vsWxyzbfWI7U6ba4ovz052fHcVrQ7lND6ay16T0BDYyVCFFwpKsfJH+0D3tfE 6jl3Y3p7ZlYU1MIrzXQfr6wRDmxthcPLLqDWsmMtJnD3QASxx6dywHBrNB8rQncN BOFuigcydtTMeqPRZXperGvRb5bNowcKvRU+wnBAXGI323hzmGLI1OZoybZTz918 2QTRIFgnpZpe6c2LDjTXcEQ7n4OwN7ymz/8Oj5dJIwxfMa9F6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTurD0I+DfCAZl/gG5cyJo+g9Q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVkMTZlZWYtMmE3OC0z OWFlLWJhNGUtMzVkZjlmNTg3MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm/bH1QUYiitIvW+1jRtkRj0MhKYbfFTkqL2j7x8nHZeRUK/2GkrByT zFfxaRpB1cPCtxlYNcfDKZd7hSIUcKelBi5Q0FS46+r6yCgjyjVVC02zEb6ysVti l2z+lrs1/psNHRjI2uRPh65R8hmoWtxPCAPLmK6l4fW32n5UIaUQyhouY3kdKxrJ M4X5JWIT8miey7L45H4xQ0EmpmYrJsQyTZBYohAkF3WgZEHVgAJ/r8XdNrNrGuAy t5gt3b0cc3Za+e27K4qbccfIDW0oQLtRta0RrS5j/YomQpudPISCLwdCOPzwK/kp saC8JPXRp+hteuGOQ3g/GESDLjyV3SA= -----END CERTIFICATE-----Generated at Tue Oct 21 22:03:49 2025 by rpki-client