$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b35af465-c99e-3575-970d-ecfab1091c74.roa File: b35af465-c99e-3575-970d-ecfab1091c74.roa (raw, json) Hash identifier: SB2oVGAvR6ZktjPKgOJLYjAZiq+P8UI+O4D0zP/0VSc= Subject key identifier: 22:25:41:E9:82:D7:FF:E2:7F:6D:5B:E8:2B:00:98:C8:9E:18:1B:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A966DAD84D3CAF0CCDFF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b35af465-c99e-3575-970d-ecfab1091c74.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.238.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:66:da:d8:4d:3c:af:0c:cd:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d7b044ea-e1c5-4c93-ba6a-de0bac64e41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:86:c3:88:94:2d:c8:71:4a:db:9f:30:43: d6:db:5b:78:0f:51:be:8a:0d:39:3e:8a:ed:93:42: cd:61:d5:57:ec:b3:2a:3b:fb:bc:3e:fc:5b:f6:d6: ba:a6:58:56:99:f9:9f:d9:e4:3a:42:fc:35:b4:63: 2e:f2:fc:28:e0:f8:68:69:79:85:72:a3:fd:8b:b6: b5:15:69:90:31:cb:be:56:cd:72:ad:21:d9:8e:ac: 33:44:d8:02:76:88:bd:8c:e1:15:61:79:c1:1a:2b: c7:01:52:e3:ee:1a:c1:28:f8:8e:69:d0:c9:71:f6: 0b:57:d1:45:b2:48:78:a5:3c:ef:99:bc:80:ff:ea: b5:7b:fb:b0:01:29:46:62:6f:c6:35:29:25:58:71: be:f6:06:df:a7:5e:eb:b3:0e:98:f6:cc:a0:94:dc: 56:90:bf:89:26:68:19:18:e7:df:5a:d3:76:14:b3: b7:53:b7:91:d9:ad:64:e7:ac:30:b4:68:42:3a:fb: c6:3b:48:80:6e:10:32:60:b4:97:90:f5:0d:0c:ce: 0e:c6:af:bc:d7:27:ed:0e:15:da:09:97:cb:4c:73: 6b:64:60:23:c2:7e:a2:a9:05:a0:1e:15:f6:35:7c: 54:94:c2:55:b6:ff:ca:63:ad:97:39:67:1b:8d:38: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:25:41:E9:82:D7:FF:E2:7F:6D:5B:E8:2B:00:98:C8:9E:18:1B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b35af465-c99e-3575-970d-ecfab1091c74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2f:c8:ea:72:18:ef:8f:fe:79:d8:cf:11:b6:9d:78:1d:34: 35:db:69:b4:17:1a:d2:09:2f:7a:0c:da:9d:98:f2:14:f6:9c: 77:cb:fc:d5:18:fe:f8:33:1d:bd:19:a2:5c:a7:c4:c6:d4:fb: 3b:c4:7a:62:2e:4f:fe:64:3a:ea:71:24:e9:3c:ab:be:f7:75: e5:cc:a2:aa:de:d3:a2:48:5f:40:44:b0:ab:4b:9d:17:94:1a: 10:b3:3d:0c:17:74:ad:c6:9c:9e:0b:36:4b:71:37:67:40:a1: b6:81:e8:6e:5f:98:77:aa:d1:d4:e0:ac:f1:fa:db:61:16:fd: b7:aa:3b:b6:6b:f2:72:7d:9b:d1:81:9e:a1:3e:51:a8:c2:5b: 9d:64:8a:5d:93:1f:6d:46:d2:99:00:9b:5e:0c:19:6c:3f:db: 15:07:74:86:e0:27:93:67:71:e0:07:6f:6e:18:87:a9:e0:cf: ed:c6:c6:c5:29:63:fd:a6:fe:9f:0d:56:0c:a5:79:43:06:d0: f5:3f:81:59:34:6f:cf:cc:98:cd:e1:c6:e5:99:11:a2:fc:4b: 18:82:72:37:d2:18:2f:3f:9a:a2:fc:32:9f:6d:d5:6b:c2:17: 96:a4:76:ff:9f:46:bd:39:19:19:44:a6:b6:fe:5c:a9:45:47: d1:cc:75:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqWba2E08rwzN/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDdiMDQ0ZWEtZTFjNS00YzkzLWJhNmEtZGUwYmFjNjRlNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4qGw4iULchxStufMEPW21t4D1G+ig05Port k0LNYdVX7LMqO/u8Pvxb9ta6plhWmfmf2eQ6Qvw1tGMu8vwo4PhoaXmFcqP9i7a1 FWmQMcu+Vs1yrSHZjqwzRNgCdoi9jOEVYXnBGivHAVLj7hrBKPiOadDJcfYLV9FF skh4pTzvmbyA/+q1e/uwASlGYm/GNSklWHG+9gbfp17rsw6Y9syglNxWkL+JJmgZ GOffWtN2FLO3U7eR2a1k56wwtGhCOvvGO0iAbhAyYLSXkPUNDM4Oxq+81yftDhXa CZfLTHNrZGAjwn6iqQWgHhX2NXxUlMJVtv/KY62XOWcbjThWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIlQemC1//if21b6CsAmMieGBvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjM1YWY0NjUtYzk5ZS0z NTc1LTk3MGQtZWNmYWIxMDkxYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+5OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAvyOpyGO+P/nnYzxG2nXgdNDXbabQXGtIJL3oM2p2Y8hT2nHfL/NUY /vgzHb0ZolynxMbU+zvEemIuT/5kOupxJOk8q773deXMoqre06JIX0BEsKtLnReU GhCzPQwXdK3GnJ4LNktxN2dAobaB6G5fmHeq0dTgrPH622EW/beqO7Zr8nJ9m9GB nqE+UajCW51kil2TH21G0pkAm14MGWw/2xUHdIbgJ5NnceAHb24Yh6ngz+3GxsUp Y/2m/p8NVgyleUMG0PU/gVk0b8/MmM3hxuWZEaL8SxiCcjfSGC8/mqL8Mp9t1WvC F5akdv+fRr05GRlEprb+XKlFR9HMdbM= -----END CERTIFICATE-----Generated at Wed Oct 22 00:28:24 2025 by rpki-client