$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4554d60-7812-3c03-8d9d-698b8a9ac932.roa File: c4554d60-7812-3c03-8d9d-698b8a9ac932.roa (raw, json) Hash identifier: VraKAmCt6mAN0JPlixmJmsi4j0XNmzCDs7jh7Z0jgNM= Subject key identifier: 39:E1:76:FB:CC:69:73:A4:36:F4:E0:2E:7D:DE:1E:B9:CD:96:87:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7B630C1FE8E306CAFB900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4554d60-7812-3c03-8d9d-698b8a9ac932.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.236.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:b6:30:c1:fe:8e:30:6c:af:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1a89c326-e633-499b-b487-95200105f9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:33:01:0e:e2:92:a4:05:b3:9e:83:33:c8:b9: 33:8a:2a:c7:79:fb:24:b5:b7:75:3a:d5:4b:d4:9a: d2:49:80:ff:55:3b:92:4d:e6:5f:7a:06:bc:5c:62: 93:a8:1f:9e:82:c7:22:43:83:96:24:c0:d1:64:2d: 41:76:70:f8:88:76:91:1f:ce:87:34:e1:dd:97:1c: 8a:d7:3d:ab:70:7c:61:39:fb:a0:6f:df:86:45:86: 9a:bb:8c:de:45:7d:ca:36:0a:ce:4c:2a:70:5d:1b: 05:24:cf:f4:21:93:37:e3:17:67:ac:0b:eb:fa:13: 15:d2:b7:34:59:b7:0a:be:ba:a9:e1:0f:50:2f:d0: b9:91:ac:90:04:c0:95:b3:57:4f:da:a8:f4:99:ca: f8:eb:c3:6b:f0:d9:0b:a2:02:63:74:46:ce:73:bf: 30:6d:a6:5f:9d:11:6c:cc:d9:80:b8:1f:f0:66:83: 8f:a5:81:18:ae:56:ea:f0:db:48:c2:94:af:fa:01: 87:fd:7f:22:4b:ea:15:77:58:74:ba:53:2e:12:ca: f0:9f:c2:f7:0a:4e:0c:40:80:3b:1f:63:4d:49:85: ec:0e:8b:75:fd:2d:fc:b8:a7:16:19:30:cf:35:c9: 78:48:57:b5:91:17:62:fa:f8:bc:82:97:9b:89:79: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E1:76:FB:CC:69:73:A4:36:F4:E0:2E:7D:DE:1E:B9:CD:96:87:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4554d60-7812-3c03-8d9d-698b8a9ac932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5d:47:79:16:cc:00:d8:30:80:af:b8:e1:41:dc:e1:46:1d: 71:e9:0e:5a:81:8f:4d:45:ec:ca:08:9d:29:1f:dc:3f:45:3a: 5f:5d:82:1f:25:32:0c:a9:60:e2:68:35:d6:ee:82:5a:22:bd: cb:81:e8:4b:fe:78:3a:24:f4:bd:17:c1:43:86:da:d9:3a:6b: 21:17:c8:ee:7f:9c:ab:2d:f0:be:2f:ac:82:30:53:e6:f6:b4: 2e:95:1d:e4:19:ca:2a:2b:62:11:7c:da:fd:c1:9b:f0:ef:19: fd:ea:ed:10:8c:64:a1:11:29:49:00:12:7a:f1:c4:cd:49:99: 0d:56:a0:8a:56:ee:91:d4:3e:2f:a0:1b:48:3a:2e:8c:49:7b: e6:82:97:dc:af:f5:0e:f4:78:21:74:35:d3:37:b0:34:ec:f7: e0:1f:dc:b3:b1:64:4a:50:7c:c5:5c:b5:31:31:9e:61:e3:72: 1b:3a:47:86:e6:a3:d8:b6:64:4a:b8:ff:08:ab:ee:93:bc:b5: 1b:ea:64:67:44:9f:06:4f:9d:f0:61:27:0f:b5:d1:a3:73:6e: 13:fb:0f:fd:2e:33:e5:bd:1f:4a:43:f5:99:95:3f:e2:b6:1b: ef:ce:3a:74:78:59:99:10:97:81:d6:80:4f:4f:0f:ec:db:e3: 24:ae:90:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp7Ywwf6OMGyvuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWE4OWMzMjYtZTYzMy00OTliLWI0ODctOTUyMDAxMDVmOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDMBDuKSpAWznoMzyLkziirHefsktbd1OtVL 1JrSSYD/VTuSTeZfega8XGKTqB+egsciQ4OWJMDRZC1BdnD4iHaRH86HNOHdlxyK 1z2rcHxhOfugb9+GRYaau4zeRX3KNgrOTCpwXRsFJM/0IZM34xdnrAvr+hMV0rc0 WbcKvrqp4Q9QL9C5kayQBMCVs1dP2qj0mcr468Nr8NkLogJjdEbOc78wbaZfnRFs zNmAuB/wZoOPpYEYrlbq8NtIwpSv+gGH/X8iS+oVd1h0ulMuEsrwn8L3Ck4MQIA7 H2NNSYXsDot1/S38uKcWGTDPNcl4SFe1kRdi+vi8gpebiXnmiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnhdvvMaXOkNvTgLn3eHrnNlodEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQ1NTRkNjAtNzgxMi0z YzAzLThkOWQtNjk4YjhhOWFjOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+yDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNdR3kWzADYMICvuOFB3OFGHXHpDlqBj01F7MoInSkf3D9FOl9dgh8l MgypYOJoNdbugloivcuB6Ev+eDok9L0XwUOG2tk6ayEXyO5/nKst8L4vrIIwU+b2 tC6VHeQZyiorYhF82v3Bm/DvGf3q7RCMZKERKUkAEnrxxM1JmQ1WoIpW7pHUPi+g G0g6LoxJe+aCl9yv9Q70eCF0NdM3sDTs9+Af3LOxZEpQfMVctTExnmHjchs6R4bm o9i2ZEq4/wir7pO8tRvqZGdEnwZPnfBhJw+10aNzbhP7D/0uM+W9H0pD9ZmVP+K2 G+/OOnR4WZkQl4HWgE9PD+zb4ySukGw= -----END CERTIFICATE-----Generated at Wed Oct 22 03:13:06 2025 by rpki-client