$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c67a3d71-f749-3410-b917-3b421b025a3c.roa File: c67a3d71-f749-3410-b917-3b421b025a3c.roa (raw, json) Hash identifier: tVYkogiIUE3pLBOltDoxI3njgUSbGl1em3yDNh9goLE= Subject key identifier: 7B:53:23:53:76:38:35:49:12:3E:F2:E7:7F:CB:54:1E:78:F0:C7:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A81881667AC446FE2CA2B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c67a3d71-f749-3410-b917-3b421b025a3c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.232.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:18:81:66:7a:c4:46:fe:2c:a2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a20497a9-6897-4b4e-862e-da8a86629d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:59:91:11:cb:c2:fa:43:52:6f:66:32:aa: 03:0a:e5:2e:71:ac:f8:e3:4f:22:e1:af:6e:19:d9: cc:61:71:f5:b8:f5:d3:88:33:8e:c2:79:61:23:36: 29:4b:8c:87:c4:01:75:e5:2e:9a:f3:c7:75:96:7f: 9c:e6:62:9a:a6:0f:15:cd:e1:6a:d4:d7:5e:17:a2: 2f:c0:e7:c7:fd:62:ff:19:c7:bc:1c:99:b6:af:84: fe:2f:d6:6d:c6:9b:d9:7e:92:6a:bb:23:ea:ab:88: 8f:ac:fe:2c:7e:4c:83:3e:dd:a5:58:45:da:1d:ef: ac:4a:e0:86:12:83:16:1e:88:24:76:a9:31:c6:6a: 7f:e6:64:e4:0b:e7:d4:26:67:1d:7e:cd:e5:13:ce: 36:28:f5:ec:ab:6b:a7:47:ee:0a:5c:ba:72:65:04: 30:cb:c9:07:b9:92:a2:7b:c0:b2:1c:37:30:7d:7c: 8a:f5:e9:c8:63:1c:3e:61:6b:76:a8:a0:4b:fd:71: 1c:6e:7e:b6:7e:3a:de:8e:e1:90:48:bc:51:e2:3b: 43:d9:b4:25:85:53:9d:bd:da:01:9d:6d:86:b6:ff: c5:67:1f:29:d5:d4:b6:f9:d4:7c:93:d8:2b:b6:92: c2:0f:66:bc:7b:8e:ba:72:d4:20:66:c9:0f:95:6a: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:53:23:53:76:38:35:49:12:3E:F2:E7:7F:CB:54:1E:78:F0:C7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c67a3d71-f749-3410-b917-3b421b025a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.232.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:bc:1f:82:61:29:1a:00:7b:b5:ea:23:62:ac:5d:c8:f7:ee: dd:b6:84:50:d1:2f:7a:2e:d7:da:4a:ba:c1:51:cb:98:5b:93: 2e:18:f1:60:60:c7:ec:c0:15:ae:97:8e:c1:fa:75:a2:e1:02: a6:3a:25:77:ff:e2:d1:62:d9:0c:7f:0c:94:62:0c:da:ad:ca: f3:c9:41:ec:e3:cc:04:69:fb:70:f2:ab:3b:b5:db:ee:e4:29: 89:6f:84:41:1c:4c:12:0f:68:d6:ea:b9:e4:77:b3:44:cb:c4: a2:03:4d:21:bc:f1:78:99:e9:53:20:c9:35:da:9c:50:46:ad: 25:2a:a6:cb:80:71:d2:b9:5f:5b:8d:e1:0c:90:ab:0e:77:02: 97:32:58:fe:c9:62:e2:f9:b2:6c:50:4e:15:67:4e:55:17:e4: 78:17:bf:3e:4e:cf:10:04:d7:e5:aa:0b:27:0d:71:7a:85:b4: 54:03:a3:34:bc:ba:3c:9b:f7:df:37:b8:ec:7a:89:a5:07:0a: b7:3e:f3:22:77:04:ed:f1:af:78:77:ab:e1:7f:4a:be:0c:c5: 65:37:f1:27:c9:b2:ca:7c:9b:41:8d:64:1c:0c:35:b8:10:57: 70:66:38:e1:74:c0:46:31:55:73:a1:b4:05:07:9e:a7:dc:f6: 9c:44:0e:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqBiBZnrERv4sorAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTIwNDk3YTktNjg5Ny00YjRlLTg2MmUtZGE4YTg2NjI5ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym5ZkRHLwvpDUm9mMqoDCuUucaz4408i4a9u GdnMYXH1uPXTiDOOwnlhIzYpS4yHxAF15S6a88d1ln+c5mKapg8VzeFq1NdeF6Iv wOfH/WL/Gce8HJm2r4T+L9ZtxpvZfpJquyPqq4iPrP4sfkyDPt2lWEXaHe+sSuCG EoMWHogkdqkxxmp/5mTkC+fUJmcdfs3lE842KPXsq2unR+4KXLpyZQQwy8kHuZKi e8CyHDcwfXyK9enIYxw+YWt2qKBL/XEcbn62fjrejuGQSLxR4jtD2bQlhVOdvdoB nW2Gtv/FZx8p1dS2+dR8k9grtpLCD2a8e466ctQgZskPlWoExQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtTI1N2ODVJEj7y53/LVB548MdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzY3YTNkNzEtZjc0OS0z NDEwLWI5MTctM2I0MjFiMDI1YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+j0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANq8H4JhKRoAe7XqI2KsXcj37t22hFDRL3ou19pKusFRy5hbky4Y8WBg x+zAFa6XjsH6daLhAqY6JXf/4tFi2Qx/DJRiDNqtyvPJQezjzARp+3Dyqzu12+7k KYlvhEEcTBIPaNbqueR3s0TLxKIDTSG88XiZ6VMgyTXanFBGrSUqpsuAcdK5X1uN 4QyQqw53ApcyWP7JYuL5smxQThVnTlUX5HgXvz5OzxAE1+WqCycNcXqFtFQDozS8 ujyb9983uOx6iaUHCrc+8yJ3BO3xr3h3q+F/Sr4MxWU38SfJssp8m0GNZBwMNbgQ V3BmOOF0wEYxVXOhtAUHnqfc9pxEDu0= -----END CERTIFICATE-----Generated at Tue Oct 21 21:30:02 2025 by rpki-client