$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de933de2-d3e5-3841-8c1f-ca14025c2396.roa File: de933de2-d3e5-3841-8c1f-ca14025c2396.roa (raw, json) Hash identifier: uej0QGgDp7tBDICJHWcNZVO2DtHbxT6/xOQFZVwzF64= Subject key identifier: 05:22:F5:26:8B:83:95:54:2D:3E:EC:EB:6C:60:68:79:28:E5:52:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC453333C7F88B57B856A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de933de2-d3e5-3841-8c1f-ca14025c2396.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.201.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:53:33:3c:7f:88:b5:7b:85:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=240907fa-13a6-428b-82f6-60732821b2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:9a:87:ec:b6:82:3e:84:c0:64:ea:9f:58: 80:da:0b:4a:d3:ee:08:79:39:e8:51:89:a0:9f:96: c2:7e:7e:03:0a:6d:50:a5:33:fb:98:4f:ed:dd:6a: 8d:f2:76:c3:42:b8:37:c1:6e:3c:83:6d:ad:41:7c: 3c:7e:83:cc:fb:ad:ae:f0:bb:33:16:13:36:ed:88: d8:0a:52:db:8c:08:49:c3:d2:12:dd:85:b1:9b:b3: 42:7a:d0:d3:b7:6c:8b:4c:75:6a:b2:8a:5f:47:30: 2b:14:d9:12:1a:65:67:ad:4c:37:52:0b:24:76:e6: cf:91:f8:cb:78:76:fe:a2:8c:79:e1:18:2a:ed:b7: 9b:31:1c:83:cb:b6:7e:e9:f1:ef:1e:c9:41:03:2f: ea:2e:08:8a:73:d0:ea:3f:1d:62:4a:82:19:ad:be: 40:ca:99:50:8e:21:bb:9d:c9:52:62:c2:dc:d6:84: 6c:12:5a:64:9c:47:bd:1a:21:c7:d0:94:14:e8:ef: 05:31:04:52:26:d4:1d:bb:b4:5c:78:5c:5f:e4:69: 33:f7:64:e9:37:22:8c:81:ea:b7:3d:6d:25:fe:4d: c8:9b:64:db:df:f5:cd:d8:d5:d0:ed:29:16:e1:a4: 32:f3:cb:01:73:9b:67:22:3c:04:ba:46:29:cf:41: ff:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:22:F5:26:8B:83:95:54:2D:3E:EC:EB:6C:60:68:79:28:E5:52:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de933de2-d3e5-3841-8c1f-ca14025c2396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:18:e9:9a:1a:56:78:6f:65:d5:59:34:97:65:e3:ac:50:75: e7:e1:c1:56:60:96:a1:c7:33:24:11:2a:9b:d5:7d:44:87:d1: 1e:58:ff:3c:54:74:f4:34:06:fd:4a:0b:c6:5b:2f:a4:0b:85: 5e:fc:51:e9:3d:be:e6:79:36:ba:26:44:42:e6:82:fe:ba:fb: eb:ba:03:cc:0d:b1:7d:50:5c:06:5b:0d:73:f0:62:87:a8:86: 1c:ad:5f:63:a9:d6:94:48:9b:da:be:83:bc:0e:65:d6:f9:8a: 2f:d8:af:b5:bc:23:bc:06:6a:fa:db:b9:6a:0a:b1:30:f9:db: 5d:55:96:93:4d:b8:35:09:4b:7f:a8:bd:2a:5f:10:81:93:78: 50:ad:d2:69:7c:94:ec:ac:81:2e:b6:f4:b0:da:70:19:8c:4c: 6c:a7:1d:c0:1e:b8:c5:db:1b:a0:c4:90:16:e9:f0:a0:b2:db: 8f:56:52:79:63:a0:bf:9c:c5:a1:93:d3:23:74:9d:ba:f7:6e: 3a:44:47:80:99:ee:bb:9e:37:be:bb:12:b4:dd:34:d1:28:40: 8f:51:99:55:29:c6:6e:80:57:2c:73:9c:15:e9:fb:6c:14:a4: 7b:ed:1e:d3:40:ff:91:ea:0a:90:98:d6:6f:5f:3c:aa:2c:57: 55:c0:11:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxFMzPH+ItXuFagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjQwOTA3ZmEtMTNhNi00MjhiLTgyZjYtNjA3MzI4MjFiMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyKah+y2gj6EwGTqn1iA2gtK0+4IeTnoUYmg n5bCfn4DCm1QpTP7mE/t3WqN8nbDQrg3wW48g22tQXw8foPM+62u8LszFhM27YjY ClLbjAhJw9IS3YWxm7NCetDTt2yLTHVqsopfRzArFNkSGmVnrUw3UgskdubPkfjL eHb+oox54Rgq7bebMRyDy7Z+6fHvHslBAy/qLgiKc9DqPx1iSoIZrb5AyplQjiG7 nclSYsLc1oRsElpknEe9GiHH0JQU6O8FMQRSJtQdu7RceFxf5Gkz92TpNyKMgeq3 PW0l/k3Im2Tb3/XN2NXQ7SkW4aQy88sBc5tnIjwEukYpz0H/fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUi9SaLg5VULT7s62xgaHko5VLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGU5MzNkZTItZDNlNS0z ODQxLThjMWYtY2ExNDAyNWMyMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8kuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoY6ZoaVnhvZdVZNJdl46xQdefhwVZglqHHMyQRKpvVfUSH0R5Y/zxU dPQ0Bv1KC8ZbL6QLhV78Uek9vuZ5NromRELmgv66++u6A8wNsX1QXAZbDXPwYoeo hhytX2Op1pRIm9q+g7wOZdb5ii/Yr7W8I7wGavrbuWoKsTD5211VlpNNuDUJS3+o vSpfEIGTeFCt0ml8lOysgS629LDacBmMTGynHcAeuMXbG6DEkBbp8KCy249WUnlj oL+cxaGT0yN0nbr3bjpER4CZ7rueN767ErTdNNEoQI9RmVUpxm6AVyxznBXp+2wU pHvtHtNA/5HqCpCY1m9fPKosV1XAEVM= -----END CERTIFICATE-----Generated at Wed Oct 22 00:42:19 2025 by rpki-client