$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f814dbdf-e949-3cf3-a548-e9098302c8c1.roa File: f814dbdf-e949-3cf3-a548-e9098302c8c1.roa (raw, json) Hash identifier: j57ilfWGB5xpZfH9pPQ/oOLcdVYt7H/Ebrql+speX3c= Subject key identifier: 7A:23:10:08:E7:54:68:21:21:59:BE:69:C1:4A:B8:D0:6C:A2:CB:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9BCE4F12E81CA8A71E540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f814dbdf-e949-3cf3-a548-e9098302c8c1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.233.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:bc:e4:f1:2e:81:ca:8a:71:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ab72c621-ff6d-4d2c-be4a-82f60a8ee775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:05:da:55:12:db:6f:f0:65:f1:53:4e:5f: e0:dd:c4:87:5a:61:0f:52:95:5d:67:b9:81:c2:a5: db:54:9b:bc:26:da:a8:53:c9:f9:3b:96:a7:2a:6f: f2:de:0a:45:b9:b8:58:50:5d:db:cf:4c:cb:50:32: 2f:5f:21:c8:8d:b2:c0:e6:8c:f2:6f:70:9c:a6:70: 76:eb:77:ed:53:63:ec:1c:aa:6c:ea:a0:e6:e2:5e: 99:98:33:aa:f8:04:a5:0f:f6:aa:7e:b8:84:88:b5: 60:87:ad:3c:e2:93:1a:50:84:c8:a0:94:11:8f:28: 89:c4:3f:1b:39:b5:8f:3f:21:2f:29:11:1c:81:2e: 50:3c:14:f9:77:a8:88:b2:ff:8b:90:d4:60:50:b2: 3a:4d:f8:eb:3e:bf:65:12:c1:c0:77:3b:6b:53:d9: fb:fd:27:56:30:08:b9:2d:2e:39:12:da:6f:16:cd: 85:25:f0:04:73:f8:12:62:49:47:fa:4a:16:60:11: 3f:4c:44:2a:0a:c5:1b:f4:48:e8:94:ec:42:0f:65: a2:57:ef:2e:88:29:de:57:79:00:85:60:0c:9d:6a: c1:09:b1:a3:df:4c:c0:e3:ca:55:90:3e:48:74:5e: cc:ea:2a:ca:d0:b2:1e:fe:4f:38:24:29:8b:10:30: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:23:10:08:E7:54:68:21:21:59:BE:69:C1:4A:B8:D0:6C:A2:CB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f814dbdf-e949-3cf3-a548-e9098302c8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.233.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c8:8c:da:1a:72:19:54:2a:69:f4:82:11:ab:b7:c3:c3:39: b9:f9:c8:6f:e7:10:92:d8:ae:a9:a4:4e:60:d2:aa:1a:71:2f: 75:2d:43:7c:df:1d:85:ea:83:8a:39:bd:3e:cb:cb:18:00:2a: 04:3f:c4:11:0b:d9:81:c4:0f:cb:bc:88:09:12:64:44:31:2d: c1:6a:d5:08:28:3c:04:ca:e4:a5:e3:f2:e7:14:cc:94:7b:0f: 31:89:33:2c:79:44:b8:76:37:b2:e7:a0:a1:01:4a:b2:55:fc: b1:30:76:9b:65:a7:36:1a:f0:d4:27:dd:d9:a2:ff:35:ba:6a: b2:a9:d8:fd:61:78:e9:49:82:a5:b9:6e:b6:09:d5:71:81:1d: 22:8b:b5:10:d5:29:16:31:28:d3:ae:2c:23:d0:d3:dd:7f:4c: 68:5e:a4:a3:4f:fc:ba:ba:d7:fe:7d:78:96:83:3c:8d:26:2f: 64:b7:80:fd:bf:b0:1d:7f:a5:c2:fc:08:bd:d4:83:ad:78:5a: db:20:d3:3a:2e:5b:cf:c0:34:99:a0:ca:6b:4f:72:a7:c9:ca: c2:ad:ae:61:52:0b:70:c4:40:68:33:15:38:ef:4c:c2:92:55: 1b:9f:cd:43:da:a8:f1:12:0d:53:b8:91:dc:e3:66:6b:34:ee: 84:59:ff:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqbzk8S6Byopx5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YWI3MmM2MjEtZmY2ZC00ZDJjLWJlNGEtODJmNjBhOGVlNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUcF2lUS22/wZfFTTl/g3cSHWmEPUpVdZ7mB wqXbVJu8JtqoU8n5O5anKm/y3gpFubhYUF3bz0zLUDIvXyHIjbLA5ozyb3CcpnB2 63ftU2PsHKps6qDm4l6ZmDOq+ASlD/aqfriEiLVgh6084pMaUITIoJQRjyiJxD8b ObWPPyEvKREcgS5QPBT5d6iIsv+LkNRgULI6TfjrPr9lEsHAdztrU9n7/SdWMAi5 LS45EtpvFs2FJfAEc/gSYklH+koWYBE/TEQqCsUb9EjolOxCD2WiV+8uiCneV3kA hWAMnWrBCbGj30zA48pVkD5IdF7M6irK0LIe/k84JCmLEDBGNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHojEAjnVGghIVm+acFKuNBsostFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjgxNGRiZGYtZTk0OS0z Y2YzLWE1NDgtZTkwOTgzMDJjOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7IjNoachlUKmn0ghGrt8PDObn5yG/nEJLYrqmkTmDSqhpxL3UtQ3zf HYXqg4o5vT7LyxgAKgQ/xBEL2YHED8u8iAkSZEQxLcFq1QgoPATK5KXj8ucUzJR7 DzGJMyx5RLh2N7LnoKEBSrJV/LEwdptlpzYa8NQn3dmi/zW6arKp2P1heOlJgqW5 brYJ1XGBHSKLtRDVKRYxKNOuLCPQ091/TGhepKNP/Lq61/59eJaDPI0mL2S3gP2/ sB1/pcL8CL3Ug614Wtsg0zouW8/ANJmgymtPcqfJysKtrmFSC3DEQGgzFTjvTMKS VRufzUPaqPESDVO4kdzjZms07oRZ/50= -----END CERTIFICATE-----Generated at Wed Oct 22 02:47:18 2025 by rpki-client