$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d880b-15ea-30e6-ba84-e3eee52ec358.roa File: f99d880b-15ea-30e6-ba84-e3eee52ec358.roa (raw, json) Hash identifier: naGPUgXE2SlXpDsqtXPuS8/I4dlRPfydM0nSD56hv5s= Subject key identifier: 28:44:7B:5C:9B:84:6E:7D:7E:A0:3F:40:3B:38:DE:95:38:06:52:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A81B8A3B45F5F0787DF280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d880b-15ea-30e6-ba84-e3eee52ec358.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 71.234.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:1b:8a:3b:45:f5:f0:78:7d:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=cab7fdbe-e8e2-48a2-a6be-c128a2dcb1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:f3:48:5d:9d:1b:fa:9d:f9:30:4e:8f:52: 75:ca:6c:c3:ce:7b:db:80:56:ec:54:0d:7d:fa:07: 6f:4b:65:fb:e4:2a:ab:a9:2a:3a:6b:65:fd:13:a6: cd:4f:c2:97:e2:8e:3c:86:b5:a5:37:92:51:59:9c: 96:4e:15:80:e2:e6:d8:0f:c7:a3:d6:e2:b2:b3:c7: e7:eb:bf:1d:01:ec:f7:de:c8:d8:54:c7:e2:af:b4: 00:99:bc:ef:f0:6a:26:28:f4:2f:d2:da:58:3d:43: d4:20:3c:a7:14:77:01:c8:aa:88:3c:eb:9b:9e:2d: 0a:78:e4:6f:75:02:fc:b8:d8:30:f4:1d:6f:72:43: 67:7c:bb:f0:a5:05:ca:5a:9b:4b:ab:b6:6b:d4:9f: 0d:43:da:bd:c4:61:1d:08:1b:27:d6:41:03:d7:30: 6c:0b:bb:07:d1:f6:7a:4a:58:71:26:c0:b1:d0:bc: 28:cb:fb:ea:98:2d:78:15:a6:ce:5f:01:d1:76:b7: 26:f0:3d:c8:ce:27:76:ee:12:41:49:8a:5f:23:17: f0:cb:f1:02:c0:e3:2e:53:b5:96:30:ce:47:b2:e1: e2:ce:92:85:a1:eb:ef:a2:98:16:0e:71:eb:b5:64: 56:65:90:d4:7d:01:aa:c3:ae:18:b2:e2:4a:4d:7a: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:7B:5C:9B:84:6E:7D:7E:A0:3F:40:3B:38:DE:95:38:06:52:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f99d880b-15ea-30e6-ba84-e3eee52ec358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.234.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:af:60:3e:a3:fc:a4:48:c9:37:2d:7f:0e:b7:01:81:b1:00: 76:7a:30:5d:93:80:39:89:4a:56:54:0f:02:b1:50:c4:94:9e: 7f:fa:62:f3:c6:49:6f:91:b4:b0:33:b3:ab:06:5b:7d:d0:77: f9:a9:60:25:30:ba:44:5a:36:35:8e:45:f6:a3:9d:13:2e:72: 19:31:86:53:ef:f9:37:a0:06:c5:a3:cc:79:3e:2e:77:92:00: 06:14:e4:3d:9d:be:e9:ec:86:ee:8b:dc:76:b5:c8:83:a0:ba: ea:e8:5e:60:85:19:63:8b:8f:a8:93:a7:87:8f:04:0e:cd:3a: 7c:27:10:ad:2e:15:a6:6d:e7:ec:a0:e2:be:2d:1d:5c:87:d9: 6c:a5:86:ab:2f:ab:35:0b:92:23:60:a0:9a:17:eb:22:77:ec: 58:cc:58:4a:89:64:b7:33:e5:7c:7b:8b:d6:87:43:83:11:a4: 39:5b:db:b2:bb:71:5e:13:70:e6:f3:1a:fa:e6:d9:7e:91:3c: 6e:97:c2:7a:53:4a:a7:9b:5b:97:2e:22:c2:af:77:f5:ee:cf: ad:bc:0f:bf:61:68:85:7b:95:ab:7f:dc:9f:40:f4:2c:48:83: fd:03:3a:3a:24:fa:28:91:7a:0f:ce:26:c3:f1:3f:a2:3b:a2: c2:14:83:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqBuKO0X18Hh98oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Y2FiN2ZkYmUtZThlMi00OGEyLWE2YmUtYzEyOGEyZGNiMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8PzSF2dG/qd+TBOj1J1ymzDznvbgFbsVA19 +gdvS2X75CqrqSo6a2X9E6bNT8KX4o48hrWlN5JRWZyWThWA4ubYD8ej1uKys8fn 678dAez33sjYVMfir7QAmbzv8GomKPQv0tpYPUPUIDynFHcByKqIPOubni0KeORv dQL8uNgw9B1vckNnfLvwpQXKWptLq7Zr1J8NQ9q9xGEdCBsn1kED1zBsC7sH0fZ6 SlhxJsCx0Lwoy/vqmC14FabOXwHRdrcm8D3Izid27hJBSYpfIxfwy/ECwOMuU7WW MM5HsuHizpKFoevvopgWDnHrtWRWZZDUfQGqw64YsuJKTXo+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChEe1ybhG59fqA/QDs43pU4BlKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk5ZDg4MGItMTVlYS0z MGU2LWJhODQtZTNlZWU1MmVjMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+qSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKvYD6j/KRIyTctfw63AYGxAHZ6MF2TgDmJSlZUDwKxUMSUnn/6YvPG SW+RtLAzs6sGW33Qd/mpYCUwukRaNjWORfajnRMuchkxhlPv+TegBsWjzHk+LneS AAYU5D2dvunshu6L3Ha1yIOguuroXmCFGWOLj6iTp4ePBA7NOnwnEK0uFaZt5+yg 4r4tHVyH2WylhqsvqzULkiNgoJoX6yJ37FjMWEqJZLcz5Xx7i9aHQ4MRpDlb27K7 cV4TcObzGvrm2X6RPG6XwnpTSqebW5cuIsKvd/Xuz628D79haIV7lat/3J9A9CxI g/0DOjok+iiReg/OJsPxP6I7osIUg/s= -----END CERTIFICATE-----Generated at Wed Oct 22 02:54:24 2025 by rpki-client