$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa File: 18d930f9-d6f4-3529-85d8-1209abde5bbc.roa (raw, json) Hash identifier: 3P6ZxFUUNkejzmDwidX/yzYog5C33PnubsU1WKT2ClU= Subject key identifier: 0A:72:A1:5A:13:24:BF:68:33:CE:EF:32:11:1A:87:D5:92:E9:60:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB933044C7792D0D9E11000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 70.89.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:33:04:4c:77:92:d0:d9:e1:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=dbf17c9a-ec4a-4812-a88d-49f1935b896c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:6f:e0:53:3f:78:e1:13:61:8d:aa:03:1c: c4:d3:05:c3:da:5b:f4:48:a9:1e:d4:76:74:bb:ee: ec:0f:42:f6:20:f5:cc:50:24:14:6e:2a:51:5b:b5: 35:34:4b:a0:b7:c2:ea:12:e4:5f:a7:b9:18:05:b2: 9f:41:25:cf:dc:32:97:46:d5:70:ee:ac:8f:44:86: 79:f4:99:45:aa:96:fe:58:9c:a0:8e:12:7f:f7:68: dc:35:fd:82:bd:8a:d0:b7:ad:07:1e:76:3a:66:84: 29:22:4d:03:76:21:c8:63:a3:e2:5e:a5:e5:a0:57: 59:11:ca:5d:80:38:6f:4d:c6:25:e7:f0:c0:95:c6: 09:80:6f:40:27:11:a9:be:36:cf:27:92:0d:19:84: 43:7e:68:66:8b:59:ed:95:93:67:6b:2d:01:25:76: f8:92:be:7d:90:cc:c7:20:b3:e5:12:8d:ca:c3:f7: 7b:ac:0b:4f:36:ed:ef:1e:d4:e1:91:29:f6:c6:a6: 69:e1:b7:e8:cc:7b:b6:8f:37:b0:b4:df:b2:39:08: df:d4:9b:8c:43:50:8d:81:e1:69:78:35:cd:50:c1: 80:80:8e:0e:91:d2:52:91:2f:93:de:3c:58:87:65: 3d:9f:41:12:fc:45:12:b9:90:a6:26:cd:81:38:e2: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:72:A1:5A:13:24:BF:68:33:CE:EF:32:11:1A:87:D5:92:E9:60:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7b:ca:09:ad:4a:ca:5f:30:e1:4c:f3:88:a8:df:84:30:33: 84:6d:3d:42:45:58:f7:d9:f4:98:34:e7:9f:1b:d9:18:96:c1: 2e:c2:2e:dd:1f:eb:47:46:c0:b2:69:46:f3:e7:e2:52:b9:b2: 9d:57:ab:f6:85:c3:38:11:5c:97:34:e0:60:02:20:5d:86:3c: 00:3b:6d:31:91:19:9e:7d:7c:bf:c8:06:a5:91:7c:4f:88:56: 9e:cc:ea:6c:f2:c2:c9:09:fd:9a:37:da:13:f3:bc:aa:4e:a6: d8:c1:a2:84:9a:ed:92:3e:58:ab:26:dd:19:58:f2:b3:25:2f: ec:4d:83:0d:c7:b1:85:fd:09:0c:e8:37:28:7a:f2:03:78:b7: e9:42:be:a0:7b:7a:27:ca:1b:89:d8:98:94:af:7d:23:17:08: 1a:4c:ed:8e:cd:b2:23:45:e1:20:b2:0c:4b:7d:5f:23:f2:06: de:18:27:f4:80:33:c7:74:55:e5:ad:c6:39:81:00:af:b1:37: 65:3e:df:9d:96:62:6e:04:71:5a:d6:81:97:8e:6e:a1:08:19: 18:06:ea:ab:16:39:91:8c:0d:34:d6:ab:64:c4:4f:53:c3:25: d9:9a:23:ba:ab:94:96:23:86:bc:6a:f3:ed:56:c7:fe:90:cd: bf:3d:31:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uTMETHeS0NnhEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZGJmMTdjOWEtZWM0YS00ODEyLWE4OGQtNDlmMTkzNWI4OTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W9v4FM/eOETYY2qAxzE0wXD2lv0SKke1HZ0 u+7sD0L2IPXMUCQUbipRW7U1NEugt8LqEuRfp7kYBbKfQSXP3DKXRtVw7qyPRIZ5 9JlFqpb+WJygjhJ/92jcNf2CvYrQt60HHnY6ZoQpIk0DdiHIY6PiXqXloFdZEcpd gDhvTcYl5/DAlcYJgG9AJxGpvjbPJ5INGYRDfmhmi1ntlZNnay0BJXb4kr59kMzH ILPlEo3Kw/d7rAtPNu3vHtThkSn2xqZp4bfozHu2jzewtN+yOQjf1JuMQ1CNgeFp eDXNUMGAgI4OkdJSkS+T3jxYh2U9n0ES/EUSuZCmJs2BOOIwiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApyoVoTJL9oM87vMhEah9WS6WCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMThkOTMwZjktZDZmNC0z NTI5LTg1ZDgtMTIwOWFiZGU1YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE57ygmtSspfMOFM84io34QwM4RtPUJFWPfZ9Jg0558b2RiWwS7CLt0f 60dGwLJpRvPn4lK5sp1Xq/aFwzgRXJc04GACIF2GPAA7bTGRGZ59fL/IBqWRfE+I Vp7M6mzywskJ/Zo32hPzvKpOptjBooSa7ZI+WKsm3RlY8rMlL+xNgw3HsYX9CQzo Nyh68gN4t+lCvqB7eifKG4nYmJSvfSMXCBpM7Y7NsiNF4SCyDEt9XyPyBt4YJ/SA M8d0VeWtxjmBAK+xN2U+352WYm4EcVrWgZeObqEIGRgG6qsWOZGMDTTWq2TET1PD JdmaI7qrlJYjhrxq8+1Wx/6Qzb89MdI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:14 2025 by rpki-client