$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abf8c5b-02e6-3384-a50e-01b89c093f1d.roa File: 1abf8c5b-02e6-3384-a50e-01b89c093f1d.roa (raw, json) Hash identifier: GlOhrnXDDqqkUDsONLZ+BUx40MzJfVhbdQQoFFOybWU= Subject key identifier: 8C:06:D4:C6:56:F4:A0:2D:AE:5A:EB:18:B6:5E:B7:0A:9D:2A:E5:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91F9E9C7C3D2BCED4C400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abf8c5b-02e6-3384-a50e-01b89c093f1d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 70.89.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1f:9e:9c:7c:3d:2b:ce:d4:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3d897ff7-e5ab-41d5-ba46-f8c88cf0fa29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:a5:a0:2c:c5:18:6c:88:06:06:95:f1:47: f3:5c:45:fc:4f:16:04:7e:bf:26:88:4e:29:f8:b7: 82:92:0b:11:6a:2f:2b:8c:ea:3e:75:8b:8a:84:bb: bf:cd:f6:1c:3d:65:45:96:c2:3a:a7:6f:3c:86:05: a7:d2:50:03:3b:67:e4:1f:e6:37:78:27:6c:a4:8a: 42:08:96:00:a3:b8:fb:84:37:f4:f5:0a:2e:ff:a3: 7c:52:c8:ba:2a:ff:67:ce:d9:af:9c:9c:b2:58:6d: 72:70:a3:37:dc:59:3b:1b:65:75:34:11:b8:f7:bf: 13:f0:7f:fc:87:36:0d:72:65:34:7e:44:f7:ad:d4: c9:76:21:07:af:34:91:ad:aa:f4:a2:79:7a:2d:69: c3:ee:fa:c1:ca:cc:a2:53:da:da:4d:ad:33:f6:ad: 7e:15:b6:17:0f:0d:05:47:4d:97:77:a8:5c:d5:e7: e0:cb:db:ab:74:a8:4d:1b:d0:16:62:eb:41:9a:fb: d5:db:f4:06:1d:7d:35:4b:3d:87:3d:1e:48:d6:a0: 89:48:66:5a:89:df:f3:77:eb:ef:0c:f0:13:c5:1c: f9:ac:3d:c2:bf:bb:14:9d:5c:00:81:69:c4:37:51: 41:29:75:69:2e:f4:77:ca:dc:cd:9b:ba:42:99:32: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:06:D4:C6:56:F4:A0:2D:AE:5A:EB:18:B6:5E:B7:0A:9D:2A:E5:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abf8c5b-02e6-3384-a50e-01b89c093f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:03:44:62:a9:c6:4b:88:fd:52:73:0c:05:24:6c:f5:04:fd: fc:0b:55:ea:98:66:2d:41:7e:b0:75:37:4c:31:d1:85:27:e6: da:22:da:42:29:09:44:d8:b5:29:4a:cf:38:a9:43:0d:3e:d8: 17:b4:83:f7:f6:26:f9:2c:45:da:f4:a8:27:04:ff:42:81:b8: cc:38:4c:a9:e2:c1:b7:e3:f5:82:5e:c2:15:bc:55:90:ce:ce: 74:c3:ad:b8:3a:87:5f:72:aa:16:1e:8f:9a:b7:bb:6c:da:f9: 1a:34:d6:33:a6:a7:6f:9b:03:50:fa:13:a8:57:c1:ea:1e:05: 44:99:64:52:bb:de:02:e0:01:2f:7d:5b:1b:05:92:8c:f1:c2: b3:97:1d:5f:2d:37:d8:3c:2e:1b:a3:0c:02:82:c5:f4:a0:61: e8:52:39:c0:f0:15:b4:56:56:16:31:7c:6a:d0:fd:79:e1:2e: 72:22:66:f5:c5:83:59:21:8e:ce:35:b9:63:ca:c4:d3:ed:11: 78:b0:b5:a0:14:eb:33:a3:54:5b:26:ce:7f:1c:3a:f6:ea:02: d1:27:b6:13:98:3b:6a:5d:5a:7f:fe:80:90:5a:f1:28:62:49: 66:e8:98:d6:1e:59:44:8d:f0:61:ec:a2:f6:38:f8:b6:f7:a0: 73:36:e2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uR+enHw9K87UxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk M2Q4OTdmZjctZTVhYi00MWQ1LWJhNDYtZjhjODhjZjBmYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7GloCzFGGyIBgaV8UfzXEX8TxYEfr8miE4p +LeCkgsRai8rjOo+dYuKhLu/zfYcPWVFlsI6p288hgWn0lADO2fkH+Y3eCdspIpC CJYAo7j7hDf09Qou/6N8Usi6Kv9nztmvnJyyWG1ycKM33Fk7G2V1NBG4978T8H/8 hzYNcmU0fkT3rdTJdiEHrzSRrar0onl6LWnD7vrBysyiU9raTa0z9q1+FbYXDw0F R02Xd6hc1efgy9urdKhNG9AWYutBmvvV2/QGHX01Sz2HPR5I1qCJSGZaid/zd+vv DPATxRz5rD3Cv7sUnVwAgWnEN1FBKXVpLvR3ytzNm7pCmTL5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwG1MZW9KAtrlrrGLZetwqdKuV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFiZjhjNWItMDJlNi0z Mzg0LWE1MGUtMDFiODljMDkzZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsDRGKpxkuI/VJzDAUkbPUE/fwLVeqYZi1BfrB1N0wx0YUn5toi2kIp CUTYtSlKzzipQw0+2Be0g/f2JvksRdr0qCcE/0KBuMw4TKniwbfj9YJewhW8VZDO znTDrbg6h19yqhYej5q3u2za+Ro01jOmp2+bA1D6E6hXweoeBUSZZFK73gLgAS99 WxsFkozxwrOXHV8tN9g8LhujDAKCxfSgYehSOcDwFbRWVhYxfGrQ/XnhLnIiZvXF g1khjs41uWPKxNPtEXiwtaAU6zOjVFsmzn8cOvbqAtEnthOYO2pdWn/+gJBa8Shi SWbomNYeWUSN8GHsovY4+Lb3oHM24ss= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:52 2025 by rpki-client