$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa File: 256a31a1-c209-37d9-b60b-1ccbb0d76830.roa (raw, json) Hash identifier: AEq8VR90DCum3M2N6Fviz2N//ATRbX5930Py8jfHn7E= Subject key identifier: CA:2C:6E:64:2F:E2:00:C3:A8:3E:46:0B:B1:DC:9D:73:69:FC:72:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8B747B4C869C2CC743880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 71.228.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:b7:47:b4:c8:69:c2:cc:74:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=31a6aa28-a8b3-4df2-815a-0975d6a43313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b3:41:75:d3:c6:55:71:70:65:d2:ab:41:64: 44:50:08:0a:38:6c:9f:88:1f:a0:5b:2d:e1:2d:f7: e8:9f:f0:f1:cb:5e:6a:b7:0f:7e:40:ba:43:74:13: 00:af:bc:41:79:03:e8:84:16:bf:8c:98:68:f3:07: 16:a3:d8:a7:31:d5:c1:3b:9b:78:53:dd:4e:07:78: 43:d4:61:41:d8:4d:15:c2:b9:c1:60:35:5c:a6:8c: 9a:34:f7:74:ee:3d:07:e0:29:13:f6:41:dd:11:7f: f9:3b:ab:74:7b:27:9b:ff:13:e3:b4:da:1b:88:e8: 6d:a4:33:e7:a0:99:7f:50:6d:f4:23:71:1f:45:ba: 7f:75:a4:f4:75:20:58:c6:06:7c:b5:13:da:26:4a: cf:51:b7:65:ca:2e:ac:ae:95:d4:15:ac:23:7b:81: 42:86:28:33:9f:12:b0:7f:b2:4b:18:71:6c:f8:96: 9b:f0:eb:b1:ce:d4:64:ce:c9:95:7c:64:60:1a:39: 65:b3:f6:29:f6:f4:cd:df:bd:3a:fa:d8:16:0a:63: 56:b5:61:38:ad:48:32:f4:fb:1e:35:0c:bc:c4:a4: 33:7c:fe:65:f4:6b:ea:0b:18:27:88:c6:ca:d7:63: 4b:23:73:7c:c6:8b:de:6c:dc:37:3d:d9:ae:62:18: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2C:6E:64:2F:E2:00:C3:A8:3E:46:0B:B1:DC:9D:73:69:FC:72:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e7:ea:d5:a6:fa:ce:53:a9:e6:dc:1b:ab:85:d8:69:0a:ed: a9:60:2d:f1:0e:b3:41:02:0f:a6:3d:44:c8:34:79:72:34:79: 5a:71:66:fb:f7:95:08:0c:11:63:2f:b9:c3:4b:ac:7e:91:32: 93:7d:2d:88:c9:49:fa:e6:ff:1d:65:03:01:7b:f4:d6:e3:20: 43:39:0c:10:c7:77:c7:ae:82:ec:18:f4:04:ea:03:1e:b0:77: 46:a7:e4:93:ec:e6:fc:e8:98:70:56:d4:f2:61:cc:b2:de:b4: bb:88:0c:b9:e4:07:fc:b1:d4:4e:fc:c1:47:d1:a3:da:bf:ee: 9f:1e:57:df:61:17:21:c6:d1:30:5e:fa:0b:05:05:27:a8:bc: 8b:e0:84:18:b7:9a:ed:5e:09:3a:fc:20:50:e5:bc:2e:b5:f3: d7:13:92:a5:d9:b6:11:b9:d4:11:4d:30:d6:ec:57:1d:72:2e: ca:7a:17:f5:51:1f:f3:a9:c3:76:ef:23:eb:39:4c:ee:90:ba: 43:c5:5f:c7:d3:f6:e9:ee:60:fd:67:c0:cd:b8:55:0a:8e:4e: ce:b0:f3:67:b4:de:87:ef:ba:54:61:84:6f:07:b0:c5:e1:a5: a6:d4:10:43:0c:c2:f9:5f:a8:46:27:09:36:84:09:86:3b:ca: bb:5d:5c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uLdHtMhpwsx0OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzFhNmFhMjgtYThiMy00ZGYyLTgxNWEtMDk3NWQ2YTQzMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbNBddPGVXFwZdKrQWREUAgKOGyfiB+gWy3h Lffon/Dxy15qtw9+QLpDdBMAr7xBeQPohBa/jJho8wcWo9inMdXBO5t4U91OB3hD 1GFB2E0VwrnBYDVcpoyaNPd07j0H4CkT9kHdEX/5O6t0eyeb/xPjtNobiOhtpDPn oJl/UG30I3EfRbp/daT0dSBYxgZ8tRPaJkrPUbdlyi6srpXUFawje4FChigznxKw f7JLGHFs+Jab8OuxztRkzsmVfGRgGjlls/Yp9vTN3706+tgWCmNWtWE4rUgy9Pse NQy8xKQzfP5l9GvqCxgniMbK12NLI3N8xovebNw3PdmuYhgGUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMosbmQv4gDDqD5GC7HcnXNp/HLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjU2YTMxYTEtYzIwOS0z N2Q5LWI2MGItMWNjYmIwZDc2ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+SmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXn6tWm+s5TqebcG6uF2GkK7algLfEOs0ECD6Y9RMg0eXI0eVpxZvv3 lQgMEWMvucNLrH6RMpN9LYjJSfrm/x1lAwF79NbjIEM5DBDHd8euguwY9ATqAx6w d0an5JPs5vzomHBW1PJhzLLetLuIDLnkB/yx1E78wUfRo9q/7p8eV99hFyHG0TBe +gsFBSeovIvghBi3mu1eCTr8IFDlvC6189cTkqXZthG51BFNMNbsVx1yLsp6F/VR H/Opw3bvI+s5TO6QukPFX8fT9unuYP1nwM24VQqOTs6w82e03ofvulRhhG8HsMXh pabUEEMMwvlfqEYnCTaECYY7yrtdXJw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:00 2025 by rpki-client