$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa File: 2f71b400-38e3-3931-a436-bfa122952b2e.roa (raw, json) Hash identifier: ewIhBdVhX8ibnIZb/9jNxDtTv2Fma299c79txpfOYH8= Subject key identifier: 25:C7:A3:FB:80:A2:91:B5:34:6D:44:4D:6F:B0:E7:C7:8D:52:CE:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B5141D5D1A422951E4D6735C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 7922 IP address blocks: 96.99.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:d5:d1:a4:22:95:1e:4d:67:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=4d068f7e-bb7d-4bd4-b6f5-395b9a3c8ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:6f:98:cf:51:77:52:f0:cd:db:23:72:e4: 36:7d:76:0b:55:3f:22:e9:22:6b:0b:25:7b:f0:5e: 0d:cf:ff:c8:d1:5a:96:c8:2d:43:2e:db:6a:1c:10: 62:62:5b:29:9c:77:e3:7d:7d:74:d1:25:91:67:20: a8:1e:54:8b:38:a2:08:63:55:ac:65:19:7e:41:78: 5f:9e:da:e8:44:df:9f:9a:e1:42:5f:89:90:f4:87: 64:48:eb:af:6a:7c:21:aa:43:08:4e:07:df:61:f8: 69:9d:9b:0a:13:c5:fb:50:08:7c:3a:1f:c8:77:ac: 2b:49:01:6f:f2:48:ce:1a:96:e8:72:b1:db:c7:67: 2e:57:f2:05:79:9a:13:76:1a:b0:6d:83:2d:06:6d: f7:48:2a:31:08:50:38:56:27:93:a4:ae:bb:cd:ce: bb:fc:22:16:40:ab:af:ba:45:e9:ed:f0:79:06:56: 23:bb:85:8c:8a:21:6c:ed:61:98:8b:3c:91:f6:5e: 9d:d1:00:dc:af:52:c1:43:f9:81:42:70:c8:46:c8: 5d:d0:94:cc:7e:5f:5d:f8:48:1e:81:fe:af:4f:7c: 8a:6a:0e:55:5f:70:9e:3c:78:22:6e:a8:b1:9d:f8: 3f:78:0f:35:d4:e9:fb:e2:b8:32:57:5d:39:a9:a5: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C7:A3:FB:80:A2:91:B5:34:6D:44:4D:6F:B0:E7:C7:8D:52:CE:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f71b400-38e3-3931-a436-bfa122952b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 96.99.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:58:26:e7:91:c7:8e:93:1f:b1:3d:ac:79:62:56:44:32:0b: 58:b5:f2:13:03:80:ef:c0:be:b2:ef:21:ed:db:21:a9:4b:71: 07:30:0a:0e:b9:44:6e:15:45:91:86:15:c7:b4:4a:79:d1:58: fb:2c:34:5c:b4:a2:11:ff:66:a0:c6:5f:16:0d:e3:a3:c4:36: 03:5d:84:bb:72:c0:f8:7f:d4:ff:37:39:c9:27:dc:3b:14:6a: 0d:ca:d3:d6:ef:c0:97:bf:9e:3b:3c:da:9f:4f:60:88:f0:4a: 9a:d7:6c:39:7c:92:8a:22:a2:af:a0:35:9b:30:0b:61:f3:cc: 8c:e9:81:95:bd:a8:41:b6:bc:11:1e:63:41:f7:14:c8:d4:b6: 03:26:55:9b:78:43:b4:57:44:2f:52:7c:25:f0:45:e1:89:24: 07:fc:da:4d:cc:78:08:58:18:65:70:81:be:6d:71:3e:a8:3c: 0c:95:f1:f9:84:d2:c5:56:59:2f:a5:ca:8e:5e:cf:35:e0:7f: 64:80:2b:e9:cf:e1:90:2e:f5:14:e4:a4:04:18:73:52:6b:28: 35:6a:d7:79:d2:54:c5:fd:bd:6b:2b:ec:50:cf:e7:18:2c:86: da:46:3f:d1:76:72:2a:c3:77:6e:8c:27:9c:0e:77:13:bb:0a: 44:1f:74:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdXRpCKVHk1nNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NGQwNjhmN2UtYmI3ZC00YmQ0LWI2ZjUtMzk1YjlhM2M4ZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpFvmM9Rd1LwzdsjcuQ2fXYLVT8i6SJrCyV7 8F4Nz//I0VqWyC1DLttqHBBiYlspnHfjfX100SWRZyCoHlSLOKIIY1WsZRl+QXhf ntroRN+fmuFCX4mQ9IdkSOuvanwhqkMITgffYfhpnZsKE8X7UAh8Oh/Id6wrSQFv 8kjOGpbocrHbx2cuV/IFeZoTdhqwbYMtBm33SCoxCFA4VieTpK67zc67/CIWQKuv ukXp7fB5BlYju4WMiiFs7WGYizyR9l6d0QDcr1LBQ/mBQnDIRshd0JTMfl9d+Ege gf6vT3yKag5VX3CePHgibqixnfg/eA811On74rgyV105qaV4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXHo/uAopG1NG1ETW+w58eNUs4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY3MWI0MDAtMzhlMy0z OTMxLWE0MzYtYmZhMTIyOTUyYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYGPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRYJueRx46TH7E9rHliVkQyC1i18hMDgO/AvrLvIe3bIalLcQcwCg65 RG4VRZGGFce0SnnRWPssNFy0ohH/ZqDGXxYN46PENgNdhLtywPh/1P83Ockn3DsU ag3K09bvwJe/njs82p9PYIjwSprXbDl8kooioq+gNZswC2HzzIzpgZW9qEG2vBEe Y0H3FMjUtgMmVZt4Q7RXRC9SfCXwReGJJAf82k3MeAhYGGVwgb5tcT6oPAyV8fmE 0sVWWS+lyo5ezzXgf2SAK+nP4ZAu9RTkpAQYc1JrKDVq13nSVMX9vWsr7FDP5xgs htpGP9F2cirDd26MJ5wOdxO7CkQfdG4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:45:27 2025 by rpki-client