$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38d1baf5-6d8a-3edc-b5cb-90ae7556f198.roa File: 38d1baf5-6d8a-3edc-b5cb-90ae7556f198.roa (raw, json) Hash identifier: piHHxfiLzJfann4bWe/yxDxVee/SBaiO+U3oxmmmVn8= Subject key identifier: 1A:34:55:47:64:42:BA:1B:0E:1A:61:8A:A5:C0:7B:F0:56:9C:39:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A7787921F76678C8227700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38d1baf5-6d8a-3edc-b5cb-90ae7556f198.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 71.239.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:78:79:21:f7:66:78:c8:22:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=6b3d272d-0fd7-4491-a4cf-db22a7e6934a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:23:15:5f:22:88:4b:3e:92:10:6d:1c:5a: bb:99:f8:56:1d:24:63:20:27:82:0a:2b:3d:cd:5b: 09:d7:4e:d8:59:87:2d:71:10:14:ec:57:e0:34:b1: d4:1c:67:14:6d:ee:f2:8b:2d:df:d4:9e:60:a2:bb: 78:aa:5a:a9:59:d3:4f:f6:4a:bf:5d:7f:86:f1:49: a0:df:bc:e4:ed:e9:23:6c:ba:6e:74:2c:59:64:18: c0:4c:fa:79:f5:a7:ae:ba:27:eb:ae:14:0c:14:eb: 47:4c:a9:f2:ff:0e:60:c4:e5:10:d2:32:6a:97:2e: d2:21:85:ed:69:72:66:f1:a9:2f:b6:e2:48:a6:20: bd:c3:96:5c:b9:a4:a6:66:e7:12:d4:d7:4d:cb:ea: 42:77:60:4c:46:df:51:e1:9f:ae:18:72:3b:98:86: 64:21:ec:9a:75:a1:6c:40:a6:32:5e:2f:bd:ba:61: f7:cf:cb:63:1e:0f:ba:39:bb:6c:2a:bf:24:74:4c: d2:30:c1:e3:74:6c:14:1d:5c:a0:d1:e4:af:e5:a2: 4e:07:73:ce:ef:59:de:f9:df:48:c7:a0:d0:40:1f: 3d:51:95:43:82:0e:40:ef:dd:7d:c0:97:58:f9:a2: 72:2c:5d:47:2e:e5:fc:b2:51:73:f7:de:e3:dd:5d: 2e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:34:55:47:64:42:BA:1B:0E:1A:61:8A:A5:C0:7B:F0:56:9C:39:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38d1baf5-6d8a-3edc-b5cb-90ae7556f198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:26:f0:0a:a9:1e:30:16:72:fe:8b:05:36:a5:2a:46:60:28: d7:d7:af:c0:2c:60:3a:9d:61:02:f7:f8:93:e6:4c:6a:16:19: fe:47:16:1a:1f:6c:16:25:63:74:b3:93:3e:c1:7c:6d:89:95: eb:66:71:83:a7:26:d9:2a:a9:55:76:0f:fd:24:2c:c7:e1:30: fc:09:c6:f2:ca:2e:9d:9b:80:5a:76:16:4f:6d:e2:28:0b:9a: 63:1a:9e:34:22:56:bb:c7:96:bc:23:07:a6:c7:42:d6:e7:ab: 42:19:7d:c9:97:fd:22:8e:3d:e1:5d:e3:e2:bf:9d:7f:29:84: 6c:61:44:42:2d:89:87:75:3c:6c:61:9e:4f:1f:07:1c:24:28: f8:af:5e:25:57:56:5e:f9:f7:65:26:26:6b:9a:f3:78:df:e3: 96:48:98:ef:21:22:59:63:36:e5:57:ce:b6:49:80:2b:01:63: 04:9c:c5:ac:4c:34:1a:0b:50:91:ef:48:1a:6b:74:8c:83:7b: c3:19:60:b4:eb:14:82:76:b6:06:46:4b:b5:3f:36:b5:ad:b1: 58:fa:ad:87:0b:c4:d4:d4:cd:7e:05:1b:c1:7c:67:27:42:3f: 46:b6:b3:47:d1:38:6a:47:f3:24:6b:83:e5:4c:26:e2:cb:88: 24:2c:d4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3h5IfdmeMgidwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NmIzZDI3MmQtMGZkNy00NDkxLWE0Y2YtZGIyMmE3ZTY5MzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAIjFV8iiEs+khBtHFq7mfhWHSRjICeCCis9 zVsJ107YWYctcRAU7FfgNLHUHGcUbe7yiy3f1J5gort4qlqpWdNP9kq/XX+G8Umg 37zk7ekjbLpudCxZZBjATPp59aeuuifrrhQMFOtHTKny/w5gxOUQ0jJqly7SIYXt aXJm8akvtuJIpiC9w5ZcuaSmZucS1NdNy+pCd2BMRt9R4Z+uGHI7mIZkIeyadaFs QKYyXi+9umH3z8tjHg+6ObtsKr8kdEzSMMHjdGwUHVyg0eSv5aJOB3PO71ne+d9I x6DQQB89UZVDgg5A7919wJdY+aJyLF1HLuX8slFz997j3V0uawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo0VUdkQrobDhphiqXAe/BWnDl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhkMWJhZjUtNmQ4YS0z ZWRjLWI1Y2ItOTBhZTc1NTZmMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANcm8AqpHjAWcv6LBTalKkZgKNfXr8AsYDqdYQL3+JPmTGoWGf5HFhof bBYlY3Szkz7BfG2JletmcYOnJtkqqVV2D/0kLMfhMPwJxvLKLp2bgFp2Fk9t4igL mmManjQiVrvHlrwjB6bHQtbnq0IZfcmX/SKOPeFd4+K/nX8phGxhREItiYd1PGxh nk8fBxwkKPivXiVXVl7592UmJmua83jf45ZImO8hIlljNuVXzrZJgCsBYwScxaxM NBoLUJHvSBprdIyDe8MZYLTrFIJ2tgZGS7U/NrWtsVj6rYcLxNTUzX4FG8F8ZydC P0a2s0fROGpH8yRrg+VMJuLLiCQs1Fw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:39 2025 by rpki-client