$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f922d54-fa47-3f81-be65-a28372dc33c5.roa File: 3f922d54-fa47-3f81-be65-a28372dc33c5.roa (raw, json) Hash identifier: Xd5c7Qo3n4kTdjjyi3tyEcQowlwQ4tSpu6evh2UQnQw= Subject key identifier: F3:46:11:39:59:55:6D:C7:0C:18:B8:4E:D0:72:F0:BE:B9:B0:5D:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BA53740460680D608100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f922d54-fa47-3f81-be65-a28372dc33c5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 107.4.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:ba:53:74:04:60:68:0d:60:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a9e16788-76fe-4d4e-a339-db9d7460c3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:0b:3c:98:51:71:99:fd:59:41:f5:77:cf: d9:80:04:2e:61:2d:ae:e2:9b:c0:70:96:8b:b5:53: 67:7b:1e:0a:30:44:19:d5:b4:9e:80:05:19:3a:fd: 5a:56:83:96:36:19:b8:1d:5c:60:8f:bb:d2:68:27: a0:f1:08:fa:33:06:f9:f2:b2:a8:27:37:26:63:20: 97:c6:08:8b:b9:31:f5:01:71:ed:64:1f:25:48:1e: 6e:47:05:3c:59:16:95:a4:43:27:39:e7:34:52:f7: 21:c7:e0:23:65:d5:a2:e4:7d:26:27:38:c3:ef:0c: 99:c1:f2:13:8b:2e:3a:60:04:e0:3a:d1:c5:b3:97: d7:97:b9:08:50:d2:69:6c:1c:0a:6f:1d:b4:c1:e7: 28:bf:c0:a9:40:6a:44:20:bc:2b:07:f3:96:3e:3b: 55:55:6f:a0:7c:7a:f9:6a:04:2a:d0:20:00:76:cf: d7:f8:3c:fb:89:0a:be:ab:33:af:01:f8:51:6a:0b: 89:92:d4:88:34:ef:a8:0b:20:2b:79:fb:98:c4:c6: 4d:28:67:4b:05:40:fb:4a:dc:98:e5:24:92:ec:77: e6:09:1b:f0:60:28:f0:4f:7b:e6:1d:5f:1f:65:48: 32:3c:47:af:98:3f:6a:f2:6c:20:7f:24:b8:40:d5: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:46:11:39:59:55:6D:C7:0C:18:B8:4E:D0:72:F0:BE:B9:B0:5D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f922d54-fa47-3f81-be65-a28372dc33c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.4.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:27:fb:e2:e2:42:6c:19:40:d2:f7:2e:e3:10:1e:19:41:23: ca:63:7c:4a:30:78:ce:db:83:a3:b8:5e:17:34:68:c3:5d:22: a5:66:cb:62:b0:fd:0d:e6:31:4e:26:12:26:d3:f8:21:bc:42: 0c:1e:a5:d2:44:f1:92:84:bd:ce:72:83:f2:3b:f9:37:2a:55: dd:43:10:d5:5a:c6:65:94:15:c4:38:cb:3c:9d:59:4a:22:d3: ba:7d:23:c7:e2:bb:21:e6:e7:25:44:da:5d:89:a9:8a:db:ca: a7:bd:1b:6d:f2:7f:3d:39:0b:67:f4:25:ad:6a:49:76:73:1a: 33:72:ca:d6:bc:06:14:be:36:d6:b5:ab:61:bc:57:a8:bb:41: 63:ec:12:9f:08:a0:24:5c:7a:f9:ab:93:7f:35:23:fc:31:5d: 15:78:ce:c0:14:0f:17:86:e4:b8:e3:1c:00:23:13:2b:33:e8: c3:3e:4e:7c:2d:8f:7f:27:29:a7:ad:fb:df:80:b3:6b:ba:a0: 94:90:89:a6:cd:44:98:39:5b:ba:dc:96:65:5e:42:c6:d5:cd: 3c:61:55:dc:15:79:f0:5a:15:98:cd:f6:09:b5:1d:34:45:6d: 6d:7c:a7:2c:1b:8e:11:8b:fa:79:81:8e:74:1b:36:2a:ac:a6: 00:97:bf:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ubpTdARgaA1ggQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTllMTY3ODgtNzZmZS00ZDRlLWEzMzktZGI5ZDc0NjBjM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQYLPJhRcZn9WUH1d8/ZgAQuYS2u4pvAcJaL tVNnex4KMEQZ1bSegAUZOv1aVoOWNhm4HVxgj7vSaCeg8Qj6Mwb58rKoJzcmYyCX xgiLuTH1AXHtZB8lSB5uRwU8WRaVpEMnOec0Uvchx+AjZdWi5H0mJzjD7wyZwfIT iy46YATgOtHFs5fXl7kIUNJpbBwKbx20wecov8CpQGpEILwrB/OWPjtVVW+gfHr5 agQq0CAAds/X+Dz7iQq+qzOvAfhRaguJktSINO+oCyArefuYxMZNKGdLBUD7StyY 5SSS7HfmCRvwYCjwT3vmHV8fZUgyPEevmD9q8mwgfyS4QNWQUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNGETlZVW3HDBi4TtBy8L65sF3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y5MjJkNTQtZmE0Ny0z ZjgxLWJlNjUtYTI4MzcyZGMzM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDawT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0n++LiQmwZQNL3LuMQHhlBI8pjfEoweM7bg6O4Xhc0aMNdIqVmy2Kw /Q3mMU4mEibT+CG8QgwepdJE8ZKEvc5yg/I7+TcqVd1DENVaxmWUFcQ4yzydWUoi 07p9I8fiuyHm5yVE2l2JqYrbyqe9G23yfz05C2f0Ja1qSXZzGjNyyta8BhS+Nta1 q2G8V6i7QWPsEp8IoCRcevmrk381I/wxXRV4zsAUDxeG5LjjHAAjEysz6MM+Tnwt j38nKaet+9+As2u6oJSQiabNRJg5W7rclmVeQsbVzTxhVdwVefBaFZjN9gm1HTRF bW18pywbjhGL+nmBjnQbNiqspgCXv68= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:52 2025 by rpki-client