$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41770ff4-0f6a-3e79-a0ae-05bf0ac671e4.roa File: 41770ff4-0f6a-3e79-a0ae-05bf0ac671e4.roa (raw, json) Hash identifier: kJQ2BLEL/jpUdHfY7KE6gvOaJpi6TgwVVlDM8JlBY94= Subject key identifier: C7:5A:09:CE:38:FA:93:B4:E0:EE:F1:0D:57:85:C7:AE:44:77:83:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB79D77C5D0E65724F70C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41770ff4-0f6a-3e79-a0ae-05bf0ac671e4.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 69.252.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:9d:77:c5:d0:e6:57:24:f7:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6ac418c5-937b-4316-84e1-c1d50f07fdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:be:ca:50:96:e6:e4:7a:90:6d:7f:b5:8f: 3a:4d:61:21:e5:8c:ac:a3:01:54:b6:96:cd:1e:0a: c1:d5:e3:20:f0:e9:8e:ac:7e:19:5c:9c:cc:a4:d7: c6:b1:f2:ed:3b:ba:ba:00:7b:05:90:bc:71:0e:c1: 84:40:7b:e1:e7:52:b4:1b:48:ae:35:e6:b5:94:e0: 76:5b:32:f9:b6:13:da:97:0b:92:e4:4d:ff:80:e4: 84:90:24:4c:5d:a2:36:24:1c:d1:cb:fb:59:fe:ec: fc:48:17:5d:e3:f0:e5:91:95:1d:c3:8e:ea:df:cd: e2:14:59:50:19:b4:6f:67:40:10:80:ab:39:2c:5e: df:72:86:bb:a6:b3:5e:3e:7b:96:6b:f9:0d:11:88: 17:ca:fd:dc:da:ca:cf:ce:b7:8b:7b:36:ac:8f:f0: c5:3c:10:f7:ba:a6:d8:50:28:cd:b2:00:7b:b5:8b: cd:20:7b:e3:06:04:4f:d1:7d:1c:95:45:e3:7a:79: ef:6c:ed:74:b2:92:85:a7:e8:e0:b0:47:e4:a5:d5: cb:37:18:5e:41:ea:df:08:31:e2:27:d2:79:33:25: 95:44:51:57:b5:be:b7:b2:fd:2c:74:e8:36:bb:b9: 80:bd:82:23:24:41:bc:c8:9d:ad:af:23:17:8e:b8: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5A:09:CE:38:FA:93:B4:E0:EE:F1:0D:57:85:C7:AE:44:77:83:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41770ff4-0f6a-3e79-a0ae-05bf0ac671e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.252.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b2:d7:bc:0c:ba:d7:3b:73:85:08:d8:80:22:bc:8f:f9:d7: d5:7c:8d:40:59:d0:fa:c8:3e:ab:b3:32:65:df:9d:2f:01:04: 58:52:c3:04:a3:e2:71:4a:b4:b3:cf:c9:3a:13:40:31:dd:51: a2:fb:00:df:5c:dd:39:c3:e8:12:34:9a:f4:49:1e:d6:4f:61: 88:12:a7:e7:16:ea:15:52:d6:ce:b2:a6:9f:d5:42:e5:5d:34: d0:20:0b:8b:b3:07:c3:74:fe:c2:e2:ee:3f:41:52:90:65:2b: 71:ef:a7:70:ca:f9:4a:b2:f0:03:0b:86:25:0a:09:74:8a:e6: 50:70:05:36:64:ad:96:c3:81:10:96:0e:78:b8:c0:49:cd:e9: d8:93:e7:33:de:1d:a9:b5:c0:b1:96:5b:d4:31:60:26:7c:c8: 7e:84:35:25:5f:b6:2c:6a:b3:b9:83:c7:c0:c4:83:02:07:4c: ce:fa:f5:2b:f9:9a:db:27:06:f5:7f:e4:04:de:d9:b8:78:92: 94:fc:85:94:50:d9:b8:da:71:0f:42:2a:0a:3f:82:9f:39:3f: 0b:ef:0e:bb:f4:21:ca:a0:58:11:d8:b5:be:01:db:a7:68:c2: 95:00:22:c4:8c:36:00:bd:27:8e:ee:49:c7:d6:39:06:5b:85: e0:38:07:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t513xdDmVyT3DEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NmFjNDE4YzUtOTM3Yi00MzE2LTg0ZTEtYzFkNTBmMDdmZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonO+ylCW5uR6kG1/tY86TWEh5YysowFUtpbN HgrB1eMg8OmOrH4ZXJzMpNfGsfLtO7q6AHsFkLxxDsGEQHvh51K0G0iuNea1lOB2 WzL5thPalwuS5E3/gOSEkCRMXaI2JBzRy/tZ/uz8SBdd4/DlkZUdw47q383iFFlQ GbRvZ0AQgKs5LF7fcoa7prNePnuWa/kNEYgXyv3c2srPzreLezasj/DFPBD3uqbY UCjNsgB7tYvNIHvjBgRP0X0clUXjennvbO10spKFp+jgsEfkpdXLNxheQerfCDHi J9J5MyWVRFFXtb63sv0sdOg2u7mAvYIjJEG8yJ2tryMXjriv3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdaCc44+pO04O7xDVeFx65Ed4PmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDE3NzBmZjQtMGY2YS0z ZTc5LWEwYWUtMDViZjBhYzY3MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARfz/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+y17wMutc7c4UI2IAivI/519V8jUBZ0PrIPquzMmXfnS8BBFhSwwSj 4nFKtLPPyToTQDHdUaL7AN9c3TnD6BI0mvRJHtZPYYgSp+cW6hVS1s6ypp/VQuVd NNAgC4uzB8N0/sLi7j9BUpBlK3Hvp3DK+Uqy8AMLhiUKCXSK5lBwBTZkrZbDgRCW Dni4wEnN6diT5zPeHam1wLGWW9QxYCZ8yH6ENSVftixqs7mDx8DEgwIHTM769Sv5 mtsnBvV/5ATe2bh4kpT8hZRQ2bjacQ9CKgo/gp85PwvvDrv0IcqgWBHYtb4B26do wpUAIsSMNgC9J47uScfWOQZbheA4B3U= -----END CERTIFICATE-----Generated at Mon Oct 20 02:41:48 2025 by rpki-client