$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c92d6a6-0da8-3317-9355-d56d423bdeda.roa File: 4c92d6a6-0da8-3317-9355-d56d423bdeda.roa (raw, json) Hash identifier: 730Cg2HRH+X9Snesp7pjybvGbvbc6Yg54RgdpZ02g/g= Subject key identifier: BE:D6:37:F2:72:B7:DF:92:38:ED:77:C6:FC:9E:4B:39:63:D0:33:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9EB320C83B33B7D04B440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c92d6a6-0da8-3317-9355-d56d423bdeda.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 70.88.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:eb:32:0c:83:b3:3b:7d:04:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3a25b17c-c702-45ca-9806-d2366f5bc8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:12:05:d2:cc:cb:74:98:9f:33:84:13:b6: 6a:34:b9:e0:b9:08:bb:01:4a:7e:e8:bd:8f:e9:f0: 47:24:0f:b3:5c:c3:9d:80:90:d2:d3:55:c5:71:e4: 48:f6:92:ef:93:e5:0b:3e:5c:9e:e9:13:e9:4d:96: 9d:ae:c6:be:61:92:1b:cf:9d:5a:98:fa:7b:35:80: 40:b5:d0:20:2d:57:8f:a0:13:85:8f:2a:7b:af:e0: 4f:e7:61:fd:13:ce:e7:8a:b6:5c:55:f2:84:ec:46: 3e:2e:bf:4f:49:6c:35:44:69:c5:e4:d1:cc:66:ee: d0:ed:46:04:e3:a7:b6:ec:e4:01:82:c6:11:ef:ec: ed:06:bd:34:ea:93:ef:fb:b8:58:da:61:74:41:88: fe:cf:59:a2:a6:f6:f0:d9:a0:8c:10:a7:a5:c4:6d: be:2a:05:ee:80:3d:e2:6d:cf:74:c7:9b:8c:57:82: 6e:a8:5d:f3:2f:fa:a3:f4:8a:c8:b0:d5:d3:8c:35: 7c:d0:1f:a2:89:e8:d7:24:c7:52:5b:c2:1c:e8:f2: ab:45:e2:1c:cf:97:3c:f0:f9:ca:99:58:e4:06:66: a3:07:36:48:3d:26:90:d3:ba:b1:2d:24:bb:4f:da: 6c:d0:41:e7:50:be:cb:d7:11:c4:21:e3:d8:e8:fe: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:37:F2:72:B7:DF:92:38:ED:77:C6:FC:9E:4B:39:63:D0:33:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c92d6a6-0da8-3317-9355-d56d423bdeda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0f:95:b7:38:32:26:81:19:b1:6a:4c:43:5d:49:18:07:c0: 15:55:72:7f:7a:51:dd:05:cc:f0:19:ce:fd:77:ad:5d:18:b8: a1:55:ec:af:04:30:c9:f7:7e:5a:f0:53:4e:97:85:8d:6b:b5: ab:de:65:29:24:cc:06:07:aa:e1:1b:b4:68:84:b5:2a:03:4f: 2f:e8:09:54:20:16:6f:e4:0b:72:ff:23:08:4d:22:57:fd:05: 0e:16:80:4a:10:22:5c:81:c6:97:65:9b:6d:7d:33:22:9b:df: a2:1a:65:35:6f:17:eb:d2:a3:8f:49:bb:94:2b:69:73:11:c9: 51:9e:18:f2:e0:ce:ca:e3:eb:a6:e6:51:38:8e:95:3e:71:ea: 44:28:ed:df:0e:72:89:22:b6:0f:6d:1a:85:59:3c:99:af:cf: 74:15:0f:1d:d1:c5:6b:28:a2:e3:ae:31:a6:22:2a:2c:be:0a: bb:ae:74:13:e4:2a:e4:f7:e9:00:c7:e2:63:1f:fa:1d:78:b0: f2:d5:aa:36:d4:9f:00:5b:70:51:a1:f3:9a:08:04:50:88:12: 75:2e:4b:96:31:13:90:43:34:84:2e:78:e1:73:6e:57:b8:62: bb:c1:80:88:33:ac:9d:0a:fe:da:df:d8:d1:15:96:4d:dd:30: cb:c2:5f:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uesyDIOzO30EtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk M2EyNWIxN2MtYzcwMi00NWNhLTk4MDYtZDIzNjZmNWJjOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWoSBdLMy3SYnzOEE7ZqNLnguQi7AUp+6L2P 6fBHJA+zXMOdgJDS01XFceRI9pLvk+ULPlye6RPpTZadrsa+YZIbz51amPp7NYBA tdAgLVePoBOFjyp7r+BP52H9E87nirZcVfKE7EY+Lr9PSWw1RGnF5NHMZu7Q7UYE 46e27OQBgsYR7+ztBr006pPv+7hY2mF0QYj+z1mipvbw2aCMEKelxG2+KgXugD3i bc90x5uMV4JuqF3zL/qj9IrIsNXTjDV80B+iiejXJMdSW8Ic6PKrReIcz5c88PnK mVjkBmajBzZIPSaQ07qxLSS7T9ps0EHnUL7L1xHEIePY6P618QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7WN/Jyt9+SOO13xvyeSzlj0DO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM5MmQ2YTYtMGRhOC0z MzE3LTkzNTUtZDU2ZDQyM2JkZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRlhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgPlbc4MiaBGbFqTENdSRgHwBVVcn96Ud0FzPAZzv13rV0YuKFV7K8E MMn3flrwU06XhY1rtaveZSkkzAYHquEbtGiEtSoDTy/oCVQgFm/kC3L/IwhNIlf9 BQ4WgEoQIlyBxpdlm219MyKb36IaZTVvF+vSo49Ju5QraXMRyVGeGPLgzsrj66bm UTiOlT5x6kQo7d8Ocokitg9tGoVZPJmvz3QVDx3RxWsoouOuMaYiKiy+CruudBPk KuT36QDH4mMf+h14sPLVqjbUnwBbcFGh85oIBFCIEnUuS5YxE5BDNIQueOFzble4 YrvBgIgzrJ0K/trf2NEVlk3dMMvCX+8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:19 2025 by rpki-client