$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558fce8e-1aad-3ae6-b664-4254deabd8d8.roa File: 558fce8e-1aad-3ae6-b664-4254deabd8d8.roa (raw, json) Hash identifier: qjXBkzGsKj6C1/lnTOiDwQLYolK0+cN24AHexyxUspY= Subject key identifier: 80:26:B5:1D:30:2C:A7:81:45:E8:28:B6:41:3E:FB:05:E3:A6:38:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8B816C59FAFC329F8C600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558fce8e-1aad-3ae6-b664-4254deabd8d8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 71.228.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:b8:16:c5:9f:af:c3:29:f8:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=7323a968-e30e-412d-8faa-57d780a1b397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:e3:76:e3:10:2f:0a:08:6a:2a:60:0c:58: b5:7e:ef:f0:5f:a2:3c:70:7a:58:2d:3d:6c:bc:fb: b0:00:86:6d:26:52:1e:84:9c:13:19:de:9a:0c:74: e9:99:db:5b:e8:35:73:b1:20:c3:8c:00:47:94:33: ba:35:e6:de:f5:0e:c7:3e:c1:ca:00:21:41:1a:bc: 52:12:48:23:b8:fa:9c:08:91:af:76:c0:b8:b8:79: a4:7b:50:13:39:d6:17:a2:74:67:26:51:06:83:02: 1a:b9:70:17:a5:e2:f5:60:d4:09:eb:d9:e2:88:0d: 23:33:49:93:3d:a0:00:5b:69:70:09:92:e4:0c:99: ba:d7:f4:99:c3:87:8d:51:77:4f:25:f7:f6:7f:79: 3c:f8:c6:05:5c:9e:88:39:d5:7a:9b:3c:85:24:05: 18:d9:c6:27:3b:16:20:c0:91:39:16:d3:b6:a8:d8: 9f:50:b1:1e:e5:dd:72:ec:65:aa:8c:f9:bb:c1:08: 68:bc:6d:42:67:a7:7f:b2:3a:44:42:eb:9f:6c:c2: 3b:68:33:4c:dd:b7:eb:23:b3:f8:54:9d:a9:6b:91: 51:c9:02:e8:8f:9b:9a:7d:af:5b:50:d1:9a:1d:5d: ea:c9:41:bf:0a:7b:a9:d0:08:13:48:e9:15:83:fe: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:26:B5:1D:30:2C:A7:81:45:E8:28:B6:41:3E:FB:05:E3:A6:38:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/558fce8e-1aad-3ae6-b664-4254deabd8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:4a:a4:61:9c:e5:d1:08:2c:25:53:1f:fa:b7:1d:d2:12:b5: d1:b9:d9:b0:69:f2:f9:7e:a3:c7:84:81:00:db:1f:43:6c:6f: 8f:d2:3e:e9:48:dd:57:2c:1b:6c:3c:6c:54:17:8b:d9:c2:1d: cb:5a:88:7e:d1:55:b4:11:f4:1b:79:d3:d4:f5:41:7e:a3:09: d3:99:09:9f:d5:35:8c:fd:c7:a5:42:da:10:fb:79:ee:8b:03: 8c:a7:4c:22:13:c7:8d:ab:4f:e6:36:2d:8c:43:36:af:db:48: 25:c5:be:14:dc:0a:84:c8:7e:03:f9:6d:d2:8e:5d:76:80:2f: f3:ba:75:29:1e:a5:18:30:d3:e3:3f:f6:a9:9d:3d:e2:2f:51: bf:9c:5f:3d:21:03:6d:62:5c:62:04:85:da:3b:cc:51:d6:41: 61:4b:2e:32:a3:61:39:f9:16:9e:4e:bb:6d:75:6d:b7:f3:eb: bc:84:d4:c8:53:50:d0:0b:92:28:91:0f:94:06:37:53:1b:ec: 99:d5:f2:a3:c9:98:63:06:67:0b:a3:9e:22:44:30:4c:53:e5: f5:93:67:ae:22:e5:c7:7c:4e:30:28:a8:15:20:dd:f0:3a:ce: d4:aa:9f:c7:4f:bc:3e:a8:0a:4b:0d:d2:dc:0d:6a:cd:cd:f0: 90:63:29:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uLgWxZ+vwyn4xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzMyM2E5NjgtZTMwZS00MTJkLThmYWEtNTdkNzgwYTFiMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1HjduMQLwoIaipgDFi1fu/wX6I8cHpYLT1s vPuwAIZtJlIehJwTGd6aDHTpmdtb6DVzsSDDjABHlDO6Nebe9Q7HPsHKACFBGrxS EkgjuPqcCJGvdsC4uHmke1ATOdYXonRnJlEGgwIauXAXpeL1YNQJ69niiA0jM0mT PaAAW2lwCZLkDJm61/SZw4eNUXdPJff2f3k8+MYFXJ6IOdV6mzyFJAUY2cYnOxYg wJE5FtO2qNifULEe5d1y7GWqjPm7wQhovG1CZ6d/sjpEQuufbMI7aDNM3bfrI7P4 VJ2pa5FRyQLoj5uafa9bUNGaHV3qyUG/Cnup0AgTSOkVg/7JZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAmtR0wLKeBRegotkE++wXjpjjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTU4ZmNlOGUtMWFhZC0z YWU2LWI2NjQtNDI1NGRlYWJkOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+TjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlKpGGc5dEILCVTH/q3HdIStdG52bBp8vl+o8eEgQDbH0Nsb4/SPulI 3VcsG2w8bFQXi9nCHctaiH7RVbQR9Bt509T1QX6jCdOZCZ/VNYz9x6VC2hD7ee6L A4ynTCITx42rT+Y2LYxDNq/bSCXFvhTcCoTIfgP5bdKOXXaAL/O6dSkepRgw0+M/ 9qmdPeIvUb+cXz0hA21iXGIEhdo7zFHWQWFLLjKjYTn5Fp5Ou211bbfz67yE1MhT UNALkiiRD5QGN1Mb7JnV8qPJmGMGZwujniJEMExT5fWTZ64i5cd8TjAoqBUg3fA6 ztSqn8dPvD6oCksN0twNas3N8JBjKU0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:33:03 2025 by rpki-client