$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2d6cf7-5094-3521-92c7-75782a988fd3.roa File: 7d2d6cf7-5094-3521-92c7-75782a988fd3.roa (raw, json) Hash identifier: 9EvxIRt+XcTVH2FaViQj5YPE1QJ827gNOaBNDTFmPfk= Subject key identifier: BF:F1:57:D5:06:62:89:AA:4E:E9:85:47:C4:DF:D8:8F:19:04:3E:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7216E37F42B11D4B2CF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2d6cf7-5094-3521-92c7-75782a988fd3.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 71.193.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:21:6e:37:f4:2b:11:d4:b2:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5a9b4992-b793-4dc0-9a0a-658cfee02a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:32:ef:74:04:30:d7:9f:46:0e:08:7b:85: 1e:5f:b1:5f:ae:60:ae:bf:d3:d7:89:ae:61:b5:c0: 74:c8:b4:cd:16:fa:7f:1b:f8:73:f8:af:26:98:38: d0:21:9c:6b:77:40:17:b1:71:61:7e:04:29:e9:d8: 47:08:bd:62:1d:3d:98:64:2a:3f:11:23:5f:26:91: ac:b0:ef:8c:67:8a:38:6f:b0:15:54:07:b3:38:4b: 87:3e:a9:1f:ee:01:5a:38:90:8b:03:dc:41:3f:c0: ec:3a:09:91:89:a0:cb:25:8e:9a:ef:c2:60:36:fa: 70:14:0b:dd:d7:09:89:14:2a:4e:e9:42:f9:9f:67: 95:17:bf:48:ab:7a:8e:32:6c:f2:be:9d:5f:cf:e6: 14:e2:23:70:63:6d:6f:01:4b:a8:50:d0:67:bb:1d: 28:c3:2a:ea:5c:48:0e:7f:93:03:a5:65:0d:b6:49: 61:92:f7:47:01:c1:e1:79:52:31:3e:ca:87:43:3e: 47:c3:b7:d7:af:85:45:c0:f5:03:33:ba:71:bf:a9: ff:ad:1d:16:c3:af:b5:c4:d5:cd:d6:a5:36:85:d8: 1f:71:a4:2b:f6:91:65:88:49:47:ef:8f:5c:b9:2c: f1:6f:3a:f8:69:30:80:1b:f3:12:d4:b2:b1:6a:91: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F1:57:D5:06:62:89:AA:4E:E9:85:47:C4:DF:D8:8F:19:04:3E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d2d6cf7-5094-3521-92c7-75782a988fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:1e:19:f3:35:ba:c8:0d:0d:71:91:f4:a8:9b:86:14:9c:b9: c3:01:c0:2d:0c:a9:27:e2:a6:03:b0:47:c6:27:46:d1:73:e9: 70:9a:17:1d:e4:cf:8d:20:7a:78:fd:ed:09:54:c0:89:31:23: dd:2a:e7:4b:14:7b:2d:40:e1:89:b0:fe:56:3c:1c:1e:7f:ab: 0f:46:dc:39:71:3e:28:5f:51:90:60:bc:dc:61:a7:60:10:9a: dc:10:94:ea:42:2f:4d:40:49:b4:62:5e:ca:fe:d7:44:43:df: c6:0e:d3:99:7d:4d:61:3d:f3:aa:71:c0:51:5e:66:18:ba:ed: 89:eb:15:61:1f:ac:a8:3e:50:86:4f:d7:19:72:99:6c:bf:1e: de:e4:25:87:da:d9:30:b1:16:26:6c:41:c7:6f:07:4b:0b:b7: 68:6d:04:22:6b:e0:b9:96:64:07:01:cd:5b:56:79:e0:a7:cf: ba:1c:80:85:ba:ec:0a:a7:68:f2:02:04:f4:7c:c0:34:47:80: 26:ea:0d:d3:89:e9:78:d2:b7:95:b7:7c:34:87:e4:37:02:ac: f0:5c:f6:2d:6f:36:a1:47:fe:fb:06:7f:2e:4a:eb:2a:64:9c: f1:74:b9:24:ab:31:71:ea:28:e6:d0:90:40:d5:d6:f7:8e:58: fc:a7:72:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tyFuN/QrEdSyz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWE5YjQ5OTItYjc5My00ZGMwLTlhMGEtNjU4Y2ZlZTAyYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBky73QEMNefRg4Ie4UeX7FfrmCuv9PXia5h tcB0yLTNFvp/G/hz+K8mmDjQIZxrd0AXsXFhfgQp6dhHCL1iHT2YZCo/ESNfJpGs sO+MZ4o4b7AVVAezOEuHPqkf7gFaOJCLA9xBP8DsOgmRiaDLJY6a78JgNvpwFAvd 1wmJFCpO6UL5n2eVF79Iq3qOMmzyvp1fz+YU4iNwY21vAUuoUNBnux0owyrqXEgO f5MDpWUNtklhkvdHAcHheVIxPsqHQz5Hw7fXr4VFwPUDM7pxv6n/rR0Ww6+1xNXN 1qU2hdgfcaQr9pFliElH749cuSzxbzr4aTCAG/MS1LKxapEx9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/xV9UGYomqTumFR8Tf2I8ZBD6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2QyZDZjZjctNTA5NC0z NTIxLTkyYzctNzU3ODJhOTg4ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4eGfM1usgNDXGR9KibhhScucMBwC0MqSfipgOwR8YnRtFz6XCaFx3k z40genj97QlUwIkxI90q50sUey1A4Ymw/lY8HB5/qw9G3DlxPihfUZBgvNxhp2AQ mtwQlOpCL01ASbRiXsr+10RD38YO05l9TWE986pxwFFeZhi67YnrFWEfrKg+UIZP 1xlymWy/Ht7kJYfa2TCxFiZsQcdvB0sLt2htBCJr4LmWZAcBzVtWeeCnz7ocgIW6 7AqnaPICBPR8wDRHgCbqDdOJ6XjSt5W3fDSH5DcCrPBc9i1vNqFH/vsGfy5K6ypk nPF0uSSrMXHqKObQkEDV1veOWPyncgQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:32 2025 by rpki-client