$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f59e4b1-236a-33f0-a2cc-1138d132b388.roa File: 7f59e4b1-236a-33f0-a2cc-1138d132b388.roa (raw, json) Hash identifier: 8NyZRSd/K81xhLFFoTMlXCiPxyGHU76YqROUHdaR2ys= Subject key identifier: 14:48:A4:77:07:10:66:02:8B:0F:6A:CA:C8:FC:46:C7:0A:B7:E0:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB99CC923A28291906AF800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f59e4b1-236a-33f0-a2cc-1138d132b388.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 71.193.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:9c:c9:23:a2:82:91:90:6a:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d1f78fe1-7d1a-4bb5-a067-7e23170404ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:01:62:b2:12:d0:dd:dd:24:74:9e:92:52:f1: de:e6:ca:5e:e6:6d:bc:ab:77:ee:56:f6:1b:7a:ba: 77:cf:49:70:a2:aa:a3:00:fd:90:4b:9f:da:98:7e: 0f:fc:91:03:46:00:cb:28:bb:50:4a:55:97:34:15: 0f:29:cc:0c:1c:6a:50:96:1c:d3:dc:a5:06:75:6b: f4:c9:19:3e:c1:4b:23:7f:a5:53:60:0f:28:16:27: b7:16:53:ba:c9:de:da:ea:d2:5d:25:8a:cb:54:86: 92:55:8b:04:b5:a2:df:be:b6:b7:7a:9f:75:2e:d5: 02:0d:78:0f:1c:0f:78:19:9d:ca:c9:f7:ea:af:a5: 3f:6d:0a:ea:5c:a1:ac:28:32:f6:8a:e9:d5:f5:4f: 63:97:a8:b3:79:0d:8e:7a:5e:10:5a:ce:df:b1:81: 29:2e:0a:5c:c7:dc:4a:d1:df:86:a0:97:e4:91:33: d4:14:ce:97:e3:43:57:2b:88:ad:aa:17:d1:34:12: 02:76:15:20:a6:2d:6b:97:1e:e3:c5:56:de:d4:d9: 19:ab:07:c3:34:42:a5:17:99:f0:d3:d3:15:a3:10: 5e:c7:97:2e:60:78:46:72:74:6a:4c:28:ef:57:74: 7d:cb:e9:c9:df:85:65:d1:05:c9:2c:53:95:62:fb: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:A4:77:07:10:66:02:8B:0F:6A:CA:C8:FC:46:C7:0A:B7:E0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f59e4b1-236a-33f0-a2cc-1138d132b388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d8:f8:db:36:63:b9:54:64:44:39:8c:a5:bd:c2:09:30:c4: 88:53:5e:4f:c5:5b:c5:e2:21:8f:5a:ba:5f:75:c2:2e:65:f9: aa:5e:80:2b:47:bf:99:97:74:6a:56:66:b0:fa:d7:a0:fe:b5: 08:41:49:46:d9:fd:52:5b:7a:66:a5:3e:12:e0:d6:a1:2b:40: f1:a4:5b:5e:a5:73:f1:63:4d:c7:37:3b:a5:ff:04:05:97:0f: 61:24:f5:2d:4f:6b:0f:e7:40:f3:35:f4:42:d9:a3:bc:a4:31: 7f:78:73:75:a8:82:0b:b4:5e:de:24:e7:e9:31:26:fc:2e:6c: 0f:3a:80:49:1e:2a:c2:74:66:a6:77:7d:be:b1:8c:15:8c:49: c7:2c:68:38:88:67:ed:01:aa:b6:45:83:aa:46:38:1c:cd:8f: bf:62:c2:3a:85:65:a5:68:a1:8b:17:70:9a:aa:ff:98:9a:ac: b4:a4:a4:66:2a:ab:01:dd:59:f8:fd:90:be:dc:c9:f0:bb:17: 68:29:ff:04:c3:c3:c0:e5:a4:48:63:e3:eb:f7:e8:78:1c:9c: d4:f6:63:5d:5a:b8:07:4c:fb:b7:61:4d:f3:64:10:d6:f8:91: 86:30:24:1c:7e:1d:15:24:75:a7:74:49:54:ba:4b:a4:da:39: 4d:79:c8:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uZzJI6KCkZBq+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDFmNzhmZTEtN2QxYS00YmI1LWEwNjctN2UyMzE3MDQwNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAFishLQ3d0kdJ6SUvHe5spe5m28q3fuVvYb erp3z0lwoqqjAP2QS5/amH4P/JEDRgDLKLtQSlWXNBUPKcwMHGpQlhzT3KUGdWv0 yRk+wUsjf6VTYA8oFie3FlO6yd7a6tJdJYrLVIaSVYsEtaLfvra3ep91LtUCDXgP HA94GZ3Kyffqr6U/bQrqXKGsKDL2iunV9U9jl6izeQ2Oel4QWs7fsYEpLgpcx9xK 0d+GoJfkkTPUFM6X40NXK4itqhfRNBICdhUgpi1rlx7jxVbe1NkZqwfDNEKlF5nw 09MVoxBex5cuYHhGcnRqTCjvV3R9y+nJ34Vl0QXJLFOVYvupcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRIpHcHEGYCiw9qysj8RscKt+CWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Y1OWU0YjEtMjM2YS0z M2YwLWEyY2MtMTEzOGQxMzJiMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8FIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnY+Ns2Y7lUZEQ5jKW9wgkwxIhTXk/FW8XiIY9aul91wi5l+apegCtH v5mXdGpWZrD616D+tQhBSUbZ/VJbemalPhLg1qErQPGkW16lc/FjTcc3O6X/BAWX D2Ek9S1Paw/nQPM19ELZo7ykMX94c3Woggu0Xt4k5+kxJvwubA86gEkeKsJ0ZqZ3 fb6xjBWMSccsaDiIZ+0BqrZFg6pGOBzNj79iwjqFZaVooYsXcJqq/5iarLSkpGYq qwHdWfj9kL7cyfC7F2gp/wTDw8DlpEhj4+v36HgcnNT2Y11auAdM+7dhTfNkENb4 kYYwJBx+HRUkdad0SVS6S6TaOU15yIM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:17:08 2025 by rpki-client