$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa File: a11e2bc2-1e0e-354d-bd14-108c085092c8.roa (raw, json) Hash identifier: SxlEViYWdhXnXNL2dO3Q2UhBHycbqpyS7xusIcx2XqU= Subject key identifier: 0C:52:91:21:5D:27:68:9D:3E:63:A2:7F:78:16:C2:FA:56:33:B0:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8B85C25C6417067B95140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 71.228.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:b8:5c:25:c6:41:70:67:b9:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=bfd9b58b-a158-4f51-9c83-ee7a019740df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:e8:a9:4d:dc:9c:20:19:39:35:d6:82:b6: f8:73:ee:90:ce:c4:0c:f8:17:e7:cd:a2:9e:ac:bd: ee:8b:64:9c:b0:bb:ab:9a:c4:51:7d:dc:d1:85:bf: 8c:b3:91:04:fb:18:91:ba:8a:a0:11:ea:6d:cb:83: 62:1d:54:95:11:82:44:41:a7:b2:67:c0:6a:bb:7d: a4:d1:c0:cf:f4:62:16:38:4f:1d:09:9f:cf:10:f0: 2b:c6:18:3b:d6:86:8a:16:6e:d1:87:ae:95:40:30: 01:5c:cd:d1:84:b8:d3:7b:66:9a:96:10:2f:ee:96: 23:4f:c0:b1:6c:ce:45:5c:14:5a:29:4f:60:58:c6: ec:a9:56:48:bb:8a:4c:09:86:c3:c5:ca:18:ef:85: 3b:c7:3d:d0:cc:95:bd:6b:02:05:56:8c:fe:cc:85: 63:c4:27:41:c2:4c:68:0c:de:14:17:76:37:56:31: 74:ea:78:5e:a6:f2:07:24:4f:10:4c:15:9c:d3:73: 78:8c:31:b0:cd:8e:44:12:a6:04:ec:0f:1d:d2:a5: a9:49:b9:43:fa:b3:2f:cb:2b:13:8e:1d:55:6e:54: ef:f5:fa:d6:62:da:0c:8a:5b:fd:70:53:2f:8e:e3: 7b:7a:5e:bc:ed:b2:65:bb:75:61:83:38:31:db:3e: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:52:91:21:5D:27:68:9D:3E:63:A2:7F:78:16:C2:FA:56:33:B0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b7:86:53:01:11:1a:b5:ff:63:e7:61:11:d0:28:78:29:a2: 93:69:21:e7:c7:22:bd:c5:83:d5:37:7c:ad:49:17:d0:8b:f4: 87:cc:3e:a1:c9:c4:c1:93:04:bd:a2:1b:4d:3b:94:c8:f0:cb: 1a:9e:1d:41:2b:0a:87:1a:f1:1e:de:75:9b:03:87:f0:78:8c: 45:a7:55:1d:f0:30:57:d0:f0:d9:0b:d9:79:50:2c:92:aa:cc: 85:72:30:c2:58:8b:13:a7:de:bd:8d:8f:17:d5:5a:14:a6:96: 2d:e3:ae:12:d5:b9:2d:3d:27:92:9d:be:8f:f6:f7:e9:13:2a: 12:ae:b4:96:28:90:fb:0d:99:80:79:39:d7:b7:13:b4:b5:5d: 1c:3e:ac:04:cc:04:13:07:cf:9c:ce:99:0b:3b:12:40:9a:b7: 90:de:d9:36:cf:23:ff:cf:95:26:c2:53:6e:af:60:7b:3f:1f: e4:12:6d:7a:e1:a3:e9:0d:05:b6:85:b8:2d:98:0f:4f:d9:60: 8e:9c:c6:9a:e9:7c:0d:83:a4:31:5c:20:86:b3:33:2a:0a:7e: a1:3b:c5:b3:2a:00:1a:31:4e:67:cb:1f:c4:04:80:87:04:f8: 58:1b:8e:c0:77:d4:63:fc:2a:23:d0:ea:9d:31:19:70:69:de: 2d:cb:a0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uLhcJcZBcGe5UUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmZkOWI1OGItYTE1OC00ZjUxLTljODMtZWU3YTAxOTc0MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0boqU3cnCAZOTXWgrb4c+6QzsQM+BfnzaKe rL3ui2ScsLurmsRRfdzRhb+Ms5EE+xiRuoqgEepty4NiHVSVEYJEQaeyZ8Bqu32k 0cDP9GIWOE8dCZ/PEPArxhg71oaKFm7Rh66VQDABXM3RhLjTe2aalhAv7pYjT8Cx bM5FXBRaKU9gWMbsqVZIu4pMCYbDxcoY74U7xz3QzJW9awIFVoz+zIVjxCdBwkxo DN4UF3Y3VjF06nhepvIHJE8QTBWc03N4jDGwzY5EEqYE7A8d0qWpSblD+rMvyysT jh1VblTv9frWYtoMilv9cFMvjuN7el687bJlu3Vhgzgx2z6BWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxSkSFdJ2idPmOif3gWwvpWM7CdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTExZTJiYzItMWUwZS0z NTRkLWJkMTQtMTA4YzA4NTA5MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+T4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEW3hlMBERq1/2PnYRHQKHgpopNpIefHIr3Fg9U3fK1JF9CL9IfMPqHJ xMGTBL2iG007lMjwyxqeHUErCoca8R7edZsDh/B4jEWnVR3wMFfQ8NkL2XlQLJKq zIVyMMJYixOn3r2NjxfVWhSmli3jrhLVuS09J5Kdvo/29+kTKhKutJYokPsNmYB5 Ode3E7S1XRw+rATMBBMHz5zOmQs7EkCat5De2TbPI//PlSbCU26vYHs/H+QSbXrh o+kNBbaFuC2YD0/ZYI6cxprpfA2DpDFcIIazMyoKfqE7xbMqABoxTmfLH8QEgIcE +FgbjsB31GP8KiPQ6p0xGXBp3i3LoAs= -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:36 2025 by rpki-client