$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a22842f7-96ea-302b-a309-2bb2817c600a.roa File: a22842f7-96ea-302b-a309-2bb2817c600a.roa (raw, json) Hash identifier: aPDNZXMEpFN6ev+WokmGFbyE2ovptvMmz4l6Z1eh37k= Subject key identifier: 49:21:E9:87:4C:41:96:25:47:E9:9A:CD:3C:4E:2C:0B:A4:5A:5C:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7FFDF3C62175DFECC3500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a22842f7-96ea-302b-a309-2bb2817c600a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 71.193.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:ff:df:3c:62:17:5d:fe:cc:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c938df28-b44d-4fd1-ac00-0c2f83a67838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:48:aa:71:65:e8:6e:36:a4:10:6d:5d:fd: 1a:24:73:f5:5d:c0:24:60:04:b5:d7:92:d0:14:9a: 5c:1e:44:fa:e0:79:db:83:31:dc:5d:d9:95:6a:3e: dc:be:e3:22:6b:df:f4:6f:85:f9:4a:6f:af:3c:80: af:9d:28:2f:c8:fa:6e:5c:51:d7:ee:68:a7:6c:17: f5:85:b6:7a:98:14:45:f5:f4:ff:6a:93:52:17:9c: f4:10:a8:20:09:14:f8:3d:95:8e:f1:b9:5e:74:1f: d9:04:27:ab:17:2c:f3:99:c0:ac:98:d4:2b:e0:7a: 75:4d:64:fb:d9:17:13:f4:19:3b:30:d8:3c:18:63: 4f:86:7e:f8:aa:e8:85:6b:ef:69:fd:ad:ba:d5:1f: c4:40:e1:57:54:53:27:4f:22:7a:a3:7e:f9:25:c7: 51:bb:95:91:b0:d5:fe:e7:be:56:d7:dc:42:c2:ed: cd:94:13:c1:de:38:67:c7:b5:82:d0:ae:2e:52:aa: 2d:0e:38:89:3d:41:64:3a:c2:8b:fc:b0:f7:09:91: 32:67:bb:57:1e:64:75:47:92:9d:b6:3e:2c:d6:d9: 1e:e2:e7:28:56:32:18:48:fe:c1:d5:1e:a5:32:4f: b7:c9:fc:1c:41:2e:db:7f:24:a6:eb:d4:11:39:33: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:21:E9:87:4C:41:96:25:47:E9:9A:CD:3C:4E:2C:0B:A4:5A:5C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a22842f7-96ea-302b-a309-2bb2817c600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9f:70:3e:13:82:67:82:33:14:b4:cf:ed:18:b5:99:28:1a: f8:56:b8:74:4e:b1:e1:d9:df:a5:4e:9b:13:36:2e:f2:ce:86: 90:95:08:e0:77:68:e3:07:99:3d:a8:3f:11:8f:87:5a:1c:e1: ee:df:71:5f:64:45:1a:94:81:f9:64:be:12:f8:fa:6a:d3:b8: 27:3d:be:0b:2a:63:55:5c:75:a5:1c:a4:cd:03:3c:4d:c0:31: cb:5e:90:92:c7:73:7b:b4:b1:15:81:c9:a0:eb:bc:3c:77:c2: 5e:d3:7f:38:3d:0d:ea:24:af:25:ce:e0:7f:b8:95:8b:2d:63: 36:32:d5:0c:81:fc:e7:85:3e:08:c2:c9:06:a5:be:26:3c:87: 5a:94:58:d5:64:c3:d0:2f:db:e0:11:55:e1:1c:bd:7d:b0:fd: ea:9d:09:d6:6d:92:02:32:2e:c9:38:8f:f9:7f:61:93:d3:b4: d4:a7:de:fc:94:e7:3d:b4:cb:33:19:86:02:db:d1:bf:25:c0: 28:8d:f6:48:65:a8:e5:35:dc:08:05:ac:74:63:23:61:5e:8e: ff:96:6b:35:a1:47:39:23:e2:5c:6b:f5:28:14:89:a0:7d:1c: bc:06:c7:d2:72:4f:0c:df:39:79:03:c4:f3:54:bc:a8:39:63: 1f:55:03:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t//fPGIXXf7MNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzkzOGRmMjgtYjQ0ZC00ZmQxLWFjMDAtMGMyZjgzYTY3ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48FIqnFl6G42pBBtXf0aJHP1XcAkYAS115LQ FJpcHkT64HnbgzHcXdmVaj7cvuMia9/0b4X5Sm+vPICvnSgvyPpuXFHX7minbBf1 hbZ6mBRF9fT/apNSF5z0EKggCRT4PZWO8bledB/ZBCerFyzzmcCsmNQr4Hp1TWT7 2RcT9Bk7MNg8GGNPhn74quiFa+9p/a261R/EQOFXVFMnTyJ6o375JcdRu5WRsNX+ 575W19xCwu3NlBPB3jhnx7WC0K4uUqotDjiJPUFkOsKL/LD3CZEyZ7tXHmR1R5Kd tj4s1tke4ucoVjIYSP7B1R6lMk+3yfwcQS7bfySm69QROTOikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkh6YdMQZYlR+mazTxOLAukWlyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTIyODQyZjctOTZlYS0z MDJiLWEzMDktMmJiMjgxN2M2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8FcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWfcD4TgmeCMxS0z+0YtZkoGvhWuHROseHZ36VOmxM2LvLOhpCVCOB3 aOMHmT2oPxGPh1oc4e7fcV9kRRqUgflkvhL4+mrTuCc9vgsqY1VcdaUcpM0DPE3A MctekJLHc3u0sRWByaDrvDx3wl7Tfzg9DeokryXO4H+4lYstYzYy1QyB/OeFPgjC yQalviY8h1qUWNVkw9Av2+ARVeEcvX2w/eqdCdZtkgIyLsk4j/l/YZPTtNSn3vyU 5z20yzMZhgLb0b8lwCiN9khlqOU13AgFrHRjI2Fejv+WazWhRzkj4lxr9SgUiaB9 HLwGx9JyTwzfOXkDxPNUvKg5Yx9VA7A= -----END CERTIFICATE-----Generated at Mon Oct 20 06:47:35 2025 by rpki-client