$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2e6b42-4b41-394c-a2f4-946f5c1b8cc6.roa File: ae2e6b42-4b41-394c-a2f4-946f5c1b8cc6.roa (raw, json) Hash identifier: ONTlahCUtoSw2qJIYtI2O5Bytj6nfmE81FaITXXcvN4= Subject key identifier: F0:26:22:6D:B8:E6:C2:48:44:5E:B7:43:38:F8:59:B1:A8:FA:7C:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A747CE88098FF6A43F0C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2e6b42-4b41-394c-a2f4-946f5c1b8cc6.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 71.194.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:47:ce:88:09:8f:f6:a4:3f:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=81e3a1a8-d406-4055-99bc-31831c62d07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:d4:ab:62:8e:35:ec:60:0a:2f:57:73:aa: ea:3a:73:b4:89:4b:2a:36:c1:27:96:88:c7:3f:df: b6:83:98:14:6a:b1:a8:f3:2a:f1:a0:dd:75:28:e8: 06:86:41:56:f9:e9:a2:47:9b:47:c5:8d:ae:55:81: 29:06:a3:52:db:1e:0d:0e:48:d0:78:34:eb:72:b1: 3b:7f:4e:58:51:b5:3b:dc:28:a1:9e:de:eb:c1:a8: 18:62:6e:f9:ea:7f:fd:12:85:4a:1f:1b:5b:8c:75: f4:61:1c:e5:49:1f:f3:6c:1a:9b:00:31:e0:20:e5: fd:79:ea:de:89:ee:39:59:2f:6b:54:f6:88:b3:27: b1:02:14:f3:4c:e7:4a:66:3b:d8:5c:65:be:4c:81: 55:58:d6:10:fa:07:2e:6a:e2:f8:75:7f:33:2a:d5: 50:8c:f9:d4:76:48:5c:03:6b:77:56:b6:1a:b8:c1: 98:d6:95:ea:e1:cc:4d:6b:0d:1d:2d:0c:f2:62:57: ad:40:1e:28:2b:9f:fc:46:f6:e4:64:51:bf:77:3a: ce:32:00:e1:d1:bc:6c:44:0f:d6:1d:01:bd:bf:d6: 0b:03:79:73:fc:8a:16:c8:fc:5d:d9:42:f7:9c:ae: a1:92:a6:08:5c:e9:23:e2:9e:2a:82:25:d0:c2:c3: 30:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:26:22:6D:B8:E6:C2:48:44:5E:B7:43:38:F8:59:B1:A8:FA:7C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2e6b42-4b41-394c-a2f4-946f5c1b8cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:aa:52:69:54:ff:aa:d9:e7:cd:36:d8:af:24:78:f9:3e:44: 68:56:2d:a5:2d:48:14:7c:df:f7:c4:51:ed:17:9e:16:d1:f7: 42:49:d9:1e:db:b7:a3:42:7f:5e:81:ef:39:58:9f:5a:85:4f: d9:c0:3b:4b:d6:79:d5:f0:9a:14:08:fd:f8:05:e5:32:d3:85: 94:4a:f1:dc:2c:17:a1:28:c9:1d:f8:1c:16:df:32:34:9b:2e: 61:8c:7e:f6:b3:96:7d:51:77:d3:31:cd:f4:31:f0:e2:ea:eb: 0e:d1:80:12:40:05:62:a2:55:ab:d2:83:77:1d:63:09:c5:6f: cd:ce:34:2d:06:a8:4c:e2:05:3e:df:bb:0c:8e:d5:a2:95:00: 0d:53:3b:60:99:a3:a7:04:0c:72:5c:9e:e8:45:e9:8b:6d:f7: 4c:87:e7:e3:e2:a4:3e:fb:32:a2:f7:04:c6:c0:34:2d:a8:34: 7e:95:35:46:e5:5f:72:71:3b:1f:35:d8:46:70:9a:97:5f:b6: 5f:86:1e:68:9d:d8:ed:8e:4d:a8:f4:cc:97:e0:90:0a:ae:f8: 72:07:af:3b:f2:78:4a:88:3e:a2:b6:b0:a6:bc:b9:a2:49:61: b0:32:1f:81:65:cd:2c:9a:c5:77:6f:10:b2:ae:02:0e:9f:c5: 38:cb:26:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp0fOiAmP9qQ/DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ODFlM2ExYTgtZDQwNi00MDU1LTk5YmMtMzE4MzFjNjJkMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KnUq2KONexgCi9Xc6rqOnO0iUsqNsEnlojH P9+2g5gUarGo8yrxoN11KOgGhkFW+emiR5tHxY2uVYEpBqNS2x4NDkjQeDTrcrE7 f05YUbU73Cihnt7rwagYYm756n/9EoVKHxtbjHX0YRzlSR/zbBqbADHgIOX9eere ie45WS9rVPaIsyexAhTzTOdKZjvYXGW+TIFVWNYQ+gcuauL4dX8zKtVQjPnUdkhc A2t3VrYauMGY1pXq4cxNaw0dLQzyYletQB4oK5/8RvbkZFG/dzrOMgDh0bxsRA/W HQG9v9YLA3lz/IoWyPxd2UL3nK6hkqYIXOkj4p4qgiXQwsMwbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAmIm245sJIRF63Qzj4WbGo+nzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWUyZTZiNDItNGI0MS0z OTRjLWEyZjQtOTQ2ZjVjMWI4Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8KKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOqUmlU/6rZ58022K8kePk+RGhWLaUtSBR83/fEUe0XnhbR90JJ2R7b t6NCf16B7zlYn1qFT9nAO0vWedXwmhQI/fgF5TLThZRK8dwsF6EoyR34HBbfMjSb LmGMfvazln1Rd9MxzfQx8OLq6w7RgBJABWKiVavSg3cdYwnFb83ONC0GqEziBT7f uwyO1aKVAA1TO2CZo6cEDHJcnuhF6Ytt90yH5+PipD77MqL3BMbANC2oNH6VNUbl X3JxOx812EZwmpdftl+GHmid2O2OTaj0zJfgkAqu+HIHrzvyeEqIPqK2sKa8uaJJ YbAyH4FlzSyaxXdvELKuAg6fxTjLJlc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:17:12 2025 by rpki-client