$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b48fd514-b127-3cc4-bef6-c6ee55c0b5f8.roa File: b48fd514-b127-3cc4-bef6-c6ee55c0b5f8.roa (raw, json) Hash identifier: K0d3CjNBjckOX0JBeT6qYPbRb0RXlaUB17jPZzddZTk= Subject key identifier: D3:01:BD:E6:09:A5:DF:03:EC:BC:DF:EF:E2:AA:86:7A:57:3A:FE:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A7636250D84870EC1F3300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b48fd514-b127-3cc4-bef6-c6ee55c0b5f8.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33651 IP address blocks: 71.198.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:63:62:50:d8:48:70:ec:1f:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=ef5d467b-7315-4aed-9b64-08cac5655d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:98:eb:36:a9:6d:56:e4:7c:fd:0e:9a:c2:b9: 18:05:3f:3b:9a:b1:71:13:98:ed:b8:e7:a9:b7:16: be:87:f4:2b:24:32:fe:50:ec:01:f2:77:91:0d:e6: f4:8e:d4:b3:b0:d7:af:79:1e:39:a0:16:46:96:31: 89:01:83:8a:41:af:f0:34:85:d5:56:56:88:43:c4: d8:0a:48:65:b6:68:7d:32:fc:fc:89:40:16:94:00: 10:d1:dd:12:53:96:01:28:bd:63:67:a4:88:1b:f6: a9:45:e2:53:19:b7:6f:c8:c8:86:1a:27:c5:a2:86: 8b:30:14:4d:37:5e:10:0d:09:e9:5f:56:a7:95:8a: 07:82:cb:2b:11:e1:be:42:9d:1b:ac:c0:4c:cd:cf: 13:47:99:94:02:92:24:2a:31:57:b9:e0:6f:5b:a9: 38:7e:77:b8:7f:cc:84:90:ce:9e:9e:9e:a0:ad:ef: 83:4e:a6:4d:00:d7:f6:ac:cf:19:75:8c:b8:73:bb: e0:2a:c7:54:7c:b0:84:99:cf:41:35:e2:a3:9d:4c: a6:b7:64:b1:e2:86:aa:df:8c:13:a6:a9:93:8d:5f: 6a:2e:53:ef:f5:db:b7:95:bd:a1:20:fd:a2:5c:dc: 24:37:36:4c:88:70:fd:d2:89:36:23:0a:0d:fe:6c: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:01:BD:E6:09:A5:DF:03:EC:BC:DF:EF:E2:AA:86:7A:57:3A:FE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b48fd514-b127-3cc4-bef6-c6ee55c0b5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:a9:e3:62:ba:b1:e1:e2:2b:ba:2b:be:4a:b6:af:78:41:f2: e4:e4:0f:78:70:b9:c7:60:3e:24:4d:00:a0:91:0e:be:26:39: b8:d0:3b:c8:a2:40:f8:65:df:4c:81:54:83:d2:35:c9:33:e0: 4b:b4:5e:be:0a:4d:1e:2b:34:2a:bd:32:a3:53:38:df:9f:79: ca:ab:d5:3d:e5:63:bb:80:32:68:3e:2d:77:74:c9:d0:b1:e5: 72:68:fc:94:e9:63:f1:f8:a8:03:90:8c:3a:c7:f3:1a:81:3f: 9d:22:a1:e9:bd:66:be:dc:f5:1f:50:f0:87:c4:ae:7e:c9:fe: 49:8c:78:7d:20:6f:f8:22:15:f3:7e:67:46:79:b3:e3:3c:cc: fa:d4:87:d9:2f:c1:a0:d8:7c:3d:b2:d5:49:ac:3b:be:e4:34: b0:a5:42:db:fd:30:13:5c:74:f5:72:76:8d:de:53:b8:a6:9b: 40:7e:bf:98:69:d8:6d:43:03:72:d0:ec:4b:4d:7e:38:98:c8: 2e:91:69:59:48:0e:dd:11:9f:25:42:ef:2a:9a:05:79:04:c0: 69:d0:f4:a2:ed:50:2f:1b:6e:8d:b4:6f:25:64:6d:e1:7a:85: 53:96:69:6d:63:67:d6:82:ed:88:3b:38:71:d8:b9:ba:a7:0b: db:46:2e:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2NiUNhIcOwfMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZWY1ZDQ2N2ItNzMxNS00YWVkLTliNjQtMDhjYWM1NjU1ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJjrNqltVuR8/Q6awrkYBT87mrFxE5jtuOep txa+h/QrJDL+UOwB8neRDeb0jtSzsNeveR45oBZGljGJAYOKQa/wNIXVVlaIQ8TY Ckhltmh9Mvz8iUAWlAAQ0d0SU5YBKL1jZ6SIG/apReJTGbdvyMiGGifFooaLMBRN N14QDQnpX1anlYoHgssrEeG+Qp0brMBMzc8TR5mUApIkKjFXueBvW6k4fne4f8yE kM6enp6gre+DTqZNANf2rM8ZdYy4c7vgKsdUfLCEmc9BNeKjnUymt2Sx4oaq34wT pqmTjV9qLlPv9du3lb2hIP2iXNwkNzZMiHD90ok2IwoN/mz2gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMBveYJpd8D7Lzf7+KqhnpXOv4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQ4ZmQ1MTQtYjEyNy0z Y2M0LWJlZjYtYzZlZTU1YzBiNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8ZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+p42K6seHiK7orvkq2r3hB8uTkD3hwucdgPiRNAKCRDr4mObjQO8ii QPhl30yBVIPSNckz4Eu0Xr4KTR4rNCq9MqNTON+fecqr1T3lY7uAMmg+LXd0ydCx 5XJo/JTpY/H4qAOQjDrH8xqBP50ioem9Zr7c9R9Q8IfErn7J/kmMeH0gb/giFfN+ Z0Z5s+M8zPrUh9kvwaDYfD2y1UmsO77kNLClQtv9MBNcdPVydo3eU7imm0B+v5hp 2G1DA3LQ7EtNfjiYyC6RaVlIDt0RnyVC7yqaBXkEwGnQ9KLtUC8bbo20byVkbeF6 hVOWaW1jZ9aC7Yg7OHHYubqnC9tGLvI= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:12 2025 by rpki-client