$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c13323e1-43d1-3dd7-9e40-8386672c3b0d.roa File: c13323e1-43d1-3dd7-9e40-8386672c3b0d.roa (raw, json) Hash identifier: lpJ1Y4XSfT2IxHueZIP5Fo5VWKVYYjr0WO8rM00bVvw= Subject key identifier: B9:5E:0D:FB:4B:EA:65:45:52:F7:D4:D7:0C:5A:BD:39:E8:EA:FA:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB926292B1432F5E1911840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c13323e1-43d1-3dd7-9e40-8386672c3b0d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33490 IP address blocks: 71.193.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:26:29:2b:14:32:f5:e1:91:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=74e91211-5b13-4a5a-b83f-eef30c421443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:1d:35:dd:df:a2:52:30:57:74:8b:a0:dd: 10:51:3d:46:4e:45:83:c3:fe:5f:88:ed:82:27:fc: 0d:5c:81:6e:bf:a2:7b:09:a9:78:a3:be:71:41:1d: c2:84:ad:e9:ae:2f:2f:af:39:98:ac:96:f1:2c:ba: 2b:18:1d:6a:ec:f2:64:26:3f:61:f8:c7:f5:44:60: 95:28:1c:af:a1:62:d6:32:b5:7d:e3:54:41:99:58: d9:3d:ba:08:ef:f0:08:50:93:44:8f:af:cb:e6:e5: 42:b1:d3:d3:38:5c:ae:ed:f8:06:12:13:c0:45:01: a2:a0:d2:ce:e8:64:47:1f:17:c0:f6:8e:27:a8:6a: c3:b0:6f:1b:f3:54:1e:5b:9e:0c:41:31:e7:ff:39: 60:d2:38:4c:2e:a8:34:70:e9:d4:21:1c:03:00:06: 79:85:dc:db:58:75:4d:96:24:fb:69:11:c2:7d:98: dd:0b:92:62:95:eb:3f:28:c8:55:45:0f:eb:b1:39: 83:e3:3a:55:5e:79:70:67:6b:44:ae:cb:58:48:fb: 75:50:76:c7:d5:fd:74:98:20:e0:af:89:d2:78:cf: a3:60:34:c7:ab:f5:63:85:3f:1a:75:6a:8a:33:03: b9:e3:1d:9c:1b:ff:75:9c:31:8d:fc:0d:b1:51:29: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5E:0D:FB:4B:EA:65:45:52:F7:D4:D7:0C:5A:BD:39:E8:EA:FA:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c13323e1-43d1-3dd7-9e40-8386672c3b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:e7:11:56:e3:a6:49:70:be:d2:c7:a9:ff:b4:d1:32:87:ef: 53:4a:dd:eb:00:f9:e1:31:ad:3a:40:fb:f2:3d:03:c2:24:5c: 94:e5:23:78:f9:69:eb:6a:e1:6a:a0:fa:c4:e7:5d:11:d1:fe: dd:72:fb:c7:44:60:49:4c:a4:d1:b9:92:4b:5c:e9:ac:27:6c: 8c:7f:04:a1:a2:be:e8:8a:a0:c7:c9:56:df:fd:40:66:7e:9e: 5c:15:4d:9f:1e:49:36:01:7a:a1:a9:4f:be:0e:36:fc:08:45: ed:fc:cf:cb:da:b6:8f:b2:98:55:f7:2f:b2:db:c2:1b:74:5b: 20:69:1a:48:52:2d:d8:5f:c0:8d:c1:c5:f9:46:15:53:0e:b0: 3d:1a:44:fc:93:ff:69:46:a4:a7:23:e0:5e:f7:6e:6f:9e:ff: 6b:21:f8:4f:59:12:9a:5c:14:4f:19:a7:ee:67:45:c5:ba:85: 9d:39:b2:e8:21:1f:eb:3f:10:47:54:51:f8:ec:c5:01:03:b8: e8:b0:0b:04:e9:38:b3:b2:dc:24:02:a1:24:99:e7:e4:43:34: 2a:71:8a:95:bf:4d:6e:cb:29:91:d6:d8:66:2c:33:7c:e2:b6: 3a:86:5b:85:03:08:3e:61:7a:6b:b4:2e:33:ef:6c:56:28:e0: 0a:a1:ba:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uSYpKxQy9eGRGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzRlOTEyMTEtNWIxMy00YTVhLWI4M2YtZWVmMzBjNDIxNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhodNd3folIwV3SLoN0QUT1GTkWDw/5fiO2C J/wNXIFuv6J7Cal4o75xQR3ChK3pri8vrzmYrJbxLLorGB1q7PJkJj9h+Mf1RGCV KByvoWLWMrV941RBmVjZPboI7/AIUJNEj6/L5uVCsdPTOFyu7fgGEhPARQGioNLO 6GRHHxfA9o4nqGrDsG8b81QeW54MQTHn/zlg0jhMLqg0cOnUIRwDAAZ5hdzbWHVN liT7aRHCfZjdC5Jiles/KMhVRQ/rsTmD4zpVXnlwZ2tErstYSPt1UHbH1f10mCDg r4nSeM+jYDTHq/VjhT8adWqKMwO54x2cG/91nDGN/A2xUSkADQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLleDftL6mVFUvfU1wxavTno6vr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzEzMzIzZTEtNDNkMS0z ZGQ3LTllNDAtODM4NjY3MmMzYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR8GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjnEVbjpklwvtLHqf+00TKH71NK3esA+eExrTpA+/I9A8IkXJTlI3j5 aetq4Wqg+sTnXRHR/t1y+8dEYElMpNG5kktc6awnbIx/BKGivuiKoMfJVt/9QGZ+ nlwVTZ8eSTYBeqGpT74ONvwIRe38z8vato+ymFX3L7Lbwht0WyBpGkhSLdhfwI3B xflGFVMOsD0aRPyT/2lGpKcj4F73bm+e/2sh+E9ZEppcFE8Zp+5nRcW6hZ05sugh H+s/EEdUUfjsxQEDuOiwCwTpOLOy3CQCoSSZ5+RDNCpxipW/TW7LKZHW2GYsM3zi tjqGW4UDCD5hemu0LjPvbFYo4Aqhukw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:28:44 2025 by rpki-client