$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd58cb29-4aee-3655-9d07-05342d82777b.roa File: cd58cb29-4aee-3655-9d07-05342d82777b.roa (raw, json) Hash identifier: +ri/WdU2HSDMiELGH+sKDhoo1LMt3iUq0SX4Eiu7VXI= Subject key identifier: EC:79:C1:62:8A:E1:7E:4C:BE:47:57:2C:66:14:7F:72:4C:82:A8:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB99221CF5EEA4EEBA49430 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd58cb29-4aee-3655-9d07-05342d82777b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 66.41.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:92:21:cf:5e:ea:4e:eb:a4:94:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ca72b964-feda-4993-957e-7f9eb1f2b1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:08:e7:9c:f5:35:99:58:ed:55:17:c7:8d: d8:78:b4:a3:fe:fc:7b:20:24:e7:16:01:73:e4:a7: 01:01:2d:e8:fb:b9:51:b1:ea:68:52:2d:d9:f0:ee: 6f:d0:9b:ad:64:58:5c:1f:27:e9:2e:7d:91:47:03: 4c:f8:d6:92:0a:17:3a:63:48:d4:ef:ef:0c:1f:84: e7:dd:29:90:17:18:61:74:4e:2b:52:5c:69:80:f7: 02:99:04:e4:4d:a3:98:96:78:cc:dc:39:bf:08:89: 3b:2c:72:94:a4:a4:06:1a:11:e0:63:83:7d:ba:e7: 9c:28:91:13:01:d5:38:e8:47:85:8f:84:ba:7a:a9: 43:fc:97:7c:28:74:81:ea:00:56:70:33:1d:7c:9d: 59:aa:e1:e6:b7:ab:11:c5:8f:c5:57:7f:99:39:70: 87:57:de:aa:91:0e:d1:1e:6b:62:68:2b:3d:86:13: 14:47:0b:fb:7a:7e:64:18:c9:55:cb:91:1f:ec:e4: 94:c3:28:05:92:ec:69:63:5d:94:b3:4c:df:fd:ca: 16:87:6f:fd:09:fd:5f:dd:10:6b:44:e6:5f:c2:5c: c1:26:ae:0e:87:c5:97:8b:6a:bf:47:c1:5d:9b:f0: 71:37:17:12:f8:de:16:73:a1:7f:f2:14:09:f5:c5: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:79:C1:62:8A:E1:7E:4C:BE:47:57:2C:66:14:7F:72:4C:82:A8:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd58cb29-4aee-3655-9d07-05342d82777b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b9:30:32:31:a4:cb:1f:84:fa:fa:31:6d:c8:9f:0e:c6:32: 5f:f6:4f:0c:b4:e9:a4:b6:c2:11:14:41:0b:99:04:e2:a8:55: bf:06:97:02:10:d4:85:9d:1a:cc:c0:0b:45:f4:28:7b:da:8c: 4a:91:83:07:41:db:36:11:d3:09:03:23:49:90:40:8a:09:e3: e7:c2:7b:f1:0a:5d:54:f7:a4:29:12:78:83:60:fe:4b:94:42: c3:de:86:86:20:af:3d:43:03:9e:c9:96:d2:a2:44:13:b9:7f: 2d:12:53:3c:3e:02:58:cc:d1:9e:c7:fb:8b:99:0b:85:6d:56: 50:ce:4a:1b:cd:89:a9:ca:56:b9:8f:6d:cd:bd:77:20:4e:de: 37:a3:26:98:d6:33:00:76:0e:ed:eb:d9:ee:6d:52:39:66:ad: c4:b0:5a:23:b7:ee:65:98:8d:50:87:90:6b:87:8b:10:1f:7c: 45:3a:9c:32:49:82:96:3b:30:65:a8:c9:75:a6:04:eb:32:85: ae:f3:a3:0a:89:7e:dd:55:73:52:3a:37:e3:75:91:dc:fb:0a: ba:55:68:57:7f:8e:db:42:b4:17:15:9a:63:bd:54:63:e1:6a: 3b:06:3d:3f:00:06:d1:1e:45:bd:ff:4e:75:cd:12:5d:60:5c: fb:6f:6b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uZIhz17qTuuklDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2E3MmI5NjQtZmVkYS00OTkzLTk1N2UtN2Y5ZWIxZjJiMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE8I55z1NZlY7VUXx43YeLSj/vx7ICTnFgFz 5KcBAS3o+7lRsepoUi3Z8O5v0JutZFhcHyfpLn2RRwNM+NaSChc6Y0jU7+8MH4Tn 3SmQFxhhdE4rUlxpgPcCmQTkTaOYlnjM3Dm/CIk7LHKUpKQGGhHgY4N9uuecKJET AdU46EeFj4S6eqlD/Jd8KHSB6gBWcDMdfJ1ZquHmt6sRxY/FV3+ZOXCHV96qkQ7R HmtiaCs9hhMURwv7en5kGMlVy5Ef7OSUwygFkuxpY12Us0zf/coWh2/9Cf1f3RBr ROZfwlzBJq4Oh8WXi2q/R8Fdm/BxNxcS+N4Wc6F/8hQJ9cWMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx5wWKK4X5MvkdXLGYUf3JMgqi2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q1OGNiMjktNGFlZS0z NjU1LTlkMDctMDUzNDJkODI3NzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQimAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJK5MDIxpMsfhPr6MW3Inw7GMl/2Twy06aS2whEUQQuZBOKoVb8GlwIQ 1IWdGszAC0X0KHvajEqRgwdB2zYR0wkDI0mQQIoJ4+fCe/EKXVT3pCkSeINg/kuU QsPehoYgrz1DA57JltKiRBO5fy0SUzw+AljM0Z7H+4uZC4VtVlDOShvNianKVrmP bc29dyBO3jejJpjWMwB2Du3r2e5tUjlmrcSwWiO37mWYjVCHkGuHixAffEU6nDJJ gpY7MGWoyXWmBOsyha7zowqJft1Vc1I6N+N1kdz7CrpVaFd/jttCtBcVmmO9VGPh ajsGPT8ABtEeRb3/TnXNEl1gXPtva0Y= -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:22 2025 by rpki-client