$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2097947-7bb7-33c9-b1a6-2a974dc070ac.roa File: a2097947-7bb7-33c9-b1a6-2a974dc070ac.roa (raw, json) Hash identifier: Rgci8KX8OYThYgdQ38FhUtQC4xRnO2GJEfe7KFWFW9k= Subject key identifier: 12:40:93:3D:DF:F9:10:03:C6:03:05:B7:28:76:0D:7A:B4:F3:EF:02 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B742752D5DBF2FBCD553C0400 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2097947-7bb7-33c9-b1a6-2a974dc070ac.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 11426 IP address blocks: 71.65.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:52:d5:db:f2:fb:cd:55:3c:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=597906df-f602-4403-bad0-b4ad75796bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:a0:5a:5a:0c:50:b9:09:a6:ad:0f:cb:e9: 6b:57:ca:90:7d:88:98:0b:47:d7:b2:4a:82:5a:2f: e4:ef:3e:51:7a:fb:ed:07:6a:aa:fc:5a:f3:58:77: 3c:6f:47:48:00:98:2d:af:a0:5e:0e:54:ed:e8:24: 02:08:92:9c:e4:99:78:78:cd:66:b3:fe:61:dd:2b: 84:ed:7d:d1:32:59:55:51:98:a7:a4:3b:ec:69:1e: 8a:4e:0a:68:b9:31:81:7c:fe:ee:29:54:e7:39:c8: b6:ec:83:24:a3:5a:2a:c4:f9:49:5a:c4:42:88:c1: 49:10:98:7a:e6:6c:28:1f:56:41:e7:f2:7e:69:37: 0c:85:7f:59:a2:76:e2:55:b2:2e:21:69:c8:a3:94: eb:ab:9c:97:b9:6e:c5:e1:7d:93:84:2e:c5:8d:75: a3:f3:75:6b:74:48:d0:6d:1c:1e:83:ab:dc:b8:c1: 21:77:0c:d6:7b:b1:33:d1:54:df:b7:ff:bf:54:01: 30:21:31:72:1a:c7:1b:c7:2a:83:89:0a:b4:be:62: 0f:68:80:37:2c:2b:44:67:18:e9:c1:bf:7b:a7:a7: 65:af:f8:38:d3:0b:56:4f:c4:d4:af:91:40:83:e0: 25:ae:5d:9b:31:dd:64:dd:13:d3:df:97:bf:46:da: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:40:93:3D:DF:F9:10:03:C6:03:05:B7:28:76:0D:7A:B4:F3:EF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a2097947-7bb7-33c9-b1a6-2a974dc070ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 71.65.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5a:86:20:85:00:ea:9d:b7:29:5b:b0:8d:06:42:0c:72:1a: 1a:c6:1a:5b:da:7a:38:2b:b1:39:da:5f:13:b4:0c:6b:d9:82: 68:a7:5a:6d:8d:e0:8a:e9:b2:c0:b1:a3:1e:82:23:88:f3:da: c4:26:b7:7e:da:7f:d2:cd:c3:c7:1c:65:d9:0d:3a:b1:0d:2f: a4:ef:9c:27:d7:39:f3:fc:22:ce:22:4b:41:c7:08:7e:e8:56: ff:45:91:f8:5c:31:76:9b:dd:01:ad:75:e4:44:43:e5:8e:66: 34:1c:54:d4:2c:e7:5c:e6:e1:b4:9a:9a:d8:bf:f9:f1:c5:29: ea:db:cd:87:37:61:c8:50:21:9a:d9:3f:6e:00:92:0e:ac:cf: 8d:32:8e:f5:73:6b:2e:20:0c:83:ab:7b:17:05:4f:a4:08:cf: 99:88:45:de:bc:e4:13:c5:cf:59:2c:08:26:89:2d:e4:89:1d: ae:2c:67:e6:d8:bc:34:06:95:de:6f:d3:87:f4:28:85:a2:31: e7:a7:10:06:a2:56:64:31:ee:2b:a4:d8:6d:70:1f:69:06:e3: 2f:cb:01:0e:44:c7:5a:0e:ab:8d:af:f8:46:a7:ac:7b:10:bf: aa:b1:b7:21:5b:6f:05:09:6d:46:46:0b:08:91:bf:e0:bc:72: a2:dc:20:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J1LV2/L7zVU8BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk NTk3OTA2ZGYtZjYwMi00NDAzLWJhZDAtYjRhZDc1Nzk2YmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0agWloMULkJpq0Py+lrV8qQfYiYC0fXskqC Wi/k7z5RevvtB2qq/FrzWHc8b0dIAJgtr6BeDlTt6CQCCJKc5Jl4eM1ms/5h3SuE 7X3RMllVUZinpDvsaR6KTgpouTGBfP7uKVTnOci27IMko1oqxPlJWsRCiMFJEJh6 5mwoH1ZB5/J+aTcMhX9ZonbiVbIuIWnIo5Trq5yXuW7F4X2ThC7FjXWj83VrdEjQ bRweg6vcuMEhdwzWe7Ez0VTft/+/VAEwITFyGscbxyqDiQq0vmIPaIA3LCtEZxjp wb97p6dlr/g40wtWT8TUr5FAg+Alrl2bMd1k3RPT35e/RtqC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJAkz3f+RADxgMFtyh2DXq08+8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTIwOTc5NDctN2JiNy0z M2M5LWIxYTYtMmE5NzRkYzA3MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR0EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFahiCFAOqdtylbsI0GQgxyGhrGGlvaejgrsTnaXxO0DGvZgminWm2N 4IrpssCxox6CI4jz2sQmt37af9LNw8ccZdkNOrENL6TvnCfXOfP8Is4iS0HHCH7o Vv9FkfhcMXab3QGtdeREQ+WOZjQcVNQs51zm4bSamti/+fHFKerbzYc3YchQIZrZ P24Akg6sz40yjvVzay4gDIOrexcFT6QIz5mIRd685BPFz1ksCCaJLeSJHa4sZ+bY vDQGld5v04f0KIWiMeenEAaiVmQx7iuk2G1wH2kG4y/LAQ5Ex1oOq42v+EanrHsQ v6qxtyFbbwUJbUZGCwiRv+C8cqLcIAQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:25 2025 by rpki-client