$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97a41234-99ed-373f-ab15-d30f0c1c8c0d.roa File: 97a41234-99ed-373f-ab15-d30f0c1c8c0d.roa (raw, json) Hash identifier: sd3vZlSAg94/GgwMhicuRDrgSUiDWx8et7A2DMXgQ+g= Subject key identifier: 4C:4B:3C:F7:80:58:30:5D:AB:1D:F3:A3:AD:62:8F:DD:A2:6F:01:23 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524DE16AD3218A1DE01CA0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97a41234-99ed-373f-ab15-d30f0c1c8c0d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 71.44.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:4d:e1:6a:d3:21:8a:1d:e0:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=c9c6e5a9-ac39-4a77-b9fa-76b2915969d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:44:5d:89:84:52:6b:06:36:b5:25:18:65: 4a:a5:7a:41:f7:11:6b:0e:07:50:77:b0:53:f9:b1: 8a:0f:21:5f:d9:d5:30:92:4a:dc:1c:5d:50:09:62: ff:a3:af:52:9f:43:5c:64:0d:a8:94:b5:6f:51:f9: 5c:ab:78:be:91:10:52:92:6a:85:a1:92:50:19:db: 40:36:e1:29:b3:e4:3c:a0:50:d2:94:41:b3:71:d2: e0:44:9d:24:d8:02:9c:21:e6:1f:ad:42:02:9f:f5: 03:75:62:73:36:7b:68:aa:1c:53:c8:73:f1:8e:bc: c0:7e:39:b0:3a:e9:08:d0:c7:f9:49:56:d1:d5:37: 3d:73:90:e4:d2:3c:7a:62:29:46:6c:03:1a:f0:c4: 7b:9d:e1:c6:13:56:1e:d9:ed:b4:d6:7d:98:11:8a: 31:06:d6:5e:e9:a3:8b:32:05:d2:0b:56:1a:73:b7: 83:9f:bf:7d:ea:9b:ed:4f:ca:fa:d1:52:ab:d3:42: 0f:87:86:3f:69:27:8b:8a:96:e1:00:3b:1b:4a:c2: 66:8f:1f:c6:71:ab:ea:fc:53:03:c7:32:95:57:c8: 7a:3f:11:01:56:24:f2:15:6f:80:94:57:70:3f:86: c1:bd:9f:28:17:d1:47:37:87:36:76:1d:ff:0a:6f: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4B:3C:F7:80:58:30:5D:AB:1D:F3:A3:AD:62:8F:DD:A2:6F:01:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/97a41234-99ed-373f-ab15-d30f0c1c8c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e8:8e:61:25:ca:55:41:26:ef:82:9e:82:14:64:7b:70:96: ac:a6:dd:99:05:b1:f8:2d:e5:8c:7f:95:c1:d4:76:2a:15:1f: f9:05:7a:90:ef:da:6c:c2:a2:e3:ad:54:06:86:8c:64:94:a7: 7f:f0:93:38:97:ff:eb:a4:bb:c1:f1:81:8d:8d:a4:a0:27:98: ff:2d:e6:2a:db:f0:cd:a7:7a:0b:58:fa:fb:43:85:36:f7:c0: f1:b9:5c:7b:6c:f1:29:2b:95:6b:d4:0f:ff:00:e7:29:25:34: 96:95:02:cd:9b:88:96:0b:ed:45:49:66:81:c0:a8:18:1e:8a: 31:fe:eb:0d:53:6d:1f:8a:bc:0b:ac:b0:b8:29:91:1f:12:13: a7:53:99:92:5a:87:34:91:e2:ba:de:63:ce:79:fc:f9:34:a2: a2:0d:e3:e7:d8:29:09:4f:80:f6:fb:2a:c5:ce:f9:c0:c8:54: 3c:94:e9:6f:b2:86:58:65:61:34:bc:88:eb:84:48:c8:11:43: 1c:a8:cd:c5:fd:1f:17:5d:c8:ed:1f:52:84:c6:9a:f1:3a:b4: 00:c7:85:96:e5:8f:91:75:d1:56:fd:76:83:f8:48:f0:3e:c6: d4:7c:d3:bd:85:19:ee:47:a2:ea:a4:0b:d9:52:c4:79:a8:26: 86:06:76:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uk3hatMhih3gHKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YzljNmU1YTktYWMzOS00YTc3LWI5ZmEtNzZiMjkxNTk2OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfJEXYmEUmsGNrUlGGVKpXpB9xFrDgdQd7BT +bGKDyFf2dUwkkrcHF1QCWL/o69Sn0NcZA2olLVvUflcq3i+kRBSkmqFoZJQGdtA NuEps+Q8oFDSlEGzcdLgRJ0k2AKcIeYfrUICn/UDdWJzNntoqhxTyHPxjrzAfjmw OukI0Mf5SVbR1Tc9c5Dk0jx6YilGbAMa8MR7neHGE1Ye2e201n2YEYoxBtZe6aOL MgXSC1Yac7eDn7996pvtT8r60VKr00IPh4Y/aSeLipbhADsbSsJmjx/Gcavq/FMD xzKVV8h6PxEBViTyFW+AlFdwP4bBvZ8oF9FHN4c2dh3/Cm9MRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExLPPeAWDBdqx3zo61ij92ibwEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTdhNDEyMzQtOTllZC0z NzNmLWFiMTUtZDMwZjBjMWM4YzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRyxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLojmElylVBJu+CnoIUZHtwlqym3ZkFsfgt5Yx/lcHUdioVH/kFepDv 2mzCouOtVAaGjGSUp3/wkziX/+uku8HxgY2NpKAnmP8t5irb8M2negtY+vtDhTb3 wPG5XHts8SkrlWvUD/8A5yklNJaVAs2biJYL7UVJZoHAqBgeijH+6w1TbR+KvAus sLgpkR8SE6dTmZJahzSR4rreY855/Pk0oqIN4+fYKQlPgPb7KsXO+cDIVDyU6W+y hlhlYTS8iOuESMgRQxyozcX9HxddyO0fUoTGmvE6tADHhZblj5F10Vb9doP4SPA+ xtR8072FGe5HouqkC9lSxHmoJoYGdkM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:35 2025 by rpki-client