$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/faf157c4-0a83-3bfd-b2a1-0f25cd5d761b.roa File: faf157c4-0a83-3bfd-b2a1-0f25cd5d761b.roa (raw, json) Hash identifier: NWQVYtz0cd4BDIGdtHHrLijeYh20cIl5vLcuC/ePOlQ= Subject key identifier: 27:49:92:60:18:AF:3E:D5:7C:1A:89:52:99:5B:32:F0:52:91:C5:3F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F522ECD8AA7E8C01F14E780 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/faf157c4-0a83-3bfd-b2a1-0f25cd5d761b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 46123 IP address blocks: 71.46.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:2e:cd:8a:a7:e8:c0:1f:14:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a2bef54f-4d5d-4cc4-a2ba-5ca9f6f66550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:cf:06:fa:43:e1:ed:92:34:3b:98:37:db: c9:0f:f6:1f:5a:1b:75:a4:7d:ee:fe:d1:37:5a:d4: 03:78:c0:e9:ea:8b:f6:99:37:7d:4a:59:0e:e8:cd: 5f:f7:a6:a7:0e:a4:1b:03:7e:00:d8:a1:46:89:34: 7e:5a:d1:82:4b:54:72:4b:5d:ec:27:2b:57:a5:b0: dc:58:51:17:6c:45:c6:99:dc:b3:6e:04:1f:6b:24: 31:9e:d1:b5:23:34:ee:37:a1:cc:e4:cd:3e:3f:57: e9:83:c0:02:8e:c6:ae:be:2c:19:53:8e:16:ba:c6: 59:90:1e:ce:8e:ab:1e:9f:58:92:86:1a:cd:a3:dc: 0a:ea:5e:22:a1:85:02:cb:ad:9d:67:b4:17:ee:8b: 9a:a3:81:ad:55:de:fd:81:15:be:28:0b:aa:2b:6e: 65:8b:fe:69:79:a8:ec:6a:a2:f4:b4:ed:1f:be:17: 77:8f:ca:70:9d:c6:31:fd:9a:38:3d:fb:d9:7c:ed: 4f:38:77:8c:c5:c0:e5:ac:e1:83:49:39:02:36:23: 22:a9:0c:d2:57:a1:57:47:55:45:49:03:36:27:3d: 87:3c:df:84:03:51:9a:dd:65:da:5b:18:8d:8d:69: 6a:43:bc:ac:59:40:f6:b6:ad:14:cb:fb:be:09:ee: 1d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:49:92:60:18:AF:3E:D5:7C:1A:89:52:99:5B:32:F0:52:91:C5:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/faf157c4-0a83-3bfd-b2a1-0f25cd5d761b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.46.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cc:af:95:66:e9:af:66:70:0f:6b:dc:f8:d9:57:90:56:2c: 8f:21:2e:f8:d7:bb:a6:96:6c:f7:c2:77:9d:08:c9:08:a2:8f: d3:7e:8f:4b:44:9e:ba:68:8b:7a:ca:95:0c:1a:4c:1b:e5:1f: 7d:e7:9d:ee:91:d8:ee:d9:63:61:ca:6c:c8:56:27:16:bd:fa: 2c:dd:4a:90:e8:5d:6b:df:c0:76:2f:19:b8:51:2a:d3:71:3a: 0d:f6:b6:3f:5e:d0:e7:cc:a5:71:68:b6:bc:10:5d:78:09:5f: a2:6e:57:61:d5:14:9d:37:2d:4a:71:8f:42:fc:35:19:b6:ed: fb:8b:1f:20:7d:2a:0a:71:e6:7f:55:2f:78:6b:b3:3b:07:e0: 25:e6:8a:3f:6c:b9:41:d2:dd:b1:1a:21:6b:6f:2e:fc:4b:19: e4:40:e4:94:fd:fa:b5:f1:8c:d4:a5:80:50:1a:62:70:75:e0: 70:87:4f:f0:a0:d6:f4:58:bd:22:08:03:21:ca:8f:b9:81:94: 0a:14:5f:62:ab:6b:2f:43:44:f8:c7:5e:67:f8:a4:f6:92:bd: 34:1f:36:17:43:31:a1:97:df:69:46:6f:5d:55:ba:48:af:96: 5a:5e:bd:51:31:bd:16:13:fc:4c:2c:24:35:99:d8:34:60:e5: ce:e6:1d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ui7NiqfowB8U54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTJiZWY1NGYtNGQ1ZC00Y2M0LWEyYmEtNWNhOWY2ZjY2NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF/PBvpD4e2SNDuYN9vJD/YfWht1pH3u/tE3 WtQDeMDp6ov2mTd9SlkO6M1f96anDqQbA34A2KFGiTR+WtGCS1RyS13sJytXpbDc WFEXbEXGmdyzbgQfayQxntG1IzTuN6HM5M0+P1fpg8ACjsauviwZU44WusZZkB7O jqsen1iShhrNo9wK6l4ioYUCy62dZ7QX7ouao4GtVd79gRW+KAuqK25li/5peajs aqL0tO0fvhd3j8pwncYx/Zo4PfvZfO1POHeMxcDlrOGDSTkCNiMiqQzSV6FXR1VF SQM2Jz2HPN+EA1Ga3WXaWxiNjWlqQ7ysWUD2tq0Uy/u+Ce4drwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdJkmAYrz7VfBqJUplbMvBSkcU/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZmFmMTU3YzQtMGE4My0z YmZkLWIyYTEtMGYyNWNkNWQ3NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARy7dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTMr5Vm6a9mcA9r3PjZV5BWLI8hLvjXu6aWbPfCd50IyQiij9N+j0tE nrpoi3rKlQwaTBvlH33nne6R2O7ZY2HKbMhWJxa9+izdSpDoXWvfwHYvGbhRKtNx Og32tj9e0OfMpXFotrwQXXgJX6JuV2HVFJ03LUpxj0L8NRm27fuLHyB9Kgpx5n9V L3hrszsH4CXmij9suUHS3bEaIWtvLvxLGeRA5JT9+rXxjNSlgFAaYnB14HCHT/Cg 1vRYvSIIAyHKj7mBlAoUX2Kray9DRPjHXmf4pPaSvTQfNhdDMaGX32lGb11Vukiv llpevVExvRYT/EwsJDWZ2DRg5c7mHWA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:55 2025 by rpki-client