$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3228cff3-5298-3d8d-906b-753248f47ed3.roa File: 3228cff3-5298-3d8d-906b-753248f47ed3.roa (raw, json) Hash identifier: AuSjYNwGFt6QAQJUXJMCx+OsOLsptRwWUBMbyiCPBYc= Subject key identifier: BA:13:96:61:ED:4D:F8:E6:C7:39:A3:B8:76:98:E8:33:62:0A:D2:C0 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584B8EAD0AE0F7504A329C527A20 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3228cff3-5298-3d8d-906b-753248f47ed3.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 150436 IP address blocks: 71.18.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0a:e0:f7:50:4a:32:9c:52:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=91b22f4f-45fd-481b-b501-6033661d8a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:91:05:44:65:d4:ad:d4:4f:52:d5:03:14: 4b:94:0a:39:cb:26:74:21:48:c1:7e:88:34:de:1b: eb:86:a8:ef:78:2c:7b:76:e3:dc:21:32:d3:d0:bf: c3:7b:77:c8:bf:52:45:c5:c8:05:bc:b8:b3:41:87: b2:5c:26:b4:2c:3b:45:58:e0:9b:d3:83:59:2d:e3: 36:04:f0:fb:be:2e:91:93:4c:2a:8f:fc:ba:e9:8e: 0e:d6:90:a2:c1:c1:8d:21:8a:6f:c4:49:91:81:e6: a5:de:38:91:06:7d:86:84:81:47:6c:fc:b2:38:d3: dc:04:2b:c1:23:ad:47:99:c6:e7:50:f8:ad:3e:66: ed:3f:42:ef:18:ab:eb:f8:0f:72:8a:46:b8:aa:35: ed:44:0c:19:75:1d:ff:0d:98:2f:96:6c:1e:95:f9: 19:a8:95:d5:dc:36:f3:24:31:93:36:86:5d:30:55: d1:01:1a:16:9c:81:e8:32:6a:29:f0:af:b3:e9:1f: 30:76:df:e2:cf:50:6c:95:1a:ae:53:ed:58:e5:a3: 33:3a:72:f3:8f:27:31:3c:28:10:53:b6:3f:71:8b: 75:4f:12:1c:ff:47:47:55:cf:7a:74:b6:ca:c1:f7: 92:f4:99:56:be:30:86:69:6d:21:e0:f1:30:bf:1f: 97:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:96:61:ED:4D:F8:E6:C7:39:A3:B8:76:98:E8:33:62:0A:D2:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3228cff3-5298-3d8d-906b-753248f47ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:82:5d:93:15:0e:f0:66:1d:c4:c5:9f:02:96:e6:0b:88:e4: 59:9e:a0:cd:c1:29:26:fa:75:da:bc:3d:f7:fd:68:58:df:a8: 38:94:9c:37:6e:36:8f:e3:c1:b9:17:76:d2:04:4c:af:b1:8b: 70:20:62:ad:34:2c:9a:4d:08:d7:49:25:ce:da:d9:c5:b2:9f: 48:5b:1f:b3:77:91:61:c1:cd:b9:8f:4f:9d:98:4d:17:a8:78: af:5f:92:49:16:da:ff:de:f6:97:d0:93:1c:ea:30:a6:59:22: d5:1c:75:54:19:7f:87:68:43:26:ad:28:f5:d1:ef:5c:7e:b5: 84:56:56:ed:52:20:7f:87:fb:1b:e2:bf:5a:85:c2:34:72:88: 0a:4c:f4:63:99:56:4f:3e:20:09:09:c1:46:8a:0f:b9:94:fe: e0:69:3a:c9:3f:2f:be:e6:c0:b1:e0:a5:00:61:5c:6b:b7:d1: e6:6a:64:18:0a:d3:80:dd:c9:f4:f0:15:7c:e2:4e:a7:e4:77: 8a:f4:fc:c5:09:68:34:22:c4:f7:b9:46:61:13:e2:fc:9b:d6: 71:62:dd:9b:5d:03:d1:5f:69:84:1e:b6:d2:c8:f8:85:79:bf: f6:51:97:a4:98:62:1f:65:c1:e3:7e:bb:0c:09:cd:2f:78:4c: fb:a2:f7:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQrg91BKMpxSeiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTFiMjJmNGYtNDVmZC00ODFiLWI1MDEtNjAzMzY2MWQ4YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeSRBURl1K3UT1LVAxRLlAo5yyZ0IUjBfog0 3hvrhqjveCx7duPcITLT0L/De3fIv1JFxcgFvLizQYeyXCa0LDtFWOCb04NZLeM2 BPD7vi6Rk0wqj/y66Y4O1pCiwcGNIYpvxEmRgeal3jiRBn2GhIFHbPyyONPcBCvB I61HmcbnUPitPmbtP0LvGKvr+A9yika4qjXtRAwZdR3/DZgvlmwelfkZqJXV3Dbz JDGTNoZdMFXRARoWnIHoMmop8K+z6R8wdt/iz1BslRquU+1Y5aMzOnLzjycxPCgQ U7Y/cYt1TxIc/0dHVc96dLbKwfeS9JlWvjCGaW0h4PEwvx+XQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoTlmHtTfjmxzmjuHaY6DNiCtLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvMzIyOGNmZjMtNTI5OC0z ZDhkLTkwNmItNzUzMjQ4ZjQ3ZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxLjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOCXZMVDvBmHcTFnwKW5guI5FmeoM3BKSb6ddq8Pff9aFjfqDiUnDdu No/jwbkXdtIETK+xi3AgYq00LJpNCNdJJc7a2cWyn0hbH7N3kWHBzbmPT52YTReo eK9fkkkW2v/e9pfQkxzqMKZZItUcdVQZf4doQyatKPXR71x+tYRWVu1SIH+H+xvi v1qFwjRyiApM9GOZVk8+IAkJwUaKD7mU/uBpOsk/L77mwLHgpQBhXGu30eZqZBgK 04DdyfTwFXziTqfkd4r0/MUJaDQixPe5RmET4vyb1nFi3ZtdA9FfaYQettLI+IV5 v/ZRl6SYYh9lweN+uwwJzS94TPui9zs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:59 2025 by rpki-client