$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/021f0fff-2507-3a85-9229-71af64c61c21.roa File: 021f0fff-2507-3a85-9229-71af64c61c21.roa (raw, json) Hash identifier: 1+2aVVFgbeJDtNa7BTax/vzY7gVf0zEwc2z731WW2sw= Subject key identifier: 63:31:5A:D7:70:B7:41:C0:19:B9:F9:C9:5E:A0:63:46:84:6C:0C:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B01C608879169561C69E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/021f0fff-2507-3a85-9229-71af64c61c21.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 67.191.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:01:c6:08:87:91:69:56:1c:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=3601efc6-99f4-4388-ae4a-1a56123f29d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:92:94:9c:39:e5:32:2d:23:9c:29:1c:10: 20:9c:59:70:d4:e5:ab:9d:e8:bd:00:57:5e:e8:18: 3a:92:90:91:17:bd:bb:95:b8:59:cd:cf:92:b9:5e: 38:d9:0d:b0:37:55:bb:f0:db:4e:09:d1:02:76:b9: e3:3c:56:12:3b:a9:fe:fe:6b:69:d2:7b:3b:39:d8: 66:85:a4:82:bd:52:ab:a4:7d:44:ae:b0:2a:76:07: 46:75:49:61:fe:70:78:60:27:9d:c9:7f:9a:81:45: a2:88:68:30:3d:1f:6c:43:b2:db:90:4f:11:72:61: 14:1e:68:e8:e4:c1:1b:9a:76:f7:06:2a:55:fb:42: 4d:42:ba:31:13:b3:a9:4d:41:2b:1a:26:e0:ea:e2: 63:d8:e0:63:60:19:52:67:df:ab:dc:99:a2:04:d1: e0:b0:17:32:b2:a3:4b:36:fe:5f:f3:7f:ea:0b:a0: 45:14:c2:a1:29:15:97:db:e8:44:b4:11:57:0d:03: 65:3f:ae:7c:0a:14:46:4b:3b:2a:ad:ed:ca:03:bb: 09:44:62:77:83:23:5a:13:a7:03:c1:de:05:8a:79: ad:26:79:cd:11:24:27:78:1c:5a:72:a4:ab:36:f5: a5:25:d1:f2:7f:0c:fe:12:5a:22:1a:89:03:24:cb: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:5A:D7:70:B7:41:C0:19:B9:F9:C9:5E:A0:63:46:84:6C:0C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/021f0fff-2507-3a85-9229-71af64c61c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.191.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:64:7c:29:2e:43:53:50:9c:7e:4d:3b:20:93:30:57:80:76: ae:ab:1b:8e:87:4e:6a:61:e8:8d:1c:01:19:62:7d:b7:0f:9a: e0:02:05:26:64:32:76:08:b9:bb:3f:8f:f6:9c:ef:86:f4:18: 0c:8b:d4:bc:d5:7b:07:c5:55:97:d4:b0:8f:a9:1c:b3:14:44: 0b:17:fa:ae:e9:de:50:66:38:c5:0f:6b:cc:3f:c9:b5:41:0a: ac:84:fa:83:dc:82:10:99:d2:78:cb:dc:1b:ab:b7:ab:6f:f7: 3b:54:4c:ac:01:11:ad:f0:f5:e8:13:10:8b:d3:66:fa:93:51: 0e:ed:da:84:34:fc:52:fd:3c:fb:97:2e:f8:41:a1:10:04:81: da:14:e3:6b:04:49:d0:b4:dd:8b:9a:22:6f:45:b0:cb:b8:23: 13:dc:ac:fd:ec:67:aa:73:4b:16:62:52:6d:11:1d:85:d3:46: 8f:f0:6a:0c:e7:93:2d:81:05:1f:2a:ba:74:c7:9f:a0:a8:18: bb:e2:d9:84:3c:67:21:65:2e:04:3b:b2:81:75:5d:2f:ad:5c: d7:97:10:90:ba:71:f4:29:3c:a7:80:3f:a2:60:f4:80:66:41: d6:2f:bc:4a:17:bf:e6:74:3e:ee:7c:e9:a4:3a:fa:2c:82:4b: e6:1e:80:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCwHGCIeRaVYcaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MzYwMWVmYzYtOTlmNC00Mzg4LWFlNGEtMWE1NjEyM2YyOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQeSlJw55TItI5wpHBAgnFlw1OWrnei9AFde 6Bg6kpCRF727lbhZzc+SuV442Q2wN1W78NtOCdECdrnjPFYSO6n+/mtp0ns7Odhm haSCvVKrpH1ErrAqdgdGdUlh/nB4YCedyX+agUWiiGgwPR9sQ7LbkE8RcmEUHmjo 5MEbmnb3BipV+0JNQroxE7OpTUErGibg6uJj2OBjYBlSZ9+r3JmiBNHgsBcysqNL Nv5f83/qC6BFFMKhKRWX2+hEtBFXDQNlP658ChRGSzsqre3KA7sJRGJ3gyNaE6cD wd4FinmtJnnNESQneBxacqSrNvWlJdHyfwz+EloiGokDJMu90wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMxWtdwt0HAGbn5yV6gY0aEbAyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIxZjBmZmYtMjUwNy0z YTg1LTkyMjktNzFhZjY0YzYxYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdkfCkuQ1NQnH5NOyCTMFeAdq6rG46HTmph6I0cARlifbcPmuACBSZk MnYIubs/j/ac74b0GAyL1LzVewfFVZfUsI+pHLMURAsX+q7p3lBmOMUPa8w/ybVB CqyE+oPcghCZ0njL3Burt6tv9ztUTKwBEa3w9egTEIvTZvqTUQ7t2oQ0/FL9PPuX LvhBoRAEgdoU42sESdC03YuaIm9FsMu4IxPcrP3sZ6pzSxZiUm0RHYXTRo/wagzn ky2BBR8qunTHn6CoGLvi2YQ8ZyFlLgQ7soF1XS+tXNeXEJC6cfQpPKeAP6Jg9IBm QdYvvEoXv+Z0Pu586aQ6+iyCS+YegJg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:16 2025 by rpki-client