$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e7a5d82-1d0b-3225-af2c-2770c2e476ee.roa File: 1e7a5d82-1d0b-3225-af2c-2770c2e476ee.roa (raw, json) Hash identifier: ihoKmYazVN1lGn4oXVG3pHjVyuc24gopK8JOvzwou8I= Subject key identifier: D8:FA:A4:9E:3C:21:C0:32:E9:3D:83:6A:E4:1F:2F:D2:E9:61:AE:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B8934AE8FF6D2A787D700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e7a5d82-1d0b-3225-af2c-2770c2e476ee.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 71.56.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:89:34:ae:8f:f6:d2:a7:87:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=d2671812-a5be-4dbd-b697-fb09a92f105d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0c:e8:ae:05:3f:68:5f:94:13:75:42:68:59: c0:a8:35:ea:24:82:d7:ee:d1:d0:c2:37:b2:05:4e: 0c:17:4b:c5:5a:46:c7:c6:2c:6e:da:0b:a2:00:f4: e7:60:3c:e4:dd:08:fb:54:48:9f:6f:a3:b9:c1:91: 5b:4e:1d:ce:61:fe:20:69:42:dd:38:97:ce:db:a6: 24:5e:79:10:c8:1e:ae:97:c6:18:57:c0:39:56:d8: 14:bb:6b:49:20:b3:e0:f9:b3:1e:d5:43:05:93:55: 19:a9:45:fa:78:6b:38:9f:4c:ae:18:59:6f:68:3d: 11:29:f4:0e:44:35:88:28:33:52:b6:78:c4:39:0e: ce:40:80:de:ed:66:51:82:7a:cf:bb:0d:b1:8f:99: 0d:c7:40:d1:77:33:55:46:81:df:4e:ed:f2:ea:14: cf:cc:45:c6:cf:8f:3f:31:5c:1c:65:90:77:54:b9: 9d:3f:ca:4e:ed:5e:4b:2f:d2:c0:62:cc:37:84:43: 55:32:74:41:ea:a0:7e:e4:0f:fb:c2:b5:28:8e:01: b1:82:ee:0d:73:80:7d:6c:55:ce:50:6a:fd:98:ce: d0:09:01:b7:e1:e7:b5:17:75:80:84:65:7d:7c:a5: cf:2a:1e:7d:70:c8:7b:81:a2:7e:b1:f7:82:11:39: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FA:A4:9E:3C:21:C0:32:E9:3D:83:6A:E4:1F:2F:D2:E9:61:AE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e7a5d82-1d0b-3225-af2c-2770c2e476ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.56.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:37:c0:01:9f:00:d3:10:cd:c7:67:fa:ff:9e:c3:46:79:3c: 70:22:41:28:f2:b2:4a:fd:7e:f0:06:81:79:ad:51:20:b7:2f: 84:a7:b2:72:3f:b5:bd:f5:ab:3c:44:f7:9e:01:fa:36:68:8c: 51:53:5e:0d:7d:b2:c5:99:fb:cb:3b:5e:fc:1b:7b:f7:31:3c: 24:c2:d0:5f:13:d8:d2:97:73:f2:3c:3d:94:2d:bc:84:fc:a3: 95:c1:1a:d9:42:fa:18:e6:3f:1a:75:8d:29:e2:3d:2c:b5:dc: 48:61:ca:65:8c:8d:b8:f9:de:71:79:f6:d5:04:22:d9:4f:47: c6:56:83:b7:50:f5:b1:29:91:04:ae:a8:4d:68:e9:72:24:07: 1c:6c:92:46:43:1e:c2:66:dc:a8:08:34:f6:4e:00:34:ce:9a: 67:0f:8a:71:b2:e2:39:1b:39:7a:74:af:52:eb:3b:f9:63:1a: 36:4d:37:6e:44:7b:3f:0a:c9:ef:07:12:9b:32:f0:5b:7c:47: 4f:f0:7f:0d:b5:86:70:77:94:0c:67:ba:6f:96:30:72:4d:16: 76:76:8e:f8:73:bf:b1:8e:32:54:73:62:d0:b7:ff:c4:aa:a2: 63:31:8a:e7:1f:09:c6:19:87:25:af:4d:87:1a:32:88:a7:82: db:02:b1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC4k0ro/20qeH1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZDI2NzE4MTItYTViZS00ZGJkLWI2OTctZmIwOWE5MmYxMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAzorgU/aF+UE3VCaFnAqDXqJILX7tHQwjey BU4MF0vFWkbHxixu2guiAPTnYDzk3Qj7VEifb6O5wZFbTh3OYf4gaULdOJfO26Yk XnkQyB6ul8YYV8A5VtgUu2tJILPg+bMe1UMFk1UZqUX6eGs4n0yuGFlvaD0RKfQO RDWIKDNStnjEOQ7OQIDe7WZRgnrPuw2xj5kNx0DRdzNVRoHfTu3y6hTPzEXGz48/ MVwcZZB3VLmdP8pO7V5LL9LAYsw3hENVMnRB6qB+5A/7wrUojgGxgu4Nc4B9bFXO UGr9mM7QCQG34ee1F3WAhGV9fKXPKh59cMh7gaJ+sfeCETk0BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj6pJ48IcAy6T2DauQfL9LpYa4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWU3YTVkODItMWQwYi0z MjI1LWFmMmMtMjc3MGMyZTQ3NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzhaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk3wAGfANMQzcdn+v+ew0Z5PHAiQSjyskr9fvAGgXmtUSC3L4SnsnI/ tb31qzxE954B+jZojFFTXg19ssWZ+8s7Xvwbe/cxPCTC0F8T2NKXc/I8PZQtvIT8 o5XBGtlC+hjmPxp1jSniPSy13EhhymWMjbj53nF59tUEItlPR8ZWg7dQ9bEpkQSu qE1o6XIkBxxskkZDHsJm3KgINPZOADTOmmcPinGy4jkbOXp0r1LrO/ljGjZNN25E ez8Kye8HEpsy8Ft8R0/wfw21hnB3lAxnum+WMHJNFnZ2jvhzv7GOMlRzYtC3/8Sq omMxiucfCcYZhyWvTYcaMoingtsCsaA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:35:58 2025 by rpki-client