$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7dd8d-aac3-38aa-9b3a-39662db50732.roa File: 23e7dd8d-aac3-38aa-9b3a-39662db50732.roa (raw, json) Hash identifier: 4WQ3tRUT/AMuOxIHop6++iZ4GqgOollDFPiq224M9A0= Subject key identifier: 97:77:9C:0C:39:14:0E:CD:F6:7D:B3:82:C7:33:BE:53:CD:BD:DB:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B01F874D91036DEC5A400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7dd8d-aac3-38aa-9b3a-39662db50732.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 67.191.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:01:f8:74:d9:10:36:de:c5:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=f944dea3-e84b-483c-824e-c6527483f545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:db:97:19:be:70:d9:8f:6a:89:4b:a8:11: 98:5f:6f:3f:4b:68:86:e7:1d:57:71:19:0c:ac:76: e8:1a:91:1c:72:b4:61:e9:a5:6b:4f:90:1c:0c:a0: 3e:d6:d8:b4:0d:e2:45:6a:24:fe:7f:03:58:49:73: bd:52:a5:50:64:05:20:8a:4d:50:e1:dc:9a:af:2d: 49:ed:ed:ce:d3:99:42:e4:de:90:a7:b9:b9:78:25: 15:c1:3d:e9:a1:bb:4d:f2:ed:1d:3b:d4:bb:1d:ae: 26:d6:0c:36:60:00:ca:7a:d9:65:e5:77:a7:02:db: b9:9c:c8:51:b6:9d:3a:7c:de:5c:91:45:f7:55:7b: 89:ee:4a:2b:d2:fa:60:0a:1b:6e:19:b0:62:7b:2b: d4:0e:bc:74:15:31:e7:96:70:12:52:45:66:4d:07: 7b:72:70:cc:35:98:b4:0e:8b:5b:b0:65:93:59:13: 60:2b:4d:cc:a7:a5:a5:51:c7:ac:c5:04:76:29:60: f5:b5:96:65:fc:bd:25:cf:36:be:37:98:5c:65:66: 72:c9:d2:2b:db:ad:6f:40:ff:38:a4:c9:67:2b:3a: 39:39:dd:de:78:f9:a6:43:46:85:b6:02:e9:26:b7: dd:9c:60:3b:34:9d:45:80:bb:08:35:44:ce:73:b7: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:77:9C:0C:39:14:0E:CD:F6:7D:B3:82:C7:33:BE:53:CD:BD:DB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7dd8d-aac3-38aa-9b3a-39662db50732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.191.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:aa:5a:a5:73:1c:a7:54:51:8e:72:8a:db:e3:8b:86:2a:11: 24:21:0d:d7:f7:bc:05:52:8e:38:16:ee:fc:49:48:64:7c:b6: 98:f5:64:74:b0:7c:60:ef:ef:25:ea:b3:8a:8e:16:7f:2f:1b: 4b:e5:3b:00:0e:4b:ea:89:9c:57:2e:10:b5:b2:3f:c7:8a:f8: ef:59:14:7e:12:e1:f5:05:97:4b:ae:97:8a:e9:82:00:33:15: c4:0c:88:e7:bc:c0:43:93:ed:2b:a9:64:6f:77:a0:5a:b2:a2: 12:13:88:6d:41:eb:3c:09:ec:2b:a9:af:1c:3f:1c:80:6c:37: ed:fe:3b:1e:6c:e7:1c:84:9e:b3:e6:c9:82:13:ca:6b:c9:e5: 65:41:c9:45:aa:eb:b9:b7:c9:98:b3:6d:c2:1d:dc:f5:b2:11: 5c:3a:4b:f7:0e:eb:d6:97:58:43:a9:ad:e7:45:60:d3:64:c6: 32:32:3c:fc:06:da:56:8a:9c:7f:63:68:22:17:0d:e6:8c:34: a7:7d:a9:05:e9:c0:19:89:10:81:f1:03:24:6f:88:77:a7:22: 86:5e:cd:21:ee:89:47:4e:59:18:71:95:af:6b:e2:4a:81:f4: da:22:af:93:d7:e8:12:70:6c:bb:dd:9c:69:cf:5f:be:e4:11: 84:7e:4a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCwH4dNkQNt7FpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk Zjk0NGRlYTMtZTg0Yi00ODNjLTgyNGUtYzY1Mjc0ODNmNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT3blxm+cNmPaolLqBGYX28/S2iG5x1XcRkM rHboGpEccrRh6aVrT5AcDKA+1ti0DeJFaiT+fwNYSXO9UqVQZAUgik1Q4dyary1J 7e3O05lC5N6Qp7m5eCUVwT3pobtN8u0dO9S7Ha4m1gw2YADKetll5XenAtu5nMhR tp06fN5ckUX3VXuJ7kor0vpgChtuGbBieyvUDrx0FTHnlnASUkVmTQd7cnDMNZi0 DotbsGWTWRNgK03Mp6WlUcesxQR2KWD1tZZl/L0lzza+N5hcZWZyydIr261vQP84 pMlnKzo5Od3eePmmQ0aFtgLpJrfdnGA7NJ1FgLsINUTOc7eSWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd3nAw5FA7N9n2zgsczvlPNvduhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNlN2RkOGQtYWFjMy0z OGFhLTliM2EtMzk2NjJkYjUwNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACqWqVzHKdUUY5yitvji4YqESQhDdf3vAVSjjgW7vxJSGR8tpj1ZHSw fGDv7yXqs4qOFn8vG0vlOwAOS+qJnFcuELWyP8eK+O9ZFH4S4fUFl0uul4rpggAz FcQMiOe8wEOT7SupZG93oFqyohITiG1B6zwJ7Cuprxw/HIBsN+3+Ox5s5xyEnrPm yYITymvJ5WVByUWq67m3yZizbcId3PWyEVw6S/cO69aXWEOpredFYNNkxjIyPPwG 2laKnH9jaCIXDeaMNKd9qQXpwBmJEIHxAyRviHenIoZezSHuiUdOWRhxla9r4kqB 9Noir5PX6BJwbLvdnGnPX77kEYR+Sqs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:57 2025 by rpki-client