$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/299832d3-d9ab-3a6f-95f1-d07a540c6894.roa File: 299832d3-d9ab-3a6f-95f1-d07a540c6894.roa (raw, json) Hash identifier: PWaYzgogqV+SwyUh2XyX0GkD3lNdSR7w8C8L84JXn1c= Subject key identifier: AC:2A:F5:8E:16:8B:F0:6C:52:E0:08:9D:C7:D9:4B:FC:D7:E6:BF:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B0ACEAA6AD2C4A97B0F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/299832d3-d9ab-3a6f-95f1-d07a540c6894.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 71.204.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:0a:ce:aa:6a:d2:c4:a9:7b:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=7b279768-d48b-4ee9-881c-eca55951c26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:af:4b:aa:bb:40:9c:cb:c0:a2:cf:d2:ac:d0: 83:d7:b5:2c:f4:24:f3:69:73:85:cf:6d:14:34:b4: 7a:d2:39:91:be:b3:82:30:ec:ec:b1:a8:33:ae:5c: 45:2b:ae:72:ce:99:d4:fd:14:63:50:45:2d:89:ae: 12:87:4e:65:20:aa:75:58:03:18:f6:56:37:bb:9c: 6c:ff:9a:08:c7:fb:e5:a2:ff:5e:b0:42:56:95:98: 09:20:4b:e9:c7:22:47:f7:69:d7:d3:fa:8b:37:e2: 73:1b:e7:18:09:d0:31:e0:fd:b2:1a:de:30:77:4c: 02:96:bf:bd:47:cf:0c:71:d8:7c:cb:bd:df:9b:c5: d6:e3:32:11:74:0c:43:50:5f:b3:f5:e4:00:a0:16: 04:8b:06:d9:5d:90:1a:25:47:2a:b2:af:3a:d6:6b: d2:49:48:0e:52:76:7a:e4:b5:8c:02:be:47:9b:bb: a4:ac:3e:73:6f:11:0a:f7:be:f6:c5:c0:f3:99:e9: 13:af:d8:8a:0a:df:97:93:f8:df:0b:ee:c3:47:61: 55:07:c5:bb:bc:0a:09:58:3e:f3:62:b9:1f:2e:ca: 65:63:39:6c:6e:d7:e0:04:c0:0e:1c:e2:fd:61:4b: 82:c2:66:1e:2c:fa:e7:09:f3:ed:4c:60:d9:d2:67: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2A:F5:8E:16:8B:F0:6C:52:E0:08:9D:C7:D9:4B:FC:D7:E6:BF:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/299832d3-d9ab-3a6f-95f1-d07a540c6894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:34:23:63:34:62:d9:fa:2e:f9:bb:42:65:48:4d:07:12:12: 3a:88:b2:4c:5a:a2:27:e2:c4:54:a6:a7:0d:2d:66:f5:46:ff: f8:c7:7a:de:86:a4:c2:0a:7f:fe:d5:45:96:5e:df:7f:6a:88: f1:7d:0a:23:81:25:0d:2b:c3:db:72:c9:1a:e2:0a:82:2e:3d: 2a:6a:74:56:22:2e:e1:b1:6b:a2:f2:08:44:ad:c1:6d:bd:e9: d8:08:bf:6f:34:90:5e:40:ed:10:97:d2:74:90:1d:40:14:48: e8:1a:44:5f:bd:8b:48:eb:ab:4e:e2:86:45:04:08:aa:14:af: f3:03:34:49:5e:88:74:c4:33:d6:27:99:2a:41:b0:6f:27:01: 70:70:2d:ea:8d:77:e0:2b:a0:66:c2:a1:fb:2e:60:ca:86:53: 4d:97:9c:89:89:35:87:8a:f8:db:cd:03:4f:7b:9e:1b:16:38: de:38:a5:09:b6:0b:3f:1b:62:28:c9:da:ed:0f:d2:80:42:fb: 50:17:7b:60:74:3a:46:d9:06:14:0b:fb:67:30:21:2e:1f:db: 47:5b:a0:f1:9f:99:e6:f7:25:00:9e:31:d0:91:1b:19:bb:a6: 56:80:63:57:d3:e0:7d:3d:8a:0a:ba:c8:df:d2:16:c0:ad:23: 80:34:43:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCwrOqmrSxKl7D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk N2IyNzk3NjgtZDQ4Yi00ZWU5LTg4MWMtZWNhNTU5NTFjMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha9LqrtAnMvAos/SrNCD17Us9CTzaXOFz20U NLR60jmRvrOCMOzssagzrlxFK65yzpnU/RRjUEUtia4Sh05lIKp1WAMY9lY3u5xs /5oIx/vlov9esEJWlZgJIEvpxyJH92nX0/qLN+JzG+cYCdAx4P2yGt4wd0wClr+9 R88Mcdh8y73fm8XW4zIRdAxDUF+z9eQAoBYEiwbZXZAaJUcqsq861mvSSUgOUnZ6 5LWMAr5Hm7ukrD5zbxEK9772xcDzmekTr9iKCt+Xk/jfC+7DR2FVB8W7vAoJWD7z YrkfLsplYzlsbtfgBMAOHOL9YUuCwmYeLPrnCfPtTGDZ0mfUpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwq9Y4Wi/BsUuAIncfZS/zX5r/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjk5ODMyZDMtZDlhYi0z YTZmLTk1ZjEtZDA3YTU0MGM2ODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR8wcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI0I2M0Ytn6Lvm7QmVITQcSEjqIskxaoifixFSmpw0tZvVG//jHet6G pMIKf/7VRZZe339qiPF9CiOBJQ0rw9tyyRriCoIuPSpqdFYiLuGxa6LyCEStwW29 6dgIv280kF5A7RCX0nSQHUAUSOgaRF+9i0jrq07ihkUECKoUr/MDNEleiHTEM9Yn mSpBsG8nAXBwLeqNd+AroGbCofsuYMqGU02XnImJNYeK+NvNA097nhsWON44pQm2 Cz8bYijJ2u0P0oBC+1AXe2B0OkbZBhQL+2cwIS4f20dboPGfmeb3JQCeMdCRGxm7 plaAY1fT4H09igq6yN/SFsCtI4A0Q3k= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:58 2025 by rpki-client