$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b59fe67-057b-3f54-95d6-ee64d678e59d.roa File: 2b59fe67-057b-3f54-95d6-ee64d678e59d.roa (raw, json) Hash identifier: KKsvEYG4JqsrGa3w1r5l1c3yN40C3KFlWURWPbx9CDo= Subject key identifier: C4:9B:2E:20:93:C5:49:08:BC:7D:5D:99:BC:0C:A4:E3:98:46:9E:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7B68AC2F06D6043ABE780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b59fe67-057b-3f54-95d6-ee64d678e59d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.236.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:b6:8a:c2:f0:6d:60:43:ab:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=078affe3-ddbe-42c5-9d7d-11406d60e759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:1f:6b:c4:42:78:eb:93:53:35:2d:1c:18: e2:a6:2c:04:a8:3a:a5:e6:c4:c8:df:f9:ae:cc:8d: 58:54:2a:6c:3f:57:55:0d:3f:7b:a8:66:14:85:a6: 46:8d:e7:5f:64:ec:55:e7:99:4d:b7:6b:03:17:10: f7:76:04:b6:45:86:5d:74:34:c3:85:a4:88:dc:dc: aa:2f:28:76:b5:77:ff:e9:3d:9a:0f:10:4d:dc:14: b1:20:a1:cc:5a:07:21:08:0c:28:25:51:09:fe:af: f3:1a:86:9b:42:6d:2f:09:80:53:8e:e1:57:f5:e8: ec:88:cd:ff:d9:53:c0:49:6a:67:4a:3e:72:69:33: 91:3a:24:b0:c8:c4:a7:d1:8c:fc:e6:00:c1:20:a4: 39:18:95:00:2b:cc:37:a1:8d:4f:15:c1:77:a9:9a: 05:5b:da:30:88:4a:84:7b:b0:6e:67:31:11:e7:9a: 71:7c:b4:77:74:8c:58:55:7a:b1:da:0d:dc:d7:6b: 7e:55:45:d7:39:48:90:1a:6d:0f:f4:56:4d:f7:0c: e5:84:47:2f:26:d1:a5:f7:7a:5b:44:1d:a0:bc:86: 95:65:48:b4:c1:2d:a7:13:72:f6:bd:17:1b:b6:f0: 6f:71:ae:cb:92:35:4f:c7:de:59:47:fd:9c:e6:65: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9B:2E:20:93:C5:49:08:BC:7D:5D:99:BC:0C:A4:E3:98:46:9E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b59fe67-057b-3f54-95d6-ee64d678e59d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a1:8b:20:73:ca:81:6b:dc:32:7a:0d:eb:ce:85:08:21:59: 79:31:00:a4:fa:67:29:78:4c:83:71:64:63:cb:15:45:6d:ac: 5a:37:1d:a6:9e:00:91:b3:7e:90:94:94:41:2b:4d:c4:cd:49: b1:2e:09:08:e4:a7:3c:4b:97:a2:9a:9a:21:8a:75:4f:a2:47: 18:d4:a9:7b:d1:3d:fd:26:97:bf:c7:36:fe:ba:dc:a1:99:a9: 3f:c6:08:0d:10:51:19:57:2e:5b:4d:57:04:48:51:7f:c9:ee: bd:5d:c5:bb:f1:f0:f9:19:bf:f5:85:e0:b8:1a:26:f9:16:c5: 62:1c:22:e8:c3:f2:6e:c5:53:1d:fd:d1:39:59:c3:de:7c:bf: a3:38:5f:8d:2c:33:38:46:fa:77:dc:46:ab:cb:3a:46:ff:27: 3f:b3:10:86:fd:cc:96:d6:10:07:09:b0:54:ce:04:e2:8b:83: a1:34:93:40:29:a0:73:74:a1:b2:9a:c9:3d:85:f1:2c:67:d2: 0f:7a:4e:83:57:6b:90:0f:19:7b:96:63:90:e8:56:f8:2e:2f: 65:3d:fd:69:08:13:0b:b3:02:94:42:75:15:a6:4f:3c:50:e3: 76:a5:0f:1c:a2:2f:37:22:ff:6b:cd:e1:8a:0d:34:ab:ba:ad: f0:8b:5e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp7aKwvBtYEOr54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDc4YWZmZTMtZGRiZS00MmM1LTlkN2QtMTE0MDZkNjBlNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Ifa8RCeOuTUzUtHBjipiwEqDql5sTI3/mu zI1YVCpsP1dVDT97qGYUhaZGjedfZOxV55lNt2sDFxD3dgS2RYZddDTDhaSI3Nyq Lyh2tXf/6T2aDxBN3BSxIKHMWgchCAwoJVEJ/q/zGoabQm0vCYBTjuFX9ejsiM3/ 2VPASWpnSj5yaTOROiSwyMSn0Yz85gDBIKQ5GJUAK8w3oY1PFcF3qZoFW9owiEqE e7BuZzER55pxfLR3dIxYVXqx2g3c12t+VUXXOUiQGm0P9FZN9wzlhEcvJtGl93pb RB2gvIaVZUi0wS2nE3L2vRcbtvBvca7LkjVPx95ZR/2c5mUGQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSbLiCTxUkIvH1dmbwMpOOYRp7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmI1OWZlNjctMDU3Yi0z ZjU0LTk1ZDYtZWU2NGQ2NzhlNTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+yUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmhiyBzyoFr3DJ6DevOhQghWXkxAKT6Zyl4TINxZGPLFUVtrFo3Haae AJGzfpCUlEErTcTNSbEuCQjkpzxLl6KamiGKdU+iRxjUqXvRPf0ml7/HNv663KGZ qT/GCA0QURlXLltNVwRIUX/J7r1dxbvx8PkZv/WF4LgaJvkWxWIcIujD8m7FUx39 0TlZw958v6M4X40sMzhG+nfcRqvLOkb/Jz+zEIb9zJbWEAcJsFTOBOKLg6E0k0Ap oHN0obKayT2F8Sxn0g96ToNXa5APGXuWY5DoVvguL2U9/WkIEwuzApRCdRWmTzxQ 43alDxyiLzci/2vN4YoNNKu6rfCLXgk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:27 2025 by rpki-client