$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd500e2-fb27-302a-95d5-900cf6ee3f22.roa File: 3bd500e2-fb27-302a-95d5-900cf6ee3f22.roa (raw, json) Hash identifier: 8OKXSov8RNqMQk5d5xRrQaJFm32ltBaYlz36ORBIK4Q= Subject key identifier: D2:E3:8D:71:D7:89:6B:1C:3A:47:ED:C9:81:CF:4D:0D:27:43:C3:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5142E7EF7E2AAAA312940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd500e2-fb27-302a-95d5-900cf6ee3f22.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.202.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:14:2e:7e:f7:e2:aa:aa:31:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1e299431-c1e1-451e-b21d-399791c42b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:c3:ae:2c:98:92:b1:c6:44:3f:dc:2d:a5: 85:be:00:e0:91:1f:6c:f6:b7:e3:af:5e:35:1f:45: d5:d9:47:6f:8b:4e:df:fa:6b:49:ae:ff:e7:f2:c8: 57:46:a4:24:73:da:91:74:38:c1:0a:96:08:2a:30: 91:86:e6:d2:44:5a:a8:dd:e2:a6:3d:d5:3d:d4:74: 1e:9d:b6:2d:69:fe:9e:6f:82:23:99:c9:44:ff:4a: bd:85:4c:e2:aa:08:30:f3:e8:96:25:09:04:e1:87: d6:1c:01:c1:80:5f:7e:32:9d:8f:99:d1:3e:d3:97: dd:a7:55:53:06:38:4e:02:d7:f1:08:90:7a:da:6f: 83:dd:74:b0:8b:ae:cd:84:3a:b0:4b:64:9d:ca:73: 27:60:c4:d6:a2:7a:f8:c7:26:a5:69:2a:63:9d:1f: a1:8a:ab:01:c1:82:56:77:5a:21:0c:e6:9d:3c:d9: 8e:17:2c:53:ad:cc:7f:04:c0:32:03:e6:2d:c4:33: a2:15:99:e2:67:4b:ee:20:e5:19:56:c2:38:93:b6: 6f:9d:1f:0d:6f:ed:c5:0e:0c:0c:42:f9:70:85:c9: fc:f8:f4:7d:c2:53:72:ea:96:99:11:a3:c2:e4:ff: 26:f8:cb:a5:1c:7d:2f:a8:b3:c6:fe:c0:b1:92:74: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E3:8D:71:D7:89:6B:1C:3A:47:ED:C9:81:CF:4D:0D:27:43:C3:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd500e2-fb27-302a-95d5-900cf6ee3f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e5:70:45:ed:dc:0c:00:53:04:27:62:1e:30:d2:00:61:47: a1:20:3e:69:c2:93:9d:a2:33:b3:03:66:a5:0c:3e:37:8b:a1: 1a:c1:58:0a:c9:68:f4:e8:8c:de:53:6e:db:d3:71:f7:a0:1a: 82:7a:49:3e:12:81:7c:ac:ba:00:6a:39:b3:d1:bc:c9:bb:57: 94:87:48:75:a8:a8:e7:bd:b7:9f:ea:54:60:13:11:91:c5:d0: b8:08:75:a5:8f:40:9d:ea:98:fc:d4:a5:0b:84:0f:3a:32:fe: 0a:8d:e0:83:05:c4:99:10:15:3d:3c:17:12:8c:96:03:fe:7e: 9f:92:09:09:30:84:aa:68:ec:b6:c6:4e:dd:85:0c:7b:48:17: d7:22:27:ea:85:71:02:42:9d:46:87:2a:36:a5:92:50:ba:61: 22:41:eb:a6:7a:90:5f:c7:a3:db:01:da:8f:1b:77:49:05:77: 86:69:72:e5:fe:7b:cc:fc:3a:69:3f:e7:66:d4:86:ec:46:85: c3:81:f4:36:49:2c:21:12:55:cc:fa:e5:15:b8:f6:be:d8:82: 19:b3:97:c7:7a:52:d2:b5:81:c5:8b:43:26:b4:b2:ab:33:1b: 24:62:28:3d:b4:ef:87:22:96:42:73:29:f8:fe:4a:86:0b:7b: 07:a3:e1:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxRQufvfiqqoxKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWUyOTk0MzEtYzFlMS00NTFlLWIyMWQtMzk5NzkxYzQyYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6DDriyYkrHGRD/cLaWFvgDgkR9s9rfjr141 H0XV2Udvi07f+mtJrv/n8shXRqQkc9qRdDjBCpYIKjCRhubSRFqo3eKmPdU91HQe nbYtaf6eb4IjmclE/0q9hUziqggw8+iWJQkE4YfWHAHBgF9+Mp2PmdE+05fdp1VT BjhOAtfxCJB62m+D3XSwi67NhDqwS2SdynMnYMTWonr4xyalaSpjnR+hiqsBwYJW d1ohDOadPNmOFyxTrcx/BMAyA+YtxDOiFZniZ0vuIOUZVsI4k7ZvnR8Nb+3FDgwM Qvlwhcn8+PR9wlNy6paZEaPC5P8m+MulHH0vqLPG/sCxknQ0HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLjjXHXiWscOkftyYHPTQ0nQ8OsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JkNTAwZTItZmIyNy0z MDJhLTk1ZDUtOTAwY2Y2ZWUzZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8paMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXlcEXt3AwAUwQnYh4w0gBhR6EgPmnCk52iM7MDZqUMPjeLoRrBWArJ aPTojN5TbtvTcfegGoJ6ST4SgXysugBqObPRvMm7V5SHSHWoqOe9t5/qVGATEZHF 0LgIdaWPQJ3qmPzUpQuEDzoy/gqN4IMFxJkQFT08FxKMlgP+fp+SCQkwhKpo7LbG Tt2FDHtIF9ciJ+qFcQJCnUaHKjalklC6YSJB66Z6kF/Ho9sB2o8bd0kFd4ZpcuX+ e8z8Omk/52bUhuxGhcOB9DZJLCESVcz65RW49r7Yghmzl8d6UtK1gcWLQya0sqsz GyRiKD2074cilkJzKfj+SoYLewej4dc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:40 2025 by rpki-client