$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa File: 3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa (raw, json) Hash identifier: /Jf5TkIxgOOip7e69XvHaQSriPLUUYGTYF5pTNV+DOc= Subject key identifier: 22:6B:14:F7:D7:6E:63:34:3E:86:75:8F:47:0B:A8:C0:78:11:CC:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC35F8D092CCAD6B394D830 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 71.199.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:5f:8d:09:2c:ca:d6:b3:94:d8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4b9d63e4-bc42-4c59-9956-ea16b437d4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:95:bc:93:e7:a0:81:14:3b:fb:a3:26:b5: 58:73:76:94:de:70:2c:22:ef:9e:32:ca:a1:30:13: c9:82:df:62:99:ec:a8:a2:19:24:c6:8b:e6:c1:b6: 0b:54:bf:66:ee:8d:b1:ba:c9:ce:4c:22:fe:21:82: ed:a5:18:f7:07:da:1c:f4:a1:d2:b1:03:19:14:e8: d0:65:be:b6:e8:20:9d:01:be:61:85:97:c6:f2:d2: 98:c5:07:56:3a:10:01:d2:43:67:e1:2b:5d:7c:7e: 6d:38:7c:d1:bc:0c:3f:1f:db:29:c5:33:f7:c9:01: 46:9e:31:95:0b:e1:3d:28:6e:17:37:4e:55:41:d5: b2:83:be:6d:a3:94:2a:18:39:95:6f:97:93:49:e9: cb:9c:21:a2:06:92:bd:3a:23:8b:de:0b:1d:c6:1f: 30:bb:df:18:19:16:9c:91:55:69:88:82:54:67:74: 5b:7f:1f:03:ca:33:82:44:21:c8:ed:26:ac:88:09: 6e:ad:71:b0:59:12:ab:50:2a:7e:17:ba:aa:62:a4: 30:2b:4a:fc:8d:53:c2:8a:3b:7c:fb:50:19:e2:ae: c4:4b:34:8b:2e:61:98:a8:71:89:de:c6:ff:59:20: 34:19:f4:71:22:15:31:a5:de:db:f9:49:e8:cf:a2: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6B:14:F7:D7:6E:63:34:3E:86:75:8F:47:0B:A8:C0:78:11:CC:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.199.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:95:44:f7:2c:10:ec:d0:15:55:b6:d4:c3:6a:db:c2:35:fc: 31:bb:28:57:67:d8:b0:71:3e:dd:79:66:73:13:f7:db:22:e0: aa:7b:45:74:d6:e9:bf:de:82:ff:8b:c7:08:83:a1:b0:ab:e9: dc:81:e7:a3:ae:ad:37:c9:74:1a:ac:d5:2a:8a:4b:22:30:aa: 05:6f:63:05:93:d5:e6:01:68:c4:c1:71:e7:59:6b:4d:da:28: 2c:3c:1c:77:43:ac:8f:02:ee:3b:74:07:55:1a:cd:e9:4f:f6: 48:75:7f:6b:2c:c5:09:23:1e:9b:c6:79:c0:b2:1b:a3:0e:7f: 7e:54:fa:7b:f1:8c:1d:79:7d:ad:ab:9b:00:96:6f:16:cf:42: 0b:34:51:73:39:07:0b:5a:04:20:51:e8:c3:80:36:4a:f7:70: 3a:0a:01:92:1c:6f:d7:d5:4a:36:d2:3e:71:77:9f:0a:b0:e5: b3:be:6b:42:12:7d:fe:57:07:bc:08:bb:77:25:97:bb:47:7c: 9c:05:d5:38:24:42:46:c5:0b:12:04:17:20:3d:73:49:5f:3f: e8:3b:c9:28:93:c9:f2:c8:2b:9b:c8:93:17:7a:c5:70:7d:16: 52:66:9a:6e:bb:69:7d:51:af:de:6d:f7:46:b8:f1:dc:8f:0f: dc:4d:8c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw1+NCSzK1rOU2DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGI5ZDYzZTQtYmM0Mi00YzU5LTk5NTYtZWExNmI0MzdkNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2eVvJPnoIEUO/ujJrVYc3aU3nAsIu+eMsqh MBPJgt9imeyoohkkxovmwbYLVL9m7o2xusnOTCL+IYLtpRj3B9oc9KHSsQMZFOjQ Zb626CCdAb5hhZfG8tKYxQdWOhAB0kNn4StdfH5tOHzRvAw/H9spxTP3yQFGnjGV C+E9KG4XN05VQdWyg75to5QqGDmVb5eTSenLnCGiBpK9OiOL3gsdxh8wu98YGRac kVVpiIJUZ3Rbfx8DyjOCRCHI7SasiAlurXGwWRKrUCp+F7qqYqQwK0r8jVPCijt8 +1AZ4q7ESzSLLmGYqHGJ3sb/WSA0GfRxIhUxpd7b+Unoz6JRRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJrFPfXbmM0PoZ1j0cLqMB4Ecz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M5MzBiNWYtMGM1OC0z YTFiLTgzMmEtZmM4YWU3MDg0YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8cUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSVRPcsEOzQFVW21MNq28I1/DG7KFdn2LBxPt15ZnMT99si4Kp7RXTW 6b/egv+LxwiDobCr6dyB56OurTfJdBqs1SqKSyIwqgVvYwWT1eYBaMTBcedZa03a KCw8HHdDrI8C7jt0B1UazelP9kh1f2ssxQkjHpvGecCyG6MOf35U+nvxjB15fa2r mwCWbxbPQgs0UXM5BwtaBCBR6MOANkr3cDoKAZIcb9fVSjbSPnF3nwqw5bO+a0IS ff5XB7wIu3cll7tHfJwF1TgkQkbFCxIEFyA9c0lfP+g7ySiTyfLIK5vIkxd6xXB9 FlJmmm67aX1Rr95t90a48dyPD9xNjNc= -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:18 2025 by rpki-client