$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c362503-2052-34f2-a660-691bfd9aafa4.roa File: 4c362503-2052-34f2-a660-691bfd9aafa4.roa (raw, json) Hash identifier: j/flQanC6NNrvv/d1X/Ug2u7wOhJzhskDCB42/wz0B0= Subject key identifier: 24:73:74:24:5E:03:72:F5:39:89:E9:8D:9D:60:E9:5D:9F:02:57:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9202FEACA7CE4A5109F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c362503-2052-34f2-a660-691bfd9aafa4.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 71.228.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:20:2f:ea:ca:7c:e4:a5:10:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=38426d4e-bb09-415d-97ca-dc61179fffd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:71:75:17:b4:f5:09:8b:b3:1e:52:8b:ba: 04:73:b3:d2:ab:c3:cf:4c:6a:63:52:eb:12:64:bd: 90:9b:33:33:d6:e2:cb:db:3b:8b:d0:15:d5:49:0c: bf:3c:ba:77:56:d5:e3:a6:ae:8e:3f:57:37:cd:1f: 72:a8:6d:75:4a:fd:1e:2c:33:c1:dc:2d:fa:7a:75: 8f:0b:af:5f:4a:2e:20:11:fd:4c:0b:ee:36:60:5f: 2a:b1:93:69:f4:64:cc:af:ae:4d:20:84:96:a6:86: f2:ae:a6:85:2d:2a:eb:f6:29:38:8f:40:78:66:7d: be:58:90:dc:01:92:4d:3b:6c:6e:b9:d3:ad:05:70: b2:e4:37:ea:aa:28:aa:08:1b:1c:0f:0e:60:c2:87: 48:89:48:99:90:5a:85:fe:eb:4a:f3:1e:ef:79:76: e8:64:bc:54:c4:94:75:ae:71:9a:a4:09:f5:6b:1f: 2e:32:c8:dd:dc:ae:cf:9b:35:de:98:54:27:b6:80: 9b:2d:fe:95:93:72:b8:92:18:43:24:14:77:a2:3e: 28:ec:a8:ed:14:de:ec:c8:11:a3:c1:3e:51:e2:d8: 7d:e5:12:58:88:2c:5e:1b:63:88:60:d3:d1:94:42: ec:cc:f6:b6:cb:7c:63:35:0f:dc:e0:00:20:04:e1: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:74:24:5E:03:72:F5:39:89:E9:8D:9D:60:E9:5D:9F:02:57:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c362503-2052-34f2-a660-691bfd9aafa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:19:66:77:a8:1c:9f:72:22:fe:0d:78:07:61:8f:90:d0:63: 05:39:e4:95:75:19:07:71:14:52:e1:b6:e3:7c:89:99:ef:7e: a0:50:d1:40:0c:eb:eb:89:00:4b:36:fc:48:6a:52:52:19:2a: 49:24:c9:7c:49:94:83:aa:f2:1c:ff:ea:99:e5:6e:de:2d:9b: d8:85:0d:0f:e5:fd:b8:42:d0:c8:b4:bb:54:48:02:0c:31:9f: a5:7c:0c:4c:47:d4:8e:d7:54:ea:8a:a6:c6:2e:19:8f:8d:45: 72:5d:af:c7:f3:1d:fd:17:bd:9a:52:62:af:a7:1a:7b:b7:b8: e6:a6:f4:3d:35:f2:7a:af:f6:69:45:d2:f0:18:ae:dc:2b:5e: 26:3f:6d:a6:06:e3:1f:e7:3e:9b:72:a7:3f:0f:5a:84:59:de: a5:6b:02:74:16:5d:ec:a5:f3:9a:8f:de:6f:96:c8:35:3a:23: 5e:3c:63:3b:ba:ca:6b:79:77:dc:41:de:96:6f:38:f9:49:f1: 36:a2:bc:ff:13:7e:56:a4:47:6c:43:f6:5f:47:13:78:15:99: 45:42:47:d5:ba:de:e7:cd:0a:f6:4f:52:7e:6f:91:8c:e8:60: 23:fe:2d:2f:a5:35:47:88:06:72:af:66:7a:a8:64:36:1b:1b: a1:13:dd:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uSAv6sp85KUQnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Mzg0MjZkNGUtYmIwOS00MTVkLTk3Y2EtZGM2MTE3OWZmZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvalxdRe09QmLsx5Si7oEc7PSq8PPTGpjUusS ZL2QmzMz1uLL2zuL0BXVSQy/PLp3VtXjpq6OP1c3zR9yqG11Sv0eLDPB3C36enWP C69fSi4gEf1MC+42YF8qsZNp9GTMr65NIISWpobyrqaFLSrr9ik4j0B4Zn2+WJDc AZJNO2xuudOtBXCy5DfqqiiqCBscDw5gwodIiUiZkFqF/utK8x7veXboZLxUxJR1 rnGapAn1ax8uMsjd3K7PmzXemFQntoCbLf6Vk3K4khhDJBR3oj4o7KjtFN7syBGj wT5R4th95RJYiCxeG2OIYNPRlELszPa2y3xjNQ/c4AAgBOGL0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRzdCReA3L1OYnpjZ1g6V2fAleDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGMzNjI1MDMtMjA1Mi0z NGYyLWE2NjAtNjkxYmZkOWFhZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER+SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoZZneoHJ9yIv4NeAdhj5DQYwU55JV1GQdxFFLhtuN8iZnvfqBQ0UAM 6+uJAEs2/EhqUlIZKkkkyXxJlIOq8hz/6pnlbt4tm9iFDQ/l/bhC0Mi0u1RIAgwx n6V8DExH1I7XVOqKpsYuGY+NRXJdr8fzHf0XvZpSYq+nGnu3uOam9D018nqv9mlF 0vAYrtwrXiY/baYG4x/nPptypz8PWoRZ3qVrAnQWXeyl85qP3m+WyDU6I148Yzu6 ymt5d9xB3pZvOPlJ8TaivP8TflakR2xD9l9HE3gVmUVCR9W63ufNCvZPUn5vkYzo YCP+LS+lNUeIBnKvZnqoZDYbG6ET3Vk= -----END CERTIFICATE-----Generated at Wed Nov 5 06:30:07 2025 by rpki-client