$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c70331b-fde5-3f0c-b078-269cf0297e12.roa File: 4c70331b-fde5-3f0c-b078-269cf0297e12.roa (raw, json) Hash identifier: tzIbXw9w9LHyiP0egP6FmUjk0m6WxR0SvlwpYfpyzy4= Subject key identifier: 3A:3A:C0:CA:B9:59:6C:C7:5B:1F:89:9D:09:20:6B:4B:68:E0:51:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9662EFFDA9996A3D40480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c70331b-fde5-3f0c-b078-269cf0297e12.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 71.238.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:66:2e:ff:da:99:96:a3:d4:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f6ab0a41-292a-4ff1-a9d3-b8f11ff34d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:b5:fe:d3:bf:f9:cb:4f:6c:ce:9e:40:d3: 70:a3:fb:1b:a0:49:4b:ba:61:fe:4c:44:9d:47:4f: 5e:da:68:e7:74:3e:32:bc:dd:ea:73:3a:2b:e5:cf: c5:da:ae:b7:07:f3:36:01:27:c1:b0:d0:58:97:56: 2b:d0:96:9d:bc:86:32:b7:4f:44:4a:85:1e:2b:0b: f7:7c:8d:e7:54:06:f2:62:5c:25:14:67:03:a8:81: a9:97:0e:c6:58:bb:99:5e:3c:26:c2:39:2b:fe:78: d5:15:10:f3:aa:0e:18:a0:64:ad:b1:5c:7b:e3:99: 60:cc:6e:1a:3a:e7:b4:95:ee:3d:bb:38:72:ab:f4: 4e:06:15:15:71:1f:d2:d7:68:91:06:49:76:80:40: 93:4c:5f:54:96:91:8c:3f:03:aa:22:33:4e:9c:2f: 0d:ca:0a:de:b2:c3:bd:08:28:43:ee:da:fc:29:2b: 0e:cd:91:4c:11:da:41:f4:84:26:b2:8e:d8:a1:04: ec:3c:03:fb:ca:2f:f9:46:e8:1a:bd:e9:b0:b3:cd: 33:8f:34:7f:6a:51:04:c3:e4:86:7c:62:b0:95:0c: b6:5d:42:a5:90:69:3c:15:36:8e:77:d1:6d:72:78: e5:47:d5:cf:5a:32:b5:87:68:c8:69:4b:ae:29:d2: b6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3A:C0:CA:B9:59:6C:C7:5B:1F:89:9D:09:20:6B:4B:68:E0:51:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c70331b-fde5-3f0c-b078-269cf0297e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5b:8b:0e:e9:df:7a:02:ae:0d:da:69:2f:ac:1a:ff:1a:85: 23:33:41:5a:73:a1:1f:0c:bd:58:ef:5c:69:54:ca:32:0a:12: 4a:9f:50:fe:a2:d9:db:d3:f3:e9:f8:f6:5d:6d:f8:45:5f:bf: 53:76:f7:61:dd:f1:ba:0a:9a:36:b4:d6:7a:76:54:4a:37:f2: d8:b3:49:66:f0:7c:7b:cb:79:43:d7:32:0b:14:68:3d:65:ca: d5:a7:66:64:22:c6:56:86:4d:5a:7e:a2:3f:26:62:84:53:67: 35:32:ee:c6:bb:fa:13:32:fd:41:28:44:e8:92:31:54:27:3a: 53:3c:d3:8a:28:d7:08:dc:89:a4:28:f1:50:d9:76:5a:a3:2a: d0:e4:c2:8e:41:db:ab:48:81:57:86:54:cc:a4:a8:55:3e:ab: 7f:fe:6b:55:10:d3:ac:fa:20:72:60:3e:98:be:63:02:95:ba: 78:fa:16:1d:b4:d6:b8:fb:4c:a5:fe:8b:e0:89:4b:5c:72:83: 76:86:cf:50:74:50:65:0a:04:93:5f:b3:59:66:76:97:52:5b: 8d:de:23:c2:fd:9f:05:8f:2d:60:39:d3:27:c4:73:80:a5:9c: 59:36:97:14:4a:b1:24:5f:12:ca:d0:3b:21:0c:02:6d:5f:18: c9:03:72:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqWYu/9qZlqPUBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjZhYjBhNDEtMjkyYS00ZmYxLWE5ZDMtYjhmMTFmZjM0ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteC1/tO/+ctPbM6eQNNwo/sboElLumH+TESd R09e2mjndD4yvN3qczor5c/F2q63B/M2ASfBsNBYl1Yr0JadvIYyt09ESoUeKwv3 fI3nVAbyYlwlFGcDqIGplw7GWLuZXjwmwjkr/njVFRDzqg4YoGStsVx745lgzG4a Oue0le49uzhyq/ROBhUVcR/S12iRBkl2gECTTF9UlpGMPwOqIjNOnC8NygressO9 CChD7tr8KSsOzZFMEdpB9IQmso7YoQTsPAP7yi/5Rugavemws80zjzR/alEEw+SG fGKwlQy2XUKlkGk8FTaOd9FtcnjlR9XPWjK1h2jIaUuuKdK2eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo6wMq5WWzHWx+JnQkga0to4FFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM3MDMzMWItZmRlNS0z ZjBjLWIwNzgtMjY5Y2YwMjk3ZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZbiw7p33oCrg3aaS+sGv8ahSMzQVpzoR8MvVjvXGlUyjIKEkqfUP6i 2dvT8+n49l1t+EVfv1N292Hd8boKmja01np2VEo38tizSWbwfHvLeUPXMgsUaD1l ytWnZmQixlaGTVp+oj8mYoRTZzUy7sa7+hMy/UEoROiSMVQnOlM804oo1wjciaQo 8VDZdlqjKtDkwo5B26tIgVeGVMykqFU+q3/+a1UQ06z6IHJgPpi+YwKVunj6Fh20 1rj7TKX+i+CJS1xyg3aGz1B0UGUKBJNfs1lmdpdSW43eI8L9nwWPLWA50yfEc4Cl nFk2lxRKsSRfEsrQOyEMAm1fGMkDcrA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:56:55 2025 by rpki-client