$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53baf99c-94d6-30c3-a782-43a495fd9ad6.roa File: 53baf99c-94d6-30c3-a782-43a495fd9ad6.roa (raw, json) Hash identifier: Mz95rKsYA8Ikg8ocZfW5VUQxglrCDllFEdFt6633NiY= Subject key identifier: 90:DD:1E:B3:2E:A2:31:ED:C4:0F:F7:9D:4D:06:80:C2:77:8D:21:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A72DDC26CBDC8281F3FDEC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53baf99c-94d6-30c3-a782-43a495fd9ad6.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 71.201.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:2d:dc:26:cb:dc:82:81:f3:fd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=276252fc-c581-4b94-8332-4a4021fc0fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:15:63:b4:83:37:d4:03:3e:9d:24:84:c5: 7a:b3:5c:d6:aa:68:3e:98:b1:23:1c:19:2d:2f:f5: c8:81:03:53:27:2e:d6:33:34:e6:10:b6:ef:25:5c: 56:4f:9c:17:02:9f:dc:6f:ec:6e:02:21:a1:99:bc: 8e:8e:95:c6:fa:37:b9:94:d6:2c:fe:d3:b1:6f:5d: d6:37:ca:cb:3e:58:9b:ff:b1:76:5a:3d:2c:d6:f4: 79:ab:9b:09:32:91:7d:7f:08:ce:41:08:17:c4:ea: a5:a7:c2:c1:e7:e3:db:37:bb:b7:42:9a:33:8d:a6: 11:6f:6d:23:24:69:ec:e8:5a:2b:d6:b4:1c:12:0d: 65:e2:22:69:5f:e9:22:5c:0f:61:8e:ad:ee:99:e7: 33:89:df:c9:d6:a7:1e:ab:11:15:eb:e7:4e:a8:2e: c9:b8:c3:77:d8:b0:1e:89:db:59:d9:72:18:8a:4d: 32:44:dd:f3:7c:35:91:c2:a3:25:54:44:8a:df:1a: 25:68:57:29:28:8c:d9:ef:4a:6e:82:b6:cf:95:d1: d0:92:2e:58:45:15:ce:a1:94:cc:62:71:ce:1f:f0: 9e:cd:ba:a4:5b:d8:b5:7e:34:a9:c3:18:15:92:85: ba:ed:9a:c4:b4:ba:fd:2e:43:7b:52:d9:86:e2:8a: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DD:1E:B3:2E:A2:31:ED:C4:0F:F7:9D:4D:06:80:C2:77:8D:21:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53baf99c-94d6-30c3-a782-43a495fd9ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:81:7c:e2:95:da:a4:a4:59:47:d5:c2:78:25:76:5c:2a:d0: aa:9c:58:e1:d7:81:57:d7:33:af:19:67:3f:e5:01:fa:26:75: 4a:88:48:5d:6f:00:b3:8b:21:03:98:83:b5:72:78:6b:76:8e: 03:fe:29:1d:30:cd:a6:69:5d:2e:50:1b:14:49:ad:a1:6f:d3: d0:b4:f0:d6:2f:5e:39:47:99:1c:fc:dd:9e:c8:5a:87:0a:17: bf:a6:30:1f:e7:5d:af:a4:ff:9a:3d:89:aa:67:29:bb:04:dd: 0c:69:bb:93:f2:5c:c0:46:6e:95:70:a8:b7:fb:a5:fa:91:9a: e5:5b:30:45:81:24:59:72:f6:3c:06:29:f8:1b:f4:ef:d7:d3: bf:61:c4:c4:28:44:da:f2:3b:f1:c7:2a:19:fc:a4:96:51:03: 62:23:d6:6c:48:d2:ff:8c:b1:31:eb:49:e8:5c:f7:3b:02:9f: 22:da:a6:ce:76:49:24:0e:7d:1c:62:9d:d3:14:54:20:82:03: b8:ac:2c:19:46:72:8b:38:47:c0:6a:a8:47:42:7e:1c:57:33: 1f:f7:8a:50:db:f5:33:77:57:6a:6f:2b:79:21:13:79:9a:2a: 3f:20:b2:97:e7:1e:fd:a5:cf:a0:d4:26:3a:8c:2a:91:9c:f3: 40:3a:8d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpy3cJsvcgoHz/ewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk Mjc2MjUyZmMtYzU4MS00Yjk0LTgzMzItNGE0MDIxZmMwZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoQVY7SDN9QDPp0khMV6s1zWqmg+mLEjHBkt L/XIgQNTJy7WMzTmELbvJVxWT5wXAp/cb+xuAiGhmbyOjpXG+je5lNYs/tOxb13W N8rLPlib/7F2Wj0s1vR5q5sJMpF9fwjOQQgXxOqlp8LB5+PbN7u3QpozjaYRb20j JGns6For1rQcEg1l4iJpX+kiXA9hjq3umeczid/J1qceqxEV6+dOqC7JuMN32LAe idtZ2XIYik0yRN3zfDWRwqMlVESK3xolaFcpKIzZ70pugrbPldHQki5YRRXOoZTM YnHOH/CezbqkW9i1fjSpwxgVkoW67ZrEtLr9LkN7UtmG4oqfVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDdHrMuojHtxA/3nU0GgMJ3jSG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTNiYWY5OWMtOTRkNi0z MGMzLWE3ODItNDNhNDk1ZmQ5YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISBfOKV2qSkWUfVwngldlwq0KqcWOHXgVfXM68ZZz/lAfomdUqISF1v ALOLIQOYg7VyeGt2jgP+KR0wzaZpXS5QGxRJraFv09C08NYvXjlHmRz83Z7IWocK F7+mMB/nXa+k/5o9iapnKbsE3Qxpu5PyXMBGbpVwqLf7pfqRmuVbMEWBJFly9jwG Kfgb9O/X079hxMQoRNryO/HHKhn8pJZRA2Ij1mxI0v+MsTHrSehc9zsCnyLaps52 SSQOfRxindMUVCCCA7isLBlGcos4R8BqqEdCfhxXMx/3ilDb9TN3V2pvK3khE3ma Kj8gspfnHv2lz6DUJjqMKpGc80A6jeQ= -----END CERTIFICATE-----Generated at Wed Nov 5 02:10:55 2025 by rpki-client