$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b673e02-c45b-3756-9a57-ed9683cc86c9.roa File: 7b673e02-c45b-3756-9a57-ed9683cc86c9.roa (raw, json) Hash identifier: xfxHyGmeeT/koD7hf004OJ2B3a8dopX9fWrElq/rV5k= Subject key identifier: 91:9F:51:40:5A:4B:DF:AB:F1:7A:D9:1A:B0:EB:86:CC:C7:2B:0A:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B0A67A139A8EF856071E8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b673e02-c45b-3756-9a57-ed9683cc86c9.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 71.199.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:0a:67:a1:39:a8:ef:85:60:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=dce66d73-0d55-442f-9c62-2d1d0dc1ddec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:17:09:98:26:84:fd:5e:f9:97:27:d3:97: 94:5c:6b:32:60:57:3a:d1:56:0b:e9:c0:4a:83:e7: b7:1a:83:49:f7:a2:ca:3a:e2:f1:af:a0:2d:f8:3d: 3f:94:77:ce:6c:19:08:b5:50:bd:42:d8:2f:d1:53: a5:ea:8b:fe:83:ab:a4:42:7a:e8:f7:2f:46:36:7a: e9:c4:28:2f:57:67:ef:eb:43:10:a0:77:cc:b0:e7: a3:0d:30:61:61:e9:a9:ff:20:36:29:e9:f2:40:1a: 85:0c:8d:c8:30:04:db:d5:3d:49:1f:25:5b:25:b5: a1:a1:de:7a:42:b3:57:19:40:d6:a7:2b:f4:56:3e: bd:95:b3:27:bc:a5:cb:9b:70:6c:bb:2f:47:c4:f7: 82:8e:73:5a:3e:3c:6d:fa:ad:53:8a:77:b1:57:25: 1a:41:59:8c:1d:f0:f0:ad:6f:ea:f1:1f:1b:5d:54: 7b:20:0d:7d:db:6f:a5:a4:9d:3b:18:3a:ac:c8:93: 84:09:33:ec:3b:be:a3:53:cd:f9:6f:06:00:9f:5a: 39:f3:b8:b6:2e:d6:29:f3:6d:cc:cc:65:d8:c9:e4: 41:d4:4c:84:5a:bc:aa:88:10:05:58:25:51:9e:df: aa:34:a2:b3:72:ce:66:28:d4:8e:2b:c1:ea:f6:cd: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9F:51:40:5A:4B:DF:AB:F1:7A:D9:1A:B0:EB:86:CC:C7:2B:0A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b673e02-c45b-3756-9a57-ed9683cc86c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.199.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:42:98:3d:ed:44:17:16:30:01:23:74:f3:e7:5a:8e:d2:dc: e4:30:e4:b7:f7:fd:af:a8:06:9a:bb:36:38:75:d3:21:0e:06: 30:12:92:51:4e:ff:c8:d8:aa:ad:ab:7e:b2:29:0a:b1:b4:69: 60:40:1f:fc:ce:e1:3b:e4:48:b2:75:ff:a9:ba:5a:7d:d6:46: 25:91:97:96:75:15:72:dc:f7:95:79:91:b6:21:7d:eb:cb:45: 61:fe:ad:78:fc:e6:71:ac:0e:69:8a:4d:30:62:4a:fd:12:70: 4f:1a:2a:54:8f:06:72:c9:ee:be:d3:9c:fa:7b:32:00:88:50: b3:23:f7:29:6f:77:8b:7b:1c:b2:02:05:41:cd:45:9d:81:2f: a3:bf:9b:db:28:b9:bd:87:43:18:d6:4a:3d:1d:65:4b:23:7d: 56:f0:5b:d1:78:35:20:21:c1:af:82:ca:30:f9:86:d4:cb:e7: 1c:30:c9:34:30:04:b5:0f:38:5e:c0:ba:51:d8:b2:bf:08:8d: 1b:68:e3:7f:22:a3:48:bc:f9:e3:a1:99:a8:c1:a6:e0:e9:e3: 00:28:4f:7c:68:e3:c8:72:13:fb:51:87:af:57:de:25:15:61: ab:83:68:bb:c9:f5:28:0b:f3:58:2d:11:dc:fd:f8:84:e6:11: 11:04:c6:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCwpnoTmo74VgcegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZGNlNjZkNzMtMGQ1NS00NDJmLTljNjItMmQxZDBkYzFkZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8sXCZgmhP1e+Zcn05eUXGsyYFc60VYL6cBK g+e3GoNJ96LKOuLxr6At+D0/lHfObBkItVC9Qtgv0VOl6ov+g6ukQnro9y9GNnrp xCgvV2fv60MQoHfMsOejDTBhYemp/yA2KenyQBqFDI3IMATb1T1JHyVbJbWhod56 QrNXGUDWpyv0Vj69lbMnvKXLm3Bsuy9HxPeCjnNaPjxt+q1TinexVyUaQVmMHfDw rW/q8R8bXVR7IA1922+lpJ07GDqsyJOECTPsO76jU835bwYAn1o587i2LtYp823M zGXYyeRB1EyEWryqiBAFWCVRnt+qNKKzcs5mKNSOK8Hq9s3IUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGfUUBaS9+r8XrZGrDrhszHKwosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2I2NzNlMDItYzQ1Yi0z NzU2LTlhNTctZWQ5NjgzY2M4NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR8e/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpCmD3tRBcWMAEjdPPnWo7S3OQw5Lf3/a+oBpq7Njh10yEOBjASklFO /8jYqq2rfrIpCrG0aWBAH/zO4TvkSLJ1/6m6Wn3WRiWRl5Z1FXLc95V5kbYhfevL RWH+rXj85nGsDmmKTTBiSv0ScE8aKlSPBnLJ7r7TnPp7MgCIULMj9ylvd4t7HLIC BUHNRZ2BL6O/m9soub2HQxjWSj0dZUsjfVbwW9F4NSAhwa+CyjD5htTL5xwwyTQw BLUPOF7AulHYsr8IjRto438io0i8+eOhmajBpuDp4wAoT3xo48hyE/tRh69X3iUV YauDaLvJ9SgL81gtEdz9+ITmEREExk0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:45:17 2025 by rpki-client