$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa File: 86f5656a-cafc-38ae-b0d6-dee9a612336a.roa (raw, json) Hash identifier: 05gfo7jNe6wYgN7clSlNWpUl3I/tvkpdzNvG3nK4t6M= Subject key identifier: 14:C6:4F:6C:46:AE:2F:38:26:F9:BE:C3:35:B1:6A:3B:5F:1E:3C:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E537018EDBA1575C1460 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.225.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e5:37:01:8e:db:a1:57:5c:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e97f9402-4bd3-4cfa-a9d0-f7ecc37f9d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:5a:83:5f:9b:2e:ee:66:ee:5b:04:a3:b1: 3b:fe:e6:77:38:bf:8b:7e:ad:bb:0b:1e:39:c2:3a: 6e:eb:82:10:2b:94:78:2a:23:7d:cf:ec:8d:b8:f5: a3:3a:5e:3f:40:41:38:c2:52:f7:9f:a4:64:82:09: 46:e7:7f:4d:f1:27:e1:48:03:4b:12:76:18:1f:0d: 89:23:cd:49:90:58:17:09:85:85:eb:b1:e3:db:2d: c0:05:98:30:87:8f:1c:1e:0a:2e:ec:33:db:e2:fc: 21:65:1b:59:f0:4c:aa:a8:09:51:d6:f2:50:81:38: ae:3e:1d:9f:83:af:01:3e:fe:cb:cc:fe:fb:5d:51: cd:a0:6f:f5:4e:d9:33:fd:6c:23:7a:7c:aa:fe:4b: 5d:44:e8:68:ff:5a:fe:22:36:96:ee:18:8f:7e:22: 43:a6:35:3b:58:9a:ed:ac:b8:cc:5d:ac:3c:ab:fe: b2:89:d6:16:2e:7e:4d:e4:42:96:00:67:2f:f6:8c: 9e:b7:86:b0:63:aa:ac:77:92:08:09:49:55:7a:ce: 24:8a:19:de:8a:0f:68:e8:27:0e:df:d9:11:aa:e1: 65:59:52:00:7a:a1:d0:af:91:bd:bd:21:09:91:27: 7f:5b:a5:00:a5:86:79:d9:00:1c:59:74:74:0e:17: 82:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C6:4F:6C:46:AE:2F:38:26:F9:BE:C3:35:B1:6A:3B:5F:1E:3C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:43:68:24:5f:1f:b9:68:de:9a:04:b1:12:98:9a:81:2e:43: c5:b7:93:80:70:c5:7c:da:55:dc:14:b6:3f:a1:d7:d4:6a:78: 6d:b3:25:cc:f8:cd:1e:76:dd:7a:39:15:ca:18:a3:94:c6:1f: 45:05:d0:29:38:88:79:f3:1e:c3:2a:3a:f0:10:c4:b7:d5:11: ed:8f:e8:58:17:fd:94:e6:e1:03:f5:35:72:a1:9f:28:59:3c: 91:0a:c7:2c:b9:53:be:22:60:61:bb:9c:5f:fa:af:1e:7e:11: f9:30:10:63:8f:95:6b:ae:b0:8d:61:8b:34:81:aa:1b:aa:e7: 30:da:df:b9:94:31:6c:31:92:cf:14:12:95:e4:40:43:30:a0: a3:f7:79:e3:11:92:10:e5:b3:37:83:64:4d:5a:35:a8:9f:97: 95:d6:7e:71:3a:f6:96:55:61:08:c9:2d:0a:f9:5e:9d:bd:aa: 6e:b1:f8:9b:3e:56:6b:54:e1:01:d9:4e:ca:01:b4:d6:f0:42: a8:e4:86:b2:ae:4b:c1:e2:96:31:ed:9c:d4:c7:ca:f8:1b:cf: a8:a4:cd:5b:d5:d9:cb:40:2c:e4:65:7e:e6:de:1c:2b:dc:ab: df:06:f9:03:da:03:9b:a4:67:5b:cf:44:0c:a0:59:ae:21:40: a8:5a:e2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+U3AY7boVdcFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTk3Zjk0MDItNGJkMy00Y2ZhLWE5ZDAtZjdlY2MzN2Y5ZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBxag1+bLu5m7lsEo7E7/uZ3OL+Lfq27Cx45 wjpu64IQK5R4KiN9z+yNuPWjOl4/QEE4wlL3n6RkgglG539N8SfhSANLEnYYHw2J I81JkFgXCYWF67Hj2y3ABZgwh48cHgou7DPb4vwhZRtZ8EyqqAlR1vJQgTiuPh2f g68BPv7LzP77XVHNoG/1Ttkz/Wwjenyq/ktdROho/1r+IjaW7hiPfiJDpjU7WJrt rLjMXaw8q/6yidYWLn5N5EKWAGcv9oyet4awY6qsd5IICUlVes4kihneig9o6CcO 39kRquFlWVIAeqHQr5G9vSEJkSd/W6UApYZ52QAcWXR0DheCowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTGT2xGri84Jvm+wzWxajtfHjxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZmNTY1NmEtY2FmYy0z OGFlLWIwZDYtZGVlOWE2MTIzMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJDaCRfH7lo3poEsRKYmoEuQ8W3k4BwxXzaVdwUtj+h19RqeG2zJcz4 zR523Xo5FcoYo5TGH0UF0Ck4iHnzHsMqOvAQxLfVEe2P6FgX/ZTm4QP1NXKhnyhZ PJEKxyy5U74iYGG7nF/6rx5+EfkwEGOPlWuusI1hizSBqhuq5zDa37mUMWwxks8U EpXkQEMwoKP3eeMRkhDlszeDZE1aNaifl5XWfnE69pZVYQjJLQr5Xp29qm6x+Js+ VmtU4QHZTsoBtNbwQqjkhrKuS8HiljHtnNTHyvgbz6ikzVvV2ctALORlfubeHCvc q98G+QPaA5ukZ1vPRAygWa4hQKha4v0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:38:45 2025 by rpki-client