$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d941ee0-9f27-314d-849a-e513c9f5f75a.roa File: 9d941ee0-9f27-314d-849a-e513c9f5f75a.roa (raw, json) Hash identifier: DwuOq1n2cWy42J+sPUHjTUgb12qo6XgmO70409PaS58= Subject key identifier: A4:FB:4E:0C:96:51:93:64:9C:67:79:1A:A4:2F:DC:FE:A4:BC:B3:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E49B6AA981438CD6B460 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d941ee0-9f27-314d-849a-e513c9f5f75a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.225.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e4:9b:6a:a9:81:43:8c:d6:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=926d32b8-5e5c-4490-8c35-970ddbb0cb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ba:25:4b:bb:c7:91:75:f3:29:a7:50:18:bb: b0:77:ec:bc:16:88:6e:2d:b5:d7:da:a9:0f:a7:55: 81:32:e6:08:ce:7f:33:b9:c8:2d:ff:20:75:a9:12: ad:60:40:65:7f:d6:e8:bd:0c:f9:c1:7a:75:41:d1: 89:40:bb:82:21:ce:4d:5d:4d:7d:38:19:f7:fa:cf: d0:ef:d8:91:b4:47:3d:21:2d:37:d5:d7:c6:f4:9c: 14:82:e3:2c:20:ce:2b:ee:45:53:4e:33:c0:ee:f0: ff:71:9b:00:3d:0f:9c:96:e3:ae:6c:75:e6:cf:ce: 7c:fc:62:09:2c:7d:1c:dc:85:bf:f4:21:3c:94:6c: 2a:09:a8:15:b6:a0:c8:2a:7e:52:d3:b5:c3:33:98: 2c:f0:32:e8:cf:20:a7:d5:b6:1e:1b:d0:9b:ca:cc: dc:6d:cd:d9:6f:62:0c:5f:63:f3:09:aa:e5:28:64: 11:02:3c:20:b1:3b:03:c9:4f:b0:ae:3d:48:fa:b5: b1:7f:78:e2:eb:d6:0f:97:e2:ef:65:4b:9b:92:9b: 0c:6c:50:38:7c:2e:35:a1:f9:30:5f:7f:ab:0d:54: 14:97:b8:77:d5:e1:fa:6d:ca:46:cf:27:91:5b:8f: 34:c8:87:4f:3b:84:f8:e3:65:6e:f5:67:bf:4f:d1: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FB:4E:0C:96:51:93:64:9C:67:79:1A:A4:2F:DC:FE:A4:BC:B3:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d941ee0-9f27-314d-849a-e513c9f5f75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:94:82:57:e3:ab:06:69:3d:1c:b3:89:3b:92:a1:e0:51:e6: 38:aa:d7:b1:68:30:33:49:a0:79:e0:11:79:cf:d2:dc:5f:33: 88:fc:74:07:25:86:f8:43:16:c3:c0:de:3c:f2:69:46:24:a2: 66:cf:f9:d8:7a:6a:85:3d:ac:dd:cc:68:f2:1c:07:47:fa:99: fd:67:1c:8e:e3:27:b8:1d:da:38:bf:03:8d:e2:31:35:27:a3: bd:d8:38:c4:9f:b9:c8:ac:71:f4:04:ed:87:35:c2:5a:7e:e7: 7e:50:02:fe:41:f7:72:01:bd:db:10:87:01:db:5b:61:0a:98: 56:53:f4:3d:ff:9e:88:d6:f8:90:64:f0:3b:64:2e:60:f9:bc: 4a:0e:17:75:48:f9:23:73:3e:33:11:42:a7:6e:90:6f:81:fe: 62:25:b3:38:15:33:bb:58:6c:1a:71:a2:da:09:f7:c4:16:60: 79:70:d1:61:c5:f1:6f:d0:0a:20:d6:70:99:e3:f3:81:03:28: 62:1e:5a:20:c9:fb:d2:f8:08:cf:91:39:ed:9f:13:fe:9b:a1: d0:20:96:0f:24:ef:d2:e2:b7:51:38:95:c2:be:29:d8:85:bf: bd:ca:95:d8:8c:db:4b:23:1a:fa:6e:a4:b8:2a:60:93:50:a2: 6a:65:e6:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+SbaqmBQ4zWtGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTI2ZDMyYjgtNWU1Yy00NDkwLThjMzUtOTcwZGRiYjBjYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrolS7vHkXXzKadQGLuwd+y8FohuLbXX2qkP p1WBMuYIzn8zucgt/yB1qRKtYEBlf9bovQz5wXp1QdGJQLuCIc5NXU19OBn3+s/Q 79iRtEc9IS031dfG9JwUguMsIM4r7kVTTjPA7vD/cZsAPQ+cluOubHXmz858/GIJ LH0c3IW/9CE8lGwqCagVtqDIKn5S07XDM5gs8DLozyCn1bYeG9Cbyszcbc3Zb2IM X2PzCarlKGQRAjwgsTsDyU+wrj1I+rWxf3ji69YPl+LvZUubkpsMbFA4fC41ofkw X3+rDVQUl7h31eH6bcpGzyeRW480yIdPO4T442Vu9We/T9FynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT7TgyWUZNknGd5GqQv3P6kvLOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQ5NDFlZTAtOWYyNy0z MTRkLTg0OWEtZTUxM2M5ZjVmNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+HIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANGUglfjqwZpPRyziTuSoeBR5jiq17FoMDNJoHngEXnP0txfM4j8dAcl hvhDFsPA3jzyaUYkombP+dh6aoU9rN3MaPIcB0f6mf1nHI7jJ7gd2ji/A43iMTUn o73YOMSfuciscfQE7Yc1wlp+535QAv5B93IBvdsQhwHbW2EKmFZT9D3/nojW+JBk 8DtkLmD5vEoOF3VI+SNzPjMRQqdukG+B/mIlszgVM7tYbBpxotoJ98QWYHlw0WHF 8W/QCiDWcJnj84EDKGIeWiDJ+9L4CM+ROe2fE/6bodAglg8k79Lit1E4lcK+KdiF v73KldiM20sjGvpupLgqYJNQompl5gs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:42:33 2025 by rpki-client