$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51c4c34-f010-305b-8992-f1cbe0be13b2.roa File: a51c4c34-f010-305b-8992-f1cbe0be13b2.roa (raw, json) Hash identifier: ApzR0wOQ7uhn3uDDjBQiC4h04BfnWAkVnAbZHat8qDU= Subject key identifier: 25:7B:96:D8:58:79:6A:F2:68:7A:B0:CF:AF:C2:DC:D0:5E:A1:3B:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7AE9FDF593FB23E83D160 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51c4c34-f010-305b-8992-f1cbe0be13b2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33660 IP address blocks: 71.195.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:ae:9f:df:59:3f:b2:3e:83:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a9e61495-4a8f-4948-8bc1-4c3311c7c0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ae:d2:70:9a:b6:53:b6:d0:89:df:48:b0:f8: a6:ce:4d:f3:dd:21:e8:14:75:10:80:cc:35:58:14: 93:dd:c7:e0:03:c0:6c:03:ad:e4:56:1e:11:bd:e4: eb:aa:bd:65:6d:ed:70:4d:09:b6:2d:52:ae:2a:4b: d5:d0:3f:97:72:54:99:d7:a3:c0:7b:19:20:51:48: 5d:55:3f:97:e8:4e:fd:03:1d:c2:9e:ba:7f:ce:a6: ad:77:94:41:b9:12:6b:69:82:04:9e:f2:85:94:b4: e3:75:39:d0:73:e6:5d:dd:50:74:62:1e:ad:0c:a9: 05:4c:9e:52:b8:03:b3:0b:41:8b:96:04:3d:3f:41: 1f:7b:5b:00:08:40:ab:08:d6:e6:6c:c8:21:bf:8f: 43:c9:ec:a8:b6:35:a6:a6:4b:0e:4d:65:8a:9e:69: 31:76:9a:35:8b:56:5b:64:7b:66:73:46:27:6e:2a: 21:1b:eb:19:03:52:12:6a:db:ca:11:13:2c:0e:3f: ba:3d:a1:5c:47:ad:91:32:32:07:f5:2b:57:42:68: c8:24:08:d6:9b:7d:0d:5e:22:17:80:b4:54:53:ed: 8a:43:ea:50:16:a6:08:b1:56:87:e1:c7:5f:09:4d: dd:b8:32:df:35:9e:42:7a:f1:37:ec:ff:1f:fc:bb: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7B:96:D8:58:79:6A:F2:68:7A:B0:CF:AF:C2:DC:D0:5E:A1:3B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a51c4c34-f010-305b-8992-f1cbe0be13b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.195.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:0f:7b:38:88:83:ca:56:37:85:03:88:5a:aa:90:cf:93:2b: da:6e:f7:ed:2c:15:98:43:9f:ed:5f:53:b6:5f:03:bc:a4:5b: 80:2a:39:26:e7:29:17:4b:bb:a6:1c:07:ac:07:bd:ee:54:50: 1d:5e:4c:16:45:2d:ff:5c:c7:3f:4f:37:d5:2e:07:41:31:f1: 5c:68:5b:82:83:8a:0c:80:4e:ff:01:18:eb:d2:92:d2:b0:28: dd:1b:2c:ba:8d:f1:21:2b:9a:b7:eb:d1:88:22:b6:10:16:b0: 34:1b:70:83:e8:61:73:46:8a:be:de:e9:8e:cf:b0:e5:c6:4c: ed:6e:38:58:c5:b8:fd:a2:88:17:8a:3d:02:09:40:25:71:36: 91:0a:89:25:d1:08:1b:03:8b:17:58:5b:31:63:11:9c:e6:94: 1c:23:67:14:b8:4d:65:4b:f9:5a:f3:d1:d7:2e:9a:18:17:d2: 20:f5:74:a7:70:ce:ad:f3:06:90:7e:b7:9c:97:c7:e0:77:bb: 47:80:09:a2:e5:b4:fc:23:ad:1a:f6:df:01:0c:6e:89:5d:5b: 11:8e:58:b2:18:7d:65:80:12:df:9f:c6:54:9e:9c:01:ee:6c: 8c:cc:b1:65:e8:ec:9c:84:f2:2d:8d:13:a1:a4:e8:21:c1:5e: f6:f3:7c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t66f31k/sj6D0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTllNjE0OTUtNGE4Zi00OTQ4LThiYzEtNGMzMzExYzdjMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq7ScJq2U7bQid9IsPimzk3z3SHoFHUQgMw1 WBST3cfgA8BsA63kVh4RveTrqr1lbe1wTQm2LVKuKkvV0D+XclSZ16PAexkgUUhd VT+X6E79Ax3Cnrp/zqatd5RBuRJraYIEnvKFlLTjdTnQc+Zd3VB0Yh6tDKkFTJ5S uAOzC0GLlgQ9P0Efe1sACECrCNbmbMghv49DyeyotjWmpksOTWWKnmkxdpo1i1Zb ZHtmc0YnbiohG+sZA1ISatvKERMsDj+6PaFcR62RMjIH9StXQmjIJAjWm30NXiIX gLRUU+2KQ+pQFqYIsVaH4cdfCU3duDLfNZ5CevE37P8f/LtwuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV7lthYeWryaHqwz6/C3NBeoTtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTUxYzRjMzQtZjAxMC0z MDViLTg5OTItZjFjYmUwYmUxM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR8PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMPeziIg8pWN4UDiFqqkM+TK9pu9+0sFZhDn+1fU7ZfA7ykW4AqOSbn KRdLu6YcB6wHve5UUB1eTBZFLf9cxz9PN9UuB0Ex8VxoW4KDigyATv8BGOvSktKw KN0bLLqN8SErmrfr0YgithAWsDQbcIPoYXNGir7e6Y7PsOXGTO1uOFjFuP2iiBeK PQIJQCVxNpEKiSXRCBsDixdYWzFjEZzmlBwjZxS4TWVL+Vrz0dcumhgX0iD1dKdw zq3zBpB+t5yXx+B3u0eACaLltPwjrRr23wEMboldWxGOWLIYfWWAEt+fxlSenAHu bIzMsWXo7JyE8i2NE6Gk6CHBXvbzfHQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:52:31 2025 by rpki-client