$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa File: bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa (raw, json) Hash identifier: X7LaUiYjdK/9Lu1JT2yz/0HDbwy4aikwqrNIoAD9t4U= Subject key identifier: 2E:94:BD:22:84:C6:C5:25:16:D8:1B:03:B8:FC:06:70:CF:D4:53:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F8B6FF8CC8562BE7E040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.202.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f8:b6:ff:8c:c8:56:2b:e7:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2036911a-72b9-4c4c-85d9-5cba3015c39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:74:90:62:e1:8e:5a:61:82:73:f8:3d:68:d2: f9:f2:be:12:64:96:4e:13:ed:03:fc:e4:59:d5:88: a4:3c:d2:9c:38:eb:ea:67:51:e8:bd:7b:c3:29:8c: c9:f4:6a:26:f4:09:53:45:5b:ca:a4:51:10:e8:c9: 5c:21:33:d4:4a:7a:e4:83:87:98:e2:15:84:bd:08: 1b:0f:c0:08:5f:eb:4d:ff:41:78:3a:23:eb:3a:fa: cc:18:02:02:7a:a0:a0:83:58:e5:0d:dc:f6:eb:bf: ff:f8:bf:81:ee:c0:b9:13:3d:11:fe:4f:2b:6c:2b: bc:93:45:fd:fc:63:61:e2:5c:56:7f:65:3a:32:10: 78:4b:f6:82:55:b7:b1:71:43:10:6f:4e:c7:a0:a1: 4c:b2:a4:93:8f:2c:44:d8:da:98:7e:30:63:6d:38: 4e:be:87:63:79:98:8c:e7:a2:d5:eb:24:1c:6a:cd: 95:c9:3b:d2:f3:a0:e9:8b:63:7f:7c:a6:9e:f0:72: 37:2a:3d:00:ca:bf:f6:b8:9e:5b:da:07:96:27:66: d9:3b:0a:0d:c1:88:cc:05:29:b1:d4:5b:98:31:6e: 74:44:a8:18:aa:3e:8f:c5:61:48:e3:df:51:fa:fd: 68:fd:52:ea:97:af:c6:8a:02:b3:5b:d6:57:76:1d: f2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:94:BD:22:84:C6:C5:25:16:D8:1B:03:B8:FC:06:70:CF:D4:53:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:97:91:72:7a:4f:4e:0d:28:61:71:00:cc:f9:ee:4f:43:3a: 20:f1:da:59:f5:c0:23:f6:c9:02:f8:51:5d:79:d2:f0:12:26: c8:52:7d:71:d3:ca:74:1e:10:3e:5b:1a:d8:3c:db:f0:6a:ac: 69:4f:ca:c8:d6:e1:9e:c1:b5:c3:2a:fb:b9:71:5f:e3:79:1b: 8c:17:dc:5c:2f:6a:4e:2f:e1:96:77:bc:6c:67:95:03:a6:a5: aa:99:26:f9:ea:a4:e1:e1:f8:c8:60:0b:41:4e:d1:57:8f:bb: 5a:b5:3e:9c:f7:04:f3:10:45:45:7d:40:58:d7:dc:3b:3e:63: b2:49:0b:7c:de:76:23:53:61:2e:19:f1:e9:c7:89:86:da:47: 0b:a5:71:6e:fd:1c:5c:40:ce:57:c7:76:b1:4d:2c:14:33:e7: 28:db:f5:86:ce:21:67:c8:87:57:cf:e5:eb:1e:ee:d0:a0:2f: c0:a8:bf:27:e7:6f:6a:2a:49:60:01:0a:84:ee:f5:a0:95:fd: 6d:45:96:f0:a1:52:46:c2:9d:1f:77:3f:8d:a8:9e:b9:74:1e: 99:c9:09:8e:d3:e4:67:7a:b4:d0:28:51:6c:b7:fa:ea:65:ad: 6b:75:8e:a2:25:de:37:de:43:14:c7:cf:71:a9:51:b4:f8:1a: 4c:5b:61:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvi2/4zIVivn4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjAzNjkxMWEtNzJiOS00YzRjLTg1ZDktNWNiYTMwMTVjMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXSQYuGOWmGCc/g9aNL58r4SZJZOE+0D/ORZ 1YikPNKcOOvqZ1HovXvDKYzJ9Gom9AlTRVvKpFEQ6MlcITPUSnrkg4eY4hWEvQgb D8AIX+tN/0F4OiPrOvrMGAICeqCgg1jlDdz267//+L+B7sC5Ez0R/k8rbCu8k0X9 /GNh4lxWf2U6MhB4S/aCVbexcUMQb07HoKFMsqSTjyxE2NqYfjBjbThOvodjeZiM 56LV6yQcas2VyTvS86Dpi2N/fKae8HI3Kj0Ayr/2uJ5b2geWJ2bZOwoNwYjMBSmx 1FuYMW50RKgYqj6PxWFI499R+v1o/VLql6/GigKzW9ZXdh3yPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6UvSKExsUlFtgbA7j8BnDP1FOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY5YTQwZjAtNjk5OS0z ZTlhLTg2MGQtYzg0YzEzNGFjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8owMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2XkXJ6T04NKGFxAMz57k9DOiDx2ln1wCP2yQL4UV150vASJshSfXHT ynQeED5bGtg82/BqrGlPysjW4Z7BtcMq+7lxX+N5G4wX3Fwvak4v4ZZ3vGxnlQOm paqZJvnqpOHh+MhgC0FO0VePu1q1Ppz3BPMQRUV9QFjX3Ds+Y7JJC3zediNTYS4Z 8enHiYbaRwulcW79HFxAzlfHdrFNLBQz5yjb9YbOIWfIh1fP5ese7tCgL8Covyfn b2oqSWABCoTu9aCV/W1FlvChUkbCnR93P42onrl0HpnJCY7T5Gd6tNAoUWy3+upl rWt1jqIl3jfeQxTHz3GpUbT4GkxbYY8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:22:11 2025 by rpki-client