$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c758eae9-27e2-3462-96e9-17baf671b979.roa File: c758eae9-27e2-3462-96e9-17baf671b979.roa (raw, json) Hash identifier: yUYMRanM1m7U7vA+7GXeekcQ2n5aKrxp2Tnv+xpBAcM= Subject key identifier: 8B:E3:90:EE:63:79:82:C8:3F:EC:1A:8B:6E:76:3C:B6:9A:B8:5E:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB92608A93713DA2AF5F000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c758eae9-27e2-3462-96e9-17baf671b979.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33490 IP address blocks: 71.59.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:26:08:a9:37:13:da:2a:f5:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=940a357c-0e3c-40cf-8b9a-6eaa2f4953df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:4d:9e:31:e9:77:51:ae:d3:ce:32:c1:b9: 8a:57:93:d7:86:e2:2b:4d:ed:b1:9f:0f:2b:d9:d8: 24:f6:b2:b9:a6:3d:df:65:30:12:99:d6:a0:cc:29: 2b:9e:0a:e3:90:1b:6d:23:73:7b:bb:c6:5e:8f:10: b6:ee:d5:3c:0e:c0:39:5d:ef:f1:b9:1f:02:6f:91: e0:35:01:01:11:e4:a7:c4:3d:b8:dd:7f:f9:e7:db: 28:24:b5:93:ba:35:ce:46:eb:78:cf:5b:65:21:e8: 18:2d:41:a7:3f:6c:a9:53:6e:8e:6c:d6:72:ab:59: f4:c2:2b:9e:b7:4a:e3:7a:7d:db:31:16:9d:12:ca: 66:31:da:94:16:48:44:62:0a:2a:4c:f2:8d:b5:f4: 30:03:fc:30:0c:d4:c4:5b:2e:4f:f8:8a:87:40:90: 7b:ff:b4:97:a3:73:6f:ba:ad:a2:98:48:60:60:ee: da:c8:f6:a3:20:3c:5d:f8:d7:0e:49:e7:75:09:06: 44:93:27:09:15:76:10:98:ac:7f:75:8c:86:7b:16: 52:82:e6:25:0a:f4:c4:ba:f8:61:28:99:2d:87:18: 7c:54:5a:e0:d0:a5:e4:30:a5:cb:da:4b:f7:c7:8f: ef:35:f0:00:63:de:3f:6b:4b:d9:23:56:17:e5:b9: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E3:90:EE:63:79:82:C8:3F:EC:1A:8B:6E:76:3C:B6:9A:B8:5E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c758eae9-27e2-3462-96e9-17baf671b979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.59.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9e:0f:46:97:bf:7d:d6:3b:a3:93:25:51:a1:2b:02:d9:c3: d1:00:69:0a:42:ec:59:56:67:01:9b:ac:a5:6d:e3:68:6f:78: a2:87:63:46:b5:cb:4e:b1:1c:08:9b:21:27:05:1d:b4:a4:b7: bd:16:6e:fa:52:2e:99:96:22:ee:0c:fb:f4:17:19:7b:c1:5e: c6:68:24:5f:fe:d1:39:4b:12:c2:65:8f:db:e3:de:b2:7b:23: b8:e6:2d:b1:6a:d5:ba:ec:61:b3:1b:f6:90:1e:6a:6f:2a:67: dd:9d:b6:63:1b:2e:6a:8a:a0:37:60:69:92:05:d2:b1:f1:d3: 7a:63:ce:0d:e5:51:f9:18:17:9b:5b:4a:9a:13:22:65:54:32: af:f3:9f:6f:e9:24:e7:32:c9:9d:3c:b4:2a:4a:14:81:57:51: 2a:eb:6b:00:1d:63:c4:af:f3:e5:70:96:14:72:03:b1:24:16: 3f:1e:65:ae:15:c0:09:c0:25:7a:37:1e:92:3c:8d:43:7a:05: 33:d7:4e:fb:dd:13:06:71:c8:df:c5:dd:31:af:8c:d1:8b:aa: 64:d4:f4:28:7b:f4:8f:b1:be:ea:08:08:b9:2b:9d:20:6c:ef: ae:be:b3:a1:0e:1b:73:d1:0e:88:af:9e:56:6d:cd:7a:c5:29: df:90:bc:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uSYIqTcT2ir18AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTQwYTM1N2MtMGUzYy00MGNmLThiOWEtNmVhYTJmNDk1M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8xNnjHpd1Gu084ywbmKV5PXhuIrTe2xnw8r 2dgk9rK5pj3fZTASmdagzCkrngrjkBttI3N7u8ZejxC27tU8DsA5Xe/xuR8Cb5Hg NQEBEeSnxD243X/559soJLWTujXORut4z1tlIegYLUGnP2ypU26ObNZyq1n0wiue t0rjen3bMRadEspmMdqUFkhEYgoqTPKNtfQwA/wwDNTEWy5P+IqHQJB7/7SXo3Nv uq2imEhgYO7ayPajIDxd+NcOSed1CQZEkycJFXYQmKx/dYyGexZSguYlCvTEuvhh KJkthxh8VFrg0KXkMKXL2kv3x4/vNfAAY94/a0vZI1YX5bkEbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvjkO5jeYLIP+wai252PLaauF6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzc1OGVhZTktMjdlMi0z NDYyLTk2ZTktMTdiYWY2NzFiOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRzuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeeD0aXv33WO6OTJVGhKwLZw9EAaQpC7FlWZwGbrKVt42hveKKHY0a1 y06xHAibIScFHbSkt70WbvpSLpmWIu4M+/QXGXvBXsZoJF/+0TlLEsJlj9vj3rJ7 I7jmLbFq1brsYbMb9pAeam8qZ92dtmMbLmqKoDdgaZIF0rHx03pjzg3lUfkYF5tb SpoTImVUMq/zn2/pJOcyyZ08tCpKFIFXUSrrawAdY8Sv8+VwlhRyA7EkFj8eZa4V wAnAJXo3HpI8jUN6BTPXTvvdEwZxyN/F3TGvjNGLqmTU9Ch79I+xvuoICLkrnSBs 766+s6EOG3PRDoivnlZtzXrFKd+QvJc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:04:07 2025 by rpki-client