$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf19f897-3773-3e65-b663-7c3c178243b0.roa File: cf19f897-3773-3e65-b663-7c3c178243b0.roa (raw, json) Hash identifier: zj6mLjnVqkgsp25Ev8WZ/jgPmVh46Hd1LiO4I0nDE50= Subject key identifier: 96:73:A8:69:5B:71:D0:B5:70:AB:31:68:95:BC:7D:68:C9:C8:DF:3B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E20EC240207F73A24B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf19f897-3773-3e65-b663-7c3c178243b0.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.224.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e2:0e:c2:40:20:7f:73:a2:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e2aabf7f-261f-4fd8-accb-715958bd106d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:9a:69:5c:95:12:d8:5c:86:41:d7:d0:74: 74:a6:34:d0:15:98:cf:9a:9f:6d:b2:bf:ed:8d:dc: 86:94:33:13:0f:54:46:a8:e0:cd:6a:8f:ae:63:3b: ca:1d:71:78:1e:f0:c1:b6:4f:b0:cc:e9:33:22:99: 64:c4:30:20:04:31:98:93:b5:0e:7b:22:23:5d:18: 5d:af:10:94:18:f5:ee:ab:ad:09:ea:68:a9:14:5f: d7:b2:3f:cf:c5:69:c8:ed:64:27:f9:c8:92:14:e6: 49:5f:79:d1:01:91:0c:64:3d:87:f2:3a:7a:2c:ba: aa:1d:f7:0d:4c:a3:08:e6:be:65:5c:ea:9d:ef:11: 46:5c:1b:b1:c4:66:5c:a8:a4:e7:8c:0d:86:7e:14: 5f:4b:c2:a2:f3:f7:49:2d:39:53:bb:34:23:08:4b: 7d:7d:d8:11:61:ef:35:f7:4b:b2:28:e9:28:0f:a7: a5:54:71:2c:34:30:0e:ad:10:69:99:76:ec:28:02: 15:04:4a:1f:2e:9c:7c:54:ac:b1:8d:c9:ce:9b:c3: b9:f5:8f:76:cd:ea:df:18:99:1f:37:af:e6:49:ae: 1d:fd:f8:bc:ef:cf:f9:04:03:cb:7a:ba:17:e8:fe: c2:6d:99:36:43:84:2c:fb:19:83:ce:fd:bd:0b:b6: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:73:A8:69:5B:71:D0:B5:70:AB:31:68:95:BC:7D:68:C9:C8:DF:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf19f897-3773-3e65-b663-7c3c178243b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:91:a4:56:03:34:20:e1:09:31:9f:a2:39:57:9b:e2:11:eb: 29:3b:a0:65:5f:78:52:2a:f8:2b:c2:80:c4:0b:3e:c3:96:65: 87:c2:b1:f5:f1:3d:c9:bf:9a:38:bd:01:aa:ea:68:8e:95:a1: 2e:2b:74:cd:5c:f4:0a:eb:07:14:ac:96:23:00:ff:85:a1:81: b9:a8:ce:27:73:c8:bd:8a:32:fd:89:b1:5c:4a:c4:2e:e5:da: d8:a9:62:aa:56:0e:a7:6d:76:d9:ba:00:04:10:ff:7d:2b:fe: 3f:09:4f:60:4a:f6:57:72:33:c8:df:1b:4e:30:04:61:bb:ec: 75:3a:4b:37:a8:08:a1:eb:3a:56:d1:de:97:54:9b:73:12:85: 2f:19:06:4c:f1:35:75:9d:a7:a9:ce:d8:33:ee:e2:6c:d4:8b: 4d:98:6e:7c:0e:d2:71:cd:a3:e0:c4:06:76:d2:e2:e5:b9:7a: d9:eb:04:f8:1f:b6:51:f5:5f:1f:7b:2f:f3:28:9a:51:09:7c: 48:97:c0:bf:d2:d4:d7:bd:21:00:b5:99:1e:f7:ff:59:36:a0: 51:c4:f3:50:3a:7d:81:5e:35:75:51:2f:c1:40:6c:f0:7d:83: 23:51:43:ec:03:2b:c1:13:38:0c:76:bc:1d:4a:9e:c0:77:b9: c0:a3:5b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+IOwkAgf3OiSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTJhYWJmN2YtMjYxZi00ZmQ4LWFjY2ItNzE1OTU4YmQxMDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsyaaVyVEthchkHX0HR0pjTQFZjPmp9tsr/t jdyGlDMTD1RGqODNao+uYzvKHXF4HvDBtk+wzOkzIplkxDAgBDGYk7UOeyIjXRhd rxCUGPXuq60J6mipFF/Xsj/PxWnI7WQn+ciSFOZJX3nRAZEMZD2H8jp6LLqqHfcN TKMI5r5lXOqd7xFGXBuxxGZcqKTnjA2GfhRfS8Ki8/dJLTlTuzQjCEt9fdgRYe81 90uyKOkoD6elVHEsNDAOrRBpmXbsKAIVBEofLpx8VKyxjcnOm8O59Y92zerfGJkf N6/mSa4d/fi878/5BAPLeroX6P7CbZk2Q4Qs+xmDzv29C7bw6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZzqGlbcdC1cKsxaJW8fWjJyN87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2YxOWY4OTctMzc3My0z ZTY1LWI2NjMtN2MzYzE3ODI0M2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+DYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6RpFYDNCDhCTGfojlXm+IR6yk7oGVfeFIq+CvCgMQLPsOWZYfCsfXx Pcm/mji9AarqaI6VoS4rdM1c9ArrBxSsliMA/4WhgbmozidzyL2KMv2JsVxKxC7l 2tipYqpWDqdtdtm6AAQQ/30r/j8JT2BK9ldyM8jfG04wBGG77HU6SzeoCKHrOlbR 3pdUm3MShS8ZBkzxNXWdp6nO2DPu4mzUi02YbnwO0nHNo+DEBnbS4uW5etnrBPgf tlH1Xx97L/MomlEJfEiXwL/S1Ne9IQC1mR73/1k2oFHE81A6fYFeNXVRL8FAbPB9 gyNRQ+wDK8ETOAx2vB1KnsB3ucCjW1M= -----END CERTIFICATE-----Generated at Wed Nov 5 10:52:42 2025 by rpki-client