$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3affbbb-ae1e-365a-a49c-75d649fbea11.roa File: f3affbbb-ae1e-365a-a49c-75d649fbea11.roa (raw, json) Hash identifier: eR5jCe2ucGj7JfXtLZSJ/5Vgrp6LD4aZ4JVPcSxx3ME= Subject key identifier: 43:67:44:37:B9:C0:E2:14:92:7F:8E:C8:6A:80:CA:57:F5:E9:E3:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB724919AB84536C74E0900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3affbbb-ae1e-365a-a49c-75d649fbea11.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 71.228.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:24:91:9a:b8:45:36:c7:4e:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=0d263aa1-d1fc-48ed-aaac-c1b204f63b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:db:30:be:8c:86:70:e7:94:b1:44:e0:24: c8:05:0c:fb:b5:cc:d5:4c:4d:c0:71:45:08:a5:2f: 7a:43:42:3d:4d:69:54:a0:1a:ba:36:83:5d:ba:a3: 05:f4:4e:0f:51:86:53:8f:76:d4:4f:5f:71:bd:58: d2:66:5a:04:48:a8:7c:f2:f1:ca:2c:e3:ff:68:65: 97:bd:a5:44:a9:6a:73:88:df:ef:6d:a3:c6:5f:62: 05:3c:d6:0f:d8:a1:e2:c1:88:e4:57:6b:a3:a0:e8: f1:f1:e4:d9:ce:62:21:b6:72:18:3a:13:1a:6b:54: 62:ba:09:97:2f:4c:4f:77:91:c4:20:e3:db:82:20: 0d:d7:bf:5a:29:9b:26:bd:36:26:0b:64:ab:29:9b: 7e:9a:5d:2a:02:5d:fe:91:4d:79:73:c4:6d:1c:38: 1d:2d:a3:ff:4b:0d:43:2f:d2:67:f5:4b:2c:49:f3: 9d:0a:7e:1b:6f:62:2a:73:89:9e:ce:cc:99:50:f3: 35:de:f8:93:95:28:ec:f0:d9:26:59:99:56:f1:f8: 03:ee:30:4b:cc:ab:14:b0:76:82:7c:95:9f:ac:8d: 6f:1b:16:1f:59:71:49:82:95:0a:04:a9:4c:fb:92: 0c:5f:72:39:d7:80:1c:22:21:4f:0d:b8:53:3e:8e: b8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:44:37:B9:C0:E2:14:92:7F:8E:C8:6A:80:CA:57:F5:E9:E3:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3affbbb-ae1e-365a-a49c-75d649fbea11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a1:01:ec:ae:d7:26:cf:54:86:42:17:3f:cf:f6:ea:ce:1d: 8e:e1:35:c9:2b:50:fe:0f:f5:3b:20:c9:8f:d3:8b:bb:a8:03: a8:fd:11:bb:d3:1e:5f:c4:8a:64:3d:70:43:02:06:b6:08:b5: 85:85:ce:f4:a7:45:4e:59:06:cf:86:1d:a4:ce:3f:d9:7a:e9: 11:b0:6b:f9:8b:30:87:5d:21:b0:a7:db:60:ce:e7:48:a2:aa: c9:ff:3e:78:68:0b:15:2b:f9:79:59:cc:72:2f:52:af:ca:7c: 8b:07:31:9f:7c:29:0a:68:54:9e:f8:6b:f1:83:9a:b5:35:be: a8:07:79:a6:d4:5f:f4:3f:7f:37:03:22:04:c1:7f:b0:5f:f4: 82:9d:3a:88:c1:6b:3c:51:dd:ba:f7:1d:99:0f:af:bc:41:e3: 54:dd:3d:73:6b:6b:34:46:81:a9:1d:68:15:19:b9:43:f9:07: 3e:7b:a7:7d:59:a0:65:9f:9a:47:b9:9d:56:bf:80:a9:0f:60: a6:2a:00:f9:f1:15:a6:7f:0b:9f:f4:d6:0d:58:67:d3:c5:89: cf:e1:1d:00:90:93:d2:14:5d:79:57:07:4e:6a:a5:90:d0:7b: 2b:84:ad:97:9c:9a:15:be:22:04:6b:fd:43:fe:d2:41:fb:88: 1a:4e:59:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tySRmrhFNsdOCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MGQyNjNhYTEtZDFmYy00OGVkLWFhYWMtYzFiMjA0ZjYzYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpTbML6MhnDnlLFE4CTIBQz7tczVTE3AcUUI pS96Q0I9TWlUoBq6NoNduqMF9E4PUYZTj3bUT19xvVjSZloESKh88vHKLOP/aGWX vaVEqWpziN/vbaPGX2IFPNYP2KHiwYjkV2ujoOjx8eTZzmIhtnIYOhMaa1RiugmX L0xPd5HEIOPbgiAN179aKZsmvTYmC2SrKZt+ml0qAl3+kU15c8RtHDgdLaP/Sw1D L9Jn9UssSfOdCn4bb2Iqc4mezsyZUPM13viTlSjs8NkmWZlW8fgD7jBLzKsUsHaC fJWfrI1vGxYfWXFJgpUKBKlM+5IMX3I514AcIiFPDbhTPo64wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENnRDe5wOIUkn+OyGqAylf16ePbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjNhZmZiYmItYWUxZS0z NjVhLWE0OWMtNzVkNjQ5ZmJlYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+ToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmhAeyu1ybPVIZCFz/P9urOHY7hNckrUP4P9TsgyY/Ti7uoA6j9EbvT Hl/EimQ9cEMCBrYItYWFzvSnRU5ZBs+GHaTOP9l66RGwa/mLMIddIbCn22DO50ii qsn/PnhoCxUr+XlZzHIvUq/KfIsHMZ98KQpoVJ74a/GDmrU1vqgHeabUX/Q/fzcD IgTBf7Bf9IKdOojBazxR3br3HZkPr7xB41TdPXNrazRGgakdaBUZuUP5Bz57p31Z oGWfmke5nVa/gKkPYKYqAPnxFaZ/C5/01g1YZ9PFic/hHQCQk9IUXXlXB05qpZDQ eyuErZecmhW+IgRr/UP+0kH7iBpOWSs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:24 2025 by rpki-client