$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05a5e1b7-69a1-3fb1-b44b-75e43d0c4255.roa File: 05a5e1b7-69a1-3fb1-b44b-75e43d0c4255.roa (raw, json) Hash identifier: PmuftHWvCQwGYzSFERom7sXnNYTIVI5US5qEFyZUfJA= Subject key identifier: A6:9E:9E:22:1F:AD:74:F4:BE:DD:7A:9D:31:B8:6A:7B:BA:4D:7E:4B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F81AE5D00B565E353880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05a5e1b7-69a1-3fb1-b44b-75e43d0c4255.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.202.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f8:1a:e5:d0:0b:56:5e:35:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8ea957c2-a133-4307-9409-17799e3c9672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:35:e2:59:bc:2f:31:e3:ae:26:d8:fd:95:42: b3:72:3a:78:25:bd:60:24:74:01:92:be:90:81:20: fa:7b:cc:36:09:54:a9:3f:f6:72:19:32:aa:b1:de: 4a:58:35:9a:4e:07:05:2c:06:8b:1d:e9:93:98:62: c8:9b:4a:85:c5:4b:ec:7c:fb:04:fe:28:c0:53:87: 87:2a:cd:a7:f4:5d:02:71:07:61:7c:c2:9d:46:ef: 42:4a:25:a5:6b:71:44:02:12:76:f1:27:53:9c:96: e4:3d:e0:89:d3:2d:12:f4:6c:b8:14:59:39:49:13: de:72:e1:27:a1:65:00:87:14:32:4b:6c:1f:7d:c3: fa:e9:70:a8:ba:17:29:fd:f0:5f:54:a4:54:8c:b7: c7:7c:1d:74:73:19:6b:55:76:35:32:34:6c:93:ef: 57:ab:12:b0:43:ec:43:12:2e:bd:ee:dd:dd:82:9d: 52:18:43:b9:2f:cc:02:3d:45:76:5b:7d:ad:f2:c3: 26:0f:39:12:13:81:1e:68:7c:a9:01:f0:d7:b6:87: 80:84:06:d6:b2:35:ba:bf:2d:4d:d9:98:aa:50:94: 14:20:e0:70:ef:d8:5c:b9:c1:5a:9e:dc:cf:4d:fb: 9d:3b:f8:07:4d:e7:2e:9d:6b:6d:4b:04:81:ca:67: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9E:9E:22:1F:AD:74:F4:BE:DD:7A:9D:31:B8:6A:7B:BA:4D:7E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05a5e1b7-69a1-3fb1-b44b-75e43d0c4255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:9f:6c:60:0c:55:9c:77:4c:88:58:0e:88:db:45:f8:9d:a3: a6:89:36:72:a5:4b:31:b0:7f:5f:91:ed:3f:14:96:e1:2a:d2: ac:0b:f7:e5:71:34:9b:24:f5:aa:ea:c2:32:45:0a:c7:fc:d4: 08:e1:3f:77:8d:c9:d5:1b:1c:17:dc:fc:84:8f:93:d7:c2:18: 57:cc:5f:db:79:1f:f9:dd:0e:b7:c9:08:29:e2:cf:c5:6f:f3: e6:f7:cd:93:db:43:c2:46:43:88:e1:3e:a9:2a:a2:ac:b0:24: cd:85:ca:d3:84:e6:f2:75:e8:81:45:b3:57:66:27:1c:fc:0e: b6:47:68:7e:36:15:c5:df:f3:aa:53:72:a4:45:2b:44:0d:18: 9b:7e:66:70:77:31:15:81:87:5b:67:7d:f1:35:af:ee:82:ae: e5:52:20:5b:94:28:1f:9b:8f:d6:06:76:a3:83:f9:f3:39:d5: a7:23:be:c7:50:a3:2b:95:51:45:9e:e0:66:01:12:36:9e:80: c6:c9:13:67:fa:44:4d:2f:a4:ca:6b:38:e1:cd:83:fb:2f:a0: b9:2c:b6:5f:7d:5c:dd:e9:ec:c9:0f:13:2e:c5:ee:48:b2:08: 3e:1a:28:c2:ed:ef:b9:d9:49:eb:18:aa:32:ba:23:23:e9:ec: fd:a3:37:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvga5dALVl41OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGVhOTU3YzItYTEzMy00MzA3LTk0MDktMTc3OTllM2M5NjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zXiWbwvMeOuJtj9lUKzcjp4Jb1gJHQBkr6Q gSD6e8w2CVSpP/ZyGTKqsd5KWDWaTgcFLAaLHemTmGLIm0qFxUvsfPsE/ijAU4eH Ks2n9F0CcQdhfMKdRu9CSiWla3FEAhJ28SdTnJbkPeCJ0y0S9Gy4FFk5SRPecuEn oWUAhxQyS2wffcP66XCouhcp/fBfVKRUjLfHfB10cxlrVXY1MjRsk+9XqxKwQ+xD Ei697t3dgp1SGEO5L8wCPUV2W32t8sMmDzkSE4EeaHypAfDXtoeAhAbWsjW6vy1N 2ZiqUJQUIOBw79hcucFantzPTfudO/gHTecunWttSwSBymecfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaeniIfrXT0vt16nTG4anu6TX5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDVhNWUxYjctNjlhMS0z ZmIxLWI0NGItNzVlNDNkMGM0MjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8rAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANifbGAMVZx3TIhYDojbRfido6aJNnKlSzGwf1+R7T8UluEq0qwL9+Vx NJsk9arqwjJFCsf81AjhP3eNydUbHBfc/ISPk9fCGFfMX9t5H/ndDrfJCCniz8Vv 8+b3zZPbQ8JGQ4jhPqkqoqywJM2FytOE5vJ16IFFs1dmJxz8DrZHaH42FcXf86pT cqRFK0QNGJt+ZnB3MRWBh1tnffE1r+6CruVSIFuUKB+bj9YGdqOD+fM51acjvsdQ oyuVUUWe4GYBEjaegMbJE2f6RE0vpMprOOHNg/svoLkstl99XN3p7MkPEy7F7kiy CD4aKMLt77nZSesYqjK6IyPp7P2jN8E= -----END CERTIFICATE-----Generated at Sun Aug 24 01:17:58 2025 by rpki-client