$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14e8981a-a9e9-3d61-8f6f-5c2cd19eec65.roa File: 14e8981a-a9e9-3d61-8f6f-5c2cd19eec65.roa (raw, json) Hash identifier: aKSbMTKc9O73aKO5q3/UCaKgJc67N+Tnkc9xAz3UhYQ= Subject key identifier: 03:7F:9E:A3:5F:5F:F1:17:E4:DB:5D:34:81:CD:C0:65:C8:05:D6:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E15AC91B8BFB03537100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14e8981a-a9e9-3d61-8f6f-5c2cd19eec65.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.224.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e1:5a:c9:1b:8b:fb:03:53:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=28c6ae68-56ad-4363-b80c-121ad0e15230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1c:b2:f0:ab:54:25:b5:e5:62:f7:20:0d:c3: 76:d8:63:0a:4b:07:57:5d:bf:4c:de:00:d4:26:c1: a7:c9:29:8b:98:01:2d:3b:2f:04:e2:ec:b2:06:b3: 54:4d:65:09:23:71:ab:80:f6:2f:9b:49:90:27:84: 97:85:2a:59:f6:3a:22:d3:d1:31:90:a2:a5:8e:d2: b2:21:d8:0c:7c:57:44:8f:d4:e2:a7:55:91:4c:68: 97:18:b7:f1:e9:a5:a0:54:45:76:02:4a:43:74:a9: 3c:e3:1e:26:7d:c9:ab:2f:c8:e1:10:d0:c9:cf:96: 8a:c8:56:44:b1:7d:16:ea:68:20:ac:a9:73:b2:9c: 20:ac:d6:83:af:0f:99:1c:a4:53:ab:16:c0:30:7a: 9d:41:ae:9b:6c:62:68:a1:bb:7c:91:81:87:f8:54: c7:b3:fe:5e:b2:5c:8d:b4:10:82:32:fb:2a:0a:c3: db:e5:b6:bd:18:de:b8:21:7b:5d:cb:f3:f5:10:67: a0:60:8f:13:24:f8:fe:22:39:b3:3e:81:64:d9:9a: 23:b0:f0:71:b1:24:ec:55:b5:b4:a3:04:55:cc:2f: 96:81:cd:47:3d:b2:cb:2d:c7:c0:38:28:1a:96:08: f5:a8:ca:69:3a:95:fb:49:d7:39:7e:db:86:72:64: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:9E:A3:5F:5F:F1:17:E4:DB:5D:34:81:CD:C0:65:C8:05:D6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14e8981a-a9e9-3d61-8f6f-5c2cd19eec65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:59:72:87:0f:c9:ef:f9:0a:82:04:0b:98:4b:d0:51:73:a0: ee:5d:20:b0:ef:59:cf:05:5e:ad:98:e3:1d:4a:30:99:12:48: 25:64:e6:85:ea:50:33:ef:38:3a:ec:1d:d9:9a:ce:cc:d5:97: 8a:6a:a9:b7:77:0d:32:50:e1:dd:1c:b6:1b:4f:1f:92:59:41: 95:47:6c:61:66:65:62:64:f9:95:a2:df:1b:04:27:18:3b:81: bb:4f:45:72:c0:f1:4d:2b:55:86:d9:d2:d7:50:69:e3:76:f2: 7e:69:e6:62:20:67:d4:85:d6:86:48:b4:ec:05:f4:ab:cb:92: 37:fd:5f:47:df:59:53:cb:52:26:b4:02:5e:30:99:cc:27:6d: ac:18:12:67:88:ff:5c:4a:6b:be:b0:d4:af:41:09:e9:e4:98: 5c:6b:3c:b9:6b:c6:47:18:65:8d:33:dd:4a:64:36:64:76:cb: 07:85:51:83:3f:b2:77:4e:d8:1d:db:ed:a9:70:0f:5c:95:2d: ee:11:a6:52:86:d9:d5:34:59:ab:7a:7c:79:f9:e6:bb:54:13: 0c:ef:ca:79:75:b7:9b:0d:10:4b:97:78:16:e0:38:73:ab:ea: 16:0c:b5:98:3d:db:e9:2a:da:8e:4f:bc:d1:ad:58:b4:36:4d: de:a2:85:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+FayRuL+wNTcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjhjNmFlNjgtNTZhZC00MzYzLWI4MGMtMTIxYWQwZTE1MjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxyy8KtUJbXlYvcgDcN22GMKSwdXXb9M3gDU JsGnySmLmAEtOy8E4uyyBrNUTWUJI3GrgPYvm0mQJ4SXhSpZ9joi09ExkKKljtKy IdgMfFdEj9Tip1WRTGiXGLfx6aWgVEV2AkpDdKk84x4mfcmrL8jhENDJz5aKyFZE sX0W6mggrKlzspwgrNaDrw+ZHKRTqxbAMHqdQa6bbGJoobt8kYGH+FTHs/5eslyN tBCCMvsqCsPb5ba9GN64IXtdy/P1EGegYI8TJPj+IjmzPoFk2ZojsPBxsSTsVbW0 owRVzC+Wgc1HPbLLLcfAOCgalgj1qMppOpX7Sdc5ftuGcmTaeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN/nqNfX/EX5NtdNIHNwGXIBdZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTRlODk4MWEtYTllOS0z ZDYxLThmNmYtNWMyY2QxOWVlYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+CEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZZcocPye/5CoIEC5hL0FFzoO5dILDvWc8FXq2Y4x1KMJkSSCVk5oXq UDPvODrsHdmazszVl4pqqbd3DTJQ4d0cthtPH5JZQZVHbGFmZWJk+ZWi3xsEJxg7 gbtPRXLA8U0rVYbZ0tdQaeN28n5p5mIgZ9SF1oZItOwF9KvLkjf9X0ffWVPLUia0 Al4wmcwnbawYEmeI/1xKa76w1K9BCenkmFxrPLlrxkcYZY0z3UpkNmR2yweFUYM/ sndO2B3b7alwD1yVLe4RplKG2dU0Wat6fHn55rtUEwzvynl1t5sNEEuXeBbgOHOr 6hYMtZg92+kq2o5PvNGtWLQ2Td6ihaI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:08:28 2025 by rpki-client