$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20708ca1-07f6-3fca-a752-da75ec089e15.roa File: 20708ca1-07f6-3fca-a752-da75ec089e15.roa (raw, json) Hash identifier: 3UeqfiPILBsGUTyqDwnP52unCmzdMdTqMzJS8OHCjdo= Subject key identifier: 6F:66:3F:A8:94:A9:F2:4A:EC:03:AA:42:F2:0F:3D:79:DC:45:D6:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC44F52A5FCEA54CC8ACD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20708ca1-07f6-3fca-a752-da75ec089e15.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.194.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:4f:52:a5:fc:ea:54:cc:8a:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=958d3336-aa2b-47f6-a0ef-b24697a853d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:15:0f:74:7c:c4:09:2b:ca:e9:06:5a:87: cc:f0:0c:dc:52:4c:ad:25:74:97:47:aa:23:ed:e1: 10:69:e7:cb:0c:79:bb:62:e6:1b:69:a1:64:c6:13: 30:d1:48:b2:52:7b:50:0f:02:f1:95:07:cf:b0:08: e0:61:4d:d5:64:66:51:6a:e1:8e:10:a6:75:8e:bf: 36:35:94:09:77:38:5a:02:c9:ba:fc:4b:3c:59:5d: fe:a5:43:a2:f6:35:4e:8b:44:1b:bb:cf:01:96:dd: ad:0b:0d:0a:4f:76:68:7f:a6:82:e8:4e:79:64:21: 4d:0a:34:35:51:0f:7c:f3:a5:8c:77:04:09:26:a7: 68:59:da:cb:0f:a8:c2:77:bb:6f:0a:19:2e:74:e5: 85:bb:3f:a3:73:55:a1:47:20:78:6a:a5:47:05:1d: bc:75:0c:4a:13:fb:46:80:14:82:8a:1f:3a:ec:8e: 0a:81:e5:26:67:d4:9c:e8:67:31:2c:67:e1:9b:2f: de:49:4c:6e:ba:e2:81:5f:d4:1c:29:c2:ea:eb:f0: 29:d4:62:d4:1d:19:86:67:9d:0c:18:54:1d:1d:cb: 44:7c:b8:c4:1e:e6:11:f8:1e:8d:27:aa:65:b6:b3: ef:42:a9:b3:56:93:99:e1:5c:c1:45:69:cf:d6:75: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:66:3F:A8:94:A9:F2:4A:EC:03:AA:42:F2:0F:3D:79:DC:45:D6:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20708ca1-07f6-3fca-a752-da75ec089e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:53:e9:f1:b5:f4:c9:5e:25:89:18:69:35:6e:fc:f3:49:9c: 2f:c2:90:03:07:e1:17:44:9b:ca:a3:5c:df:15:28:dc:cf:5b: 1a:09:a4:30:10:0c:07:c2:b9:9c:ef:2b:56:38:92:51:c5:9f: 1d:50:62:21:0e:d3:3c:09:00:d8:50:ff:77:6d:da:76:4e:63: 9a:1d:f8:68:43:77:08:34:eb:98:37:7e:1e:83:f7:c1:bd:d9: 99:6c:75:6e:12:e3:a1:03:00:6d:83:5a:e1:fe:1c:80:5c:6d: bb:2a:6a:ef:a3:bb:c8:d1:08:66:44:6d:4a:88:60:c2:88:41: bb:f5:40:84:d0:08:bd:f6:bc:a2:6c:60:47:58:d8:fe:14:7d: 78:47:b8:9e:3d:bd:f1:4a:ea:06:96:a5:c7:ac:ab:7e:23:f0: c5:44:ad:ec:6b:f4:89:62:36:80:89:bb:ba:d1:37:67:9d:1b: 15:cb:f5:e6:e4:58:f1:97:9c:f8:f7:ea:b8:0e:7a:90:b2:5e: 48:2c:0d:64:58:6a:1c:da:d2:75:48:65:40:d8:a6:16:32:08: f0:cb:eb:e5:b8:cf:54:dd:66:0c:4f:1a:8d:64:f0:fe:2a:11: 84:ab:ad:2e:14:e5:2c:23:af:d0:94:ca:c0:12:0d:56:d3:03: c6:85:57:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxE9SpfzqVMyKzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTU4ZDMzMzYtYWEyYi00N2Y2LWEwZWYtYjI0Njk3YTg1M2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3sVD3R8xAkryukGWofM8AzcUkytJXSXR6oj 7eEQaefLDHm7YuYbaaFkxhMw0UiyUntQDwLxlQfPsAjgYU3VZGZRauGOEKZ1jr82 NZQJdzhaAsm6/Es8WV3+pUOi9jVOi0Qbu88Blt2tCw0KT3Zof6aC6E55ZCFNCjQ1 UQ9886WMdwQJJqdoWdrLD6jCd7tvChkudOWFuz+jc1WhRyB4aqVHBR28dQxKE/tG gBSCih867I4KgeUmZ9Sc6GcxLGfhmy/eSUxuuuKBX9QcKcLq6/Ap1GLUHRmGZ50M GFQdHctEfLjEHuYR+B6NJ6pltrPvQqmzVpOZ4VzBRWnP1nUtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9mP6iUqfJK7AOqQvIPPXncRdYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjA3MDhjYTEtMDdmNi0z ZmNhLWE3NTItZGE3NWVjMDg5ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlT6fG19MleJYkYaTVu/PNJnC/CkAMH4RdEm8qjXN8VKNzPWxoJpDAQ DAfCuZzvK1Y4klHFnx1QYiEO0zwJANhQ/3dt2nZOY5od+GhDdwg065g3fh6D98G9 2ZlsdW4S46EDAG2DWuH+HIBcbbsqau+ju8jRCGZEbUqIYMKIQbv1QITQCL32vKJs YEdY2P4UfXhHuJ49vfFK6gaWpcesq34j8MVErexr9IliNoCJu7rRN2edGxXL9ebk WPGXnPj36rgOepCyXkgsDWRYahza0nVIZUDYphYyCPDL6+W4z1TdZgxPGo1k8P4q EYSrrS4U5Swjr9CUysASDVbTA8aFVx4= -----END CERTIFICATE-----Generated at Sat Aug 23 23:25:51 2025 by rpki-client