$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e490375-62e1-3d38-9e52-ffddd546fae2.roa File: 3e490375-62e1-3d38-9e52-ffddd546fae2.roa (raw, json) Hash identifier: Vq8uvESgoq5ao2B/5AcGWGC+L7m7iGkadAWnaVXhdVY= Subject key identifier: 1C:1C:1A:AD:9B:38:A6:83:E4:C0:A3:50:CE:16:E3:B4:2B:99:8E:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC51532B3F896CA540F4340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e490375-62e1-3d38-9e52-ffddd546fae2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.204.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:15:32:b3:f8:96:ca:54:0f:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=117a5718-bc5a-4e57-80ac-e94df05cc0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:d1:1b:dd:fa:4b:e0:22:9b:60:58:73:47: 52:2a:01:72:01:8c:52:11:db:25:c0:c7:2e:a2:7d: f1:a8:e8:95:d4:8a:a8:c5:ca:ff:31:b7:fe:da:35: 82:5e:7a:62:0d:9c:de:12:2b:2f:13:3f:9f:cb:2b: 6e:da:15:cb:a9:60:63:f9:25:38:d0:46:d5:1e:0b: c3:38:1b:54:7d:58:bc:ca:26:36:00:03:95:e1:7d: bc:1b:94:54:e1:9b:ab:20:16:f5:42:36:e2:f8:b4: b0:06:6c:2c:7f:2a:57:76:55:a3:7d:66:8a:ad:2e: c2:be:10:fe:e3:a7:b2:f6:f4:30:93:3a:49:9e:e9: b9:f7:61:5b:50:c5:43:9e:14:b7:08:62:1e:25:93: 43:70:01:0b:37:3c:66:6f:47:b8:8b:5e:61:c4:8e: 09:ba:1f:d9:4a:d2:e9:98:3a:bd:5f:ac:e1:3e:c0: 12:1c:12:0c:96:c1:4d:2d:03:b2:b8:2d:c5:57:ae: 85:49:fd:66:0d:e7:8a:87:16:7f:d5:b1:d1:42:6d: 9d:d2:00:eb:d3:ab:78:47:7e:e4:8e:1a:1b:32:66: ca:50:50:1f:de:3f:93:c5:96:e3:e3:c9:46:41:dc: 6e:51:d6:66:25:15:68:db:3a:b4:b5:0c:5d:f2:8c: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1C:1A:AD:9B:38:A6:83:E4:C0:A3:50:CE:16:E3:B4:2B:99:8E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e490375-62e1-3d38-9e52-ffddd546fae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:75:ec:7c:e8:4f:01:9b:24:b1:38:c6:31:15:ac:38:0c:0c: 30:95:81:7f:0a:5f:c8:6c:4f:66:9d:f7:0f:b3:30:d7:4f:a9: 72:50:55:fb:ba:be:3d:3d:f0:b3:ee:99:76:2b:02:48:c0:2c: 39:3c:02:39:f3:ab:f8:c5:bd:a1:82:be:11:38:6d:3c:fa:7b: 05:5b:d1:05:cb:23:2f:9b:90:08:bd:34:c1:ed:b2:64:eb:8d: 0a:c9:b8:74:1c:20:4b:70:7a:29:e2:d0:25:cd:e0:10:5e:5c: b1:5c:a5:4f:0c:44:1c:9c:84:41:c0:17:59:66:78:2b:20:91: 43:c1:55:5e:0d:b8:cd:43:a2:d9:6d:2e:9d:04:dd:5a:68:da: b3:d2:e5:64:95:fe:49:7e:ab:91:3b:47:a5:0f:f4:11:89:29: 71:9c:d3:85:22:2c:42:29:38:c9:cd:ac:71:c9:ea:aa:c6:e4: 5e:ca:0a:4a:15:e7:38:5b:ce:09:98:aa:d1:8f:1d:aa:48:ea: 82:a7:cf:4f:ab:f3:26:dc:73:76:c5:27:eb:aa:3e:4d:0f:23: 52:d9:df:e5:ec:4c:05:4b:8d:50:99:ce:52:75:0f:85:06:00: d5:d6:49:77:47:f3:b0:32:bd:62:c7:b5:bc:05:a5:96:ee:5d: 05:78:33:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxRUys/iWylQPQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTE3YTU3MTgtYmM1YS00ZTU3LTgwYWMtZTk0ZGYwNWNjMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qvRG936S+Aim2BYc0dSKgFyAYxSEdslwMcu on3xqOiV1Iqoxcr/Mbf+2jWCXnpiDZzeEisvEz+fyytu2hXLqWBj+SU40EbVHgvD OBtUfVi8yiY2AAOV4X28G5RU4ZurIBb1Qjbi+LSwBmwsfypXdlWjfWaKrS7CvhD+ 46ey9vQwkzpJnum592FbUMVDnhS3CGIeJZNDcAELNzxmb0e4i15hxI4Juh/ZStLp mDq9X6zhPsASHBIMlsFNLQOyuC3FV66FSf1mDeeKhxZ/1bHRQm2d0gDr06t4R37k jhobMmbKUFAf3j+TxZbj48lGQdxuUdZmJRVo2zq0tQxd8oxLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwcGq2bOKaD5MCjUM4W47QrmY5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U0OTAzNzUtNjJlMS0z ZDM4LTllNTItZmZkZGQ1NDZmYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8y4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB17HzoTwGbJLE4xjEVrDgMDDCVgX8KX8hsT2ad9w+zMNdPqXJQVfu6 vj098LPumXYrAkjALDk8Ajnzq/jFvaGCvhE4bTz6ewVb0QXLIy+bkAi9NMHtsmTr jQrJuHQcIEtweini0CXN4BBeXLFcpU8MRBychEHAF1lmeCsgkUPBVV4NuM1Dotlt Lp0E3Vpo2rPS5WSV/kl+q5E7R6UP9BGJKXGc04UiLEIpOMnNrHHJ6qrG5F7KCkoV 5zhbzgmYqtGPHapI6oKnz0+r8ybcc3bFJ+uqPk0PI1LZ3+XsTAVLjVCZzlJ1D4UG ANXWSXdH87AyvWLHtbwFpZbuXQV4M9o= -----END CERTIFICATE-----Generated at Sat Aug 23 23:30:33 2025 by rpki-client