$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fe8537c-82c9-3240-ba44-8c61e728f608.roa File: 3fe8537c-82c9-3240-ba44-8c61e728f608.roa (raw, json) Hash identifier: KfUgw68p6KO9O5TxO/Ekb5GxHr0zANddE6n6UkTPbT0= Subject key identifier: 42:AD:75:1C:3A:F7:67:EA:AE:56:FA:19:45:ED:33:5F:41:50:6B:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE03205EE56A397B842B6E3C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fe8537c-82c9-3240-ba44-8c61e728f608.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 33287 IP address blocks: 71.58.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:05:ee:56:a3:97:b8:42:b6:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=d295eafa-c409-40e9-8631-d8ef0a8ce845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ab:83:a1:78:60:24:ee:37:9e:c4:17:39:51: 13:e2:e5:4c:42:78:11:58:ce:30:2d:22:ef:b0:48: 82:dc:46:9d:fb:64:b9:6b:7b:1c:59:2d:9f:62:01: bd:d8:31:3c:0e:5e:4a:f2:f7:21:b3:f4:ea:10:48: 5f:05:1e:94:61:41:15:ec:4b:ef:d6:0e:c1:37:0f: 83:f2:4b:48:a1:80:0c:fa:83:83:5a:c4:6e:fd:db: 3e:69:c0:14:4b:a8:92:b1:62:38:cf:73:e3:1e:c6: 56:05:d8:52:17:e3:c1:5f:57:d7:ed:1a:93:1a:70: f0:15:05:cf:a4:60:08:cb:71:1c:93:42:12:67:ba: dc:e4:10:b1:ea:c0:f5:02:b8:ed:72:81:0a:5b:ae: d8:31:28:cb:ae:86:dc:53:93:3e:1d:fd:f8:c3:a8: 23:bf:93:2c:00:91:b3:9b:50:23:0d:af:55:a7:6d: 64:ed:0c:88:a8:60:01:40:39:c9:56:8c:77:22:79: 87:09:81:26:e9:31:dc:10:c6:d9:fc:f6:67:92:e2: ab:e3:f1:b7:5b:f5:aa:b2:07:93:90:b8:69:d2:78: 10:16:55:8d:0e:ad:1d:b1:c6:a3:df:92:03:be:b6: 69:45:77:74:d5:3b:74:57:0a:4e:79:c1:22:a6:86: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:75:1C:3A:F7:67:EA:AE:56:FA:19:45:ED:33:5F:41:50:6B:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fe8537c-82c9-3240-ba44-8c61e728f608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.58.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:33:cc:d2:9e:cd:84:53:8a:ab:45:5d:f2:65:14:c2:12:ae: e0:0c:ca:dd:f9:0f:8a:36:a0:86:7e:1b:03:c9:91:96:25:55: 80:2d:cf:b2:47:ad:3c:93:fe:d9:8c:a2:7b:de:24:f3:4d:dd: 72:bf:68:2a:f0:5c:f5:da:5d:e7:ca:87:f2:ac:7f:c4:bf:81: dd:26:ba:84:a7:61:57:a8:2b:d7:92:15:e1:4b:e8:3e:4c:c5: 65:be:87:20:60:7b:f0:8a:ac:b0:1b:d9:5f:79:d6:f9:e0:bc: af:4c:9d:80:ec:39:30:be:ef:33:7c:71:55:e5:dc:7d:de:f2: 2c:7f:09:b5:74:23:ad:c4:21:d2:10:5e:fb:de:7e:08:36:cf: e2:2a:8f:59:67:0f:f5:65:fe:34:d0:34:f3:ed:ad:71:06:19: 8e:81:5b:e9:86:af:5a:55:0d:83:bc:ca:28:ce:80:6c:6b:20: 9c:f5:81:42:e6:bb:53:05:7a:29:29:e2:62:ff:e8:76:8b:2d: 49:85:7c:e7:4c:42:d7:1e:a3:d5:cf:05:5e:da:e6:33:90:cb: 72:98:6f:8e:b9:92:4e:b2:0a:a9:90:72:2a:4a:52:aa:4c:c6: b5:cf:55:cd:a5:f7:c0:82:ab:d9:7f:83:db:71:70:20:44:4e: 5d:6c:a4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMgXuVqOXuEK248AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk ZDI5NWVhZmEtYzQwOS00MGU5LTg2MzEtZDhlZjBhOGNlODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgauDoXhgJO43nsQXOVET4uVMQngRWM4wLSLv sEiC3Ead+2S5a3scWS2fYgG92DE8Dl5K8vchs/TqEEhfBR6UYUEV7Evv1g7BNw+D 8ktIoYAM+oODWsRu/ds+acAUS6iSsWI4z3PjHsZWBdhSF+PBX1fX7RqTGnDwFQXP pGAIy3Eck0ISZ7rc5BCx6sD1ArjtcoEKW67YMSjLrobcU5M+Hf34w6gjv5MsAJGz m1AjDa9Vp21k7QyIqGABQDnJVox3InmHCYEm6THcEMbZ/PZnkuKr4/G3W/WqsgeT kLhp0ngQFlWNDq0dscaj35IDvrZpRXd01Tt0VwpOecEipobFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKtdRw692fqrlb6GUXtM19BUGs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ZlODUzN2MtODJjOS0z MjQwLWJhNDQtOGM2MWU3MjhmNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRzoIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACczzNKezYRTiqtFXfJlFMISruAMyt35D4o2oIZ+GwPJkZYlVYAtz7JH rTyT/tmMonveJPNN3XK/aCrwXPXaXefKh/Ksf8S/gd0muoSnYVeoK9eSFeFL6D5M xWW+hyBge/CKrLAb2V951vngvK9MnYDsOTC+7zN8cVXl3H3e8ix/CbV0I63EIdIQ Xvvefgg2z+Iqj1lnD/Vl/jTQNPPtrXEGGY6BW+mGr1pVDYO8yijOgGxrIJz1gULm u1MFeikp4mL/6HaLLUmFfOdMQtceo9XPBV7a5jOQy3KYb465kk6yCqmQcipKUqpM xrXPVc2l98CCq9l/g9txcCBETl1spFM= -----END CERTIFICATE-----Generated at Sun Aug 24 02:29:02 2025 by rpki-client