$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f86900-d971-38fd-9eda-64b16bc022c7.roa File: 43f86900-d971-38fd-9eda-64b16bc022c7.roa (raw, json) Hash identifier: ef+5RKxJ5Ka0CCf/Ewme8afz11UqK1GX9ob7wtmZPLA= Subject key identifier: 2C:A8:ED:97:D8:C2:A0:6B:F4:99:BD:F5:EC:FB:13:AD:96:95:53:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F76F097CF8FC297DD780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f86900-d971-38fd-9eda-64b16bc022c7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.202.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f7:6f:09:7c:f8:fc:29:7d:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b60e7bdc-d721-44f3-ac35-52cb21eb61e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:b5:f7:65:99:47:3a:d2:b8:96:c9:4b:94: 37:07:b7:5e:16:d1:a9:67:87:09:a0:e4:dd:5e:fc: 3f:94:11:1d:28:b7:12:f2:6b:f3:07:20:ec:e0:4a: 1a:ab:51:0d:e0:c7:b6:65:7b:61:1c:fa:ca:d5:d1: 83:1f:35:fb:5a:ad:7f:eb:06:9f:56:6d:31:f3:11: da:79:a3:10:48:2c:f5:7e:6b:df:5f:74:80:00:3e: 1c:a3:63:4f:c2:17:98:12:6e:ee:26:0c:3c:ce:84: a7:5a:c6:66:30:04:8e:1c:75:9e:97:28:50:68:63: 57:bb:e9:a1:5b:aa:a7:89:b5:51:3e:54:f9:44:a3: 0e:ee:36:83:76:5e:e6:7a:b8:6a:9e:f3:9c:54:f1: ee:f0:34:a2:b8:27:c6:52:8e:2a:42:36:85:65:28: 37:e0:3d:20:ec:eb:72:dc:c3:59:84:d7:b8:73:74: a2:9b:92:5f:62:73:86:0d:be:e8:9c:47:9c:53:38: 8f:b0:3f:40:6b:b4:2d:7f:1e:2a:1a:c5:45:ee:75: 31:3b:7e:be:84:93:4d:c3:2e:fd:16:aa:fb:c4:ba: f2:cf:ae:ee:95:e9:1b:f4:47:da:11:aa:5c:6e:16: fd:c7:0c:92:7f:98:e8:7e:f2:e9:2a:21:e2:96:e7: 79:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A8:ED:97:D8:C2:A0:6B:F4:99:BD:F5:EC:FB:13:AD:96:95:53:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f86900-d971-38fd-9eda-64b16bc022c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:5c:14:f7:04:35:08:0b:a7:87:27:6f:50:d2:6a:e7:bc:e9: 6b:b6:6a:07:53:5d:93:94:95:7f:a2:72:3b:61:de:ac:ee:8c: fc:99:c9:89:3e:50:17:7e:d6:63:a5:3b:fa:f8:f2:45:a1:15: 30:68:b2:1e:55:2f:4b:42:c3:91:6e:4c:06:eb:01:f5:90:2f: 1b:b2:4e:13:de:a7:1b:12:fb:6d:14:8f:74:30:29:39:8b:01: ac:09:45:7e:c1:80:71:63:33:fe:d8:e6:0b:a8:ea:1b:cc:de: 23:79:87:37:0a:90:cb:aa:9f:48:db:e7:68:87:c8:03:19:84: 4d:ed:a1:71:fa:47:5e:de:2b:73:2c:41:f9:20:d3:b7:d5:a7: 8c:a2:c6:18:c3:57:78:51:04:1c:1f:29:e5:41:f6:68:fd:75: 4f:75:6d:d5:ee:85:fd:92:16:f7:10:bb:1f:95:0c:32:64:f4: 8b:54:fa:fa:16:56:77:15:40:71:9b:f2:8e:8f:2e:6c:af:f1: 58:04:2f:b0:bb:2b:50:95:6e:c8:9b:8d:d1:4a:a9:b1:d6:64: bb:e5:5f:ad:82:12:df:4d:27:ca:25:45:4a:4b:40:e1:22:c1: 8a:ee:d0:ba:ce:5d:b8:14:ff:c7:8b:24:9f:61:22:77:06:8f: f4:d0:8b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvdvCXz4/Cl914AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjYwZTdiZGMtZDcyMS00NGYzLWFjMzUtNTJjYjIxZWI2MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe2192WZRzrSuJbJS5Q3B7deFtGpZ4cJoOTd Xvw/lBEdKLcS8mvzByDs4Eoaq1EN4Me2ZXthHPrK1dGDHzX7Wq1/6wafVm0x8xHa eaMQSCz1fmvfX3SAAD4co2NPwheYEm7uJgw8zoSnWsZmMASOHHWelyhQaGNXu+mh W6qnibVRPlT5RKMO7jaDdl7merhqnvOcVPHu8DSiuCfGUo4qQjaFZSg34D0g7Oty 3MNZhNe4c3Sim5JfYnOGDb7onEecUziPsD9Aa7Qtfx4qGsVF7nUxO36+hJNNwy79 Fqr7xLryz67ulekb9EfaEapcbhb9xwySf5jofvLpKiHilud5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyo7ZfYwqBr9Jm99ez7E62WlVNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNmODY5MDAtZDk3MS0z OGZkLTllZGEtNjRiMTZiYzAyMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVcFPcENQgLp4cnb1DSaue86Wu2agdTXZOUlX+icjth3qzujPyZyYk+ UBd+1mOlO/r48kWhFTBosh5VL0tCw5FuTAbrAfWQLxuyThPepxsS+20Uj3QwKTmL AawJRX7BgHFjM/7Y5guo6hvM3iN5hzcKkMuqn0jb52iHyAMZhE3toXH6R17eK3Ms Qfkg07fVp4yixhjDV3hRBBwfKeVB9mj9dU91bdXuhf2SFvcQux+VDDJk9ItU+voW VncVQHGb8o6PLmyv8VgEL7C7K1CVbsibjdFKqbHWZLvlX62CEt9NJ8olRUpLQOEi wYru0LrOXbgU/8eLJJ9hIncGj/TQi9g= -----END CERTIFICATE-----Generated at Sat Aug 23 23:36:25 2025 by rpki-client