$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473bc59f-2419-38e2-98bc-9cb2f7acdc1a.roa File: 473bc59f-2419-38e2-98bc-9cb2f7acdc1a.roa (raw, json) Hash identifier: 2rZ76UPJjw3KQiE6ZL+yvjkGDIvRCAh9o4HJynCWkig= Subject key identifier: 98:C5:FB:4C:D9:72:BA:A2:0D:CB:C5:FC:DF:58:0C:82:BB:97:5E:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1DB47058036658E3C42C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473bc59f-2419-38e2-98bc-9cb2f7acdc1a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.230.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:db:47:05:80:36:65:8e:3c:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=78872ea6-666e-47f8-a7ea-9d0d46d5c2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:b6:ca:b3:70:24:c6:c5:6f:5f:20:9c:3a: 9c:a9:4d:28:b8:d1:fc:af:e0:a8:2b:98:80:a3:d2: b7:56:5c:61:02:ad:49:04:7a:cd:43:ab:31:c2:7b: 1e:bf:e7:1b:eb:c7:9e:4b:5c:12:2c:c1:8c:a9:2e: 5c:ef:0f:b9:2b:8d:92:56:8f:a0:74:ce:10:69:72: 48:6f:e9:d7:7e:b6:dc:4c:bb:64:eb:ea:c6:04:4e: 1c:01:87:38:32:e1:49:ef:5f:e8:f0:84:c3:a9:0f: 08:79:d0:05:ff:48:f3:47:3d:8a:b8:b3:c9:34:31: 26:3a:2c:c9:3e:02:d9:9a:0b:8d:8b:24:2c:b3:db: b2:aa:79:82:59:0b:17:23:66:b8:ad:11:c7:fc:9e: 9b:ad:7d:8e:1d:e7:5d:86:4e:b7:a0:f7:b1:50:e1: 12:be:f0:7d:d6:1a:a2:7a:da:ea:ae:ef:b7:d9:eb: ee:87:b9:41:e4:df:42:01:50:27:f1:b1:5e:5e:5b: 96:47:ed:42:d0:41:2b:fa:26:d0:8b:45:78:c5:33: 6d:85:ce:4f:d5:f5:4a:5c:45:c6:50:ee:a5:20:12: f2:37:a4:cf:b5:33:90:f1:44:e4:e1:2f:97:01:fc: 60:b0:aa:4b:36:44:2a:38:2b:53:a8:bd:6a:04:76: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C5:FB:4C:D9:72:BA:A2:0D:CB:C5:FC:DF:58:0C:82:BB:97:5E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473bc59f-2419-38e2-98bc-9cb2f7acdc1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:09:1f:d2:ed:32:07:4a:0d:97:a4:5d:99:4b:b3:46:04:56: 29:91:c6:53:27:64:d3:37:a0:27:e9:1b:8c:e2:24:7a:f1:c2: 79:4b:34:c7:08:59:8d:53:59:f5:6c:a4:b8:3f:83:d1:20:6f: 63:e0:fc:ee:71:4e:a4:2d:be:b0:7d:d5:ce:9a:0b:f5:75:d6: 50:33:80:d7:8c:08:f4:03:56:f9:01:a9:b8:57:ef:d7:fb:23: e9:a6:80:a2:c6:b7:8b:b1:80:e4:2c:f4:a8:51:ef:57:81:2b: 22:b9:be:a9:20:c0:48:25:70:e6:85:5a:c3:c1:e3:17:91:b0: e4:49:bc:71:07:91:42:4a:e4:89:52:42:11:9d:45:09:05:9a: 19:20:c8:6e:a5:0d:45:db:fd:bf:00:8b:d9:21:99:3d:1f:50: 81:44:e6:fc:6b:ef:32:b8:f9:f1:52:f5:d8:0f:e2:30:96:04: 2f:d6:fe:5d:48:ed:db:0e:95:58:23:d2:b1:93:d8:34:25:9a: 44:d9:6e:e5:cb:dd:41:e4:01:8a:52:fb:52:30:3a:5f:b1:08: 0e:31:5b:81:f6:d3:8b:17:2c:b1:68:4b:69:2f:15:20:31:37: 79:41:af:a1:ec:76:2c:88:a7:7d:aa:04:62:89:52:3d:81:ff: c1:5a:77:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswdtHBYA2ZY48QsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Nzg4NzJlYTYtNjY2ZS00N2Y4LWE3ZWEtOWQwZDQ2ZDVjMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfu2yrNwJMbFb18gnDqcqU0ouNH8r+CoK5iA o9K3VlxhAq1JBHrNQ6sxwnsev+cb68eeS1wSLMGMqS5c7w+5K42SVo+gdM4QaXJI b+nXfrbcTLtk6+rGBE4cAYc4MuFJ71/o8ITDqQ8IedAF/0jzRz2KuLPJNDEmOizJ PgLZmguNiyQss9uyqnmCWQsXI2a4rRHH/J6brX2OHeddhk63oPexUOESvvB91hqi etrqru+32evuh7lB5N9CAVAn8bFeXluWR+1C0EEr+ibQi0V4xTNthc5P1fVKXEXG UO6lIBLyN6TPtTOQ8UTk4S+XAfxgsKpLNkQqOCtTqL1qBHZ6AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjF+0zZcrqiDcvF/N9YDIK7l17kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDczYmM1OWYtMjQxOS0z OGUyLTk4YmMtOWNiMmY3YWNkYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+YYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYJH9LtMgdKDZekXZlLs0YEVimRxlMnZNM3oCfpG4ziJHrxwnlLNMcI WY1TWfVspLg/g9Egb2Pg/O5xTqQtvrB91c6aC/V11lAzgNeMCPQDVvkBqbhX79f7 I+mmgKLGt4uxgOQs9KhR71eBKyK5vqkgwEglcOaFWsPB4xeRsORJvHEHkUJK5IlS QhGdRQkFmhkgyG6lDUXb/b8Ai9khmT0fUIFE5vxr7zK4+fFS9dgP4jCWBC/W/l1I 7dsOlVgj0rGT2DQlmkTZbuXL3UHkAYpS+1IwOl+xCA4xW4H204sXLLFoS2kvFSAx N3lBr6HsdiyIp32qBGKJUj2B/8Fadz8= -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:24 2025 by rpki-client