$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f74279f-96e2-38c4-9f86-12520baa8cec.roa File: 5f74279f-96e2-38c4-9f86-12520baa8cec.roa (raw, json) Hash identifier: 3yPoe9blhhLzVxfQZ9A623M4v3WWRACKzHHgkmQx2BE= Subject key identifier: E0:6B:73:C7:7A:19:4E:D8:20:99:FA:5E:8F:BB:83:A0:6A:B3:BF:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE0318BF6F484B74BE8E03C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f74279f-96e2-38c4-9f86-12520baa8cec.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7015 IP address blocks: 71.192.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:8b:f6:f4:84:b7:4b:e8:e0:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=50b2e84d-f56f-4ef9-b490-ddd62188ff83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:57:92:72:56:1b:20:3e:ce:b8:b2:63:94:18: 9f:c5:14:96:98:84:c6:73:c3:61:db:67:ca:dd:28: b2:9a:f5:51:68:4c:e0:fa:d2:29:86:12:f3:d0:9e: 62:50:66:14:2f:d6:04:c9:79:78:75:61:64:3d:2e: ef:d1:da:55:e0:25:5f:de:57:af:f1:e0:10:08:a3: ff:25:f1:68:82:bf:ad:44:ca:e0:5c:28:7f:bc:72: 29:2f:11:ac:57:98:dd:13:7f:28:1a:72:75:be:ff: 20:45:93:11:2c:c8:10:11:79:bf:90:c0:66:27:8d: a4:8f:34:98:58:0b:f7:ac:e6:b3:a4:87:2f:e4:41: 24:96:fe:11:8b:7e:d4:53:d2:9a:ae:b8:10:7f:bd: fe:c6:5c:9e:be:0a:8e:8c:2a:70:5a:31:c0:00:d2: 15:2d:c9:ec:44:49:bc:ba:d6:12:fa:bb:1e:7e:81: 1f:ff:ba:c8:4e:4e:03:d3:37:b5:b9:1c:55:b0:ea: be:08:f0:d0:56:2f:99:2f:84:4e:3e:3f:ac:e6:5f: 8f:f9:b9:23:12:a0:46:89:49:ae:a5:a7:d3:74:88: 7e:e0:4a:16:95:00:f7:13:62:f8:df:e1:e5:6c:58: 0b:9c:0a:5b:64:f1:fb:42:15:a7:27:1b:0f:d7:ba: 54:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6B:73:C7:7A:19:4E:D8:20:99:FA:5E:8F:BB:83:A0:6A:B3:BF:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f74279f-96e2-38c4-9f86-12520baa8cec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.192.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8d:fd:7d:b9:ad:b4:0f:16:ef:48:ee:ff:61:da:d2:37:6e: 8c:5b:eb:30:dd:0b:ee:d9:d7:b2:b1:57:34:29:48:8b:79:f3: fd:f4:9b:f3:91:58:19:f2:fd:07:15:25:9c:b7:a2:80:72:04: 95:0e:36:42:d2:ab:87:97:32:5b:0c:cd:79:49:2e:46:76:be: c1:fc:25:da:0b:1f:3a:0d:a9:aa:39:14:b9:1a:f3:91:36:a0: 56:c4:e4:a4:27:a7:34:d7:39:93:e2:ec:7b:ef:fb:cf:06:34: 8b:92:a2:84:f5:f9:c2:b4:05:db:62:a3:98:37:98:e2:e4:7e: a0:ab:09:53:f6:31:73:36:a8:1a:22:57:24:5b:99:09:b0:fa: da:88:f8:ef:7f:35:33:04:50:15:7f:3f:d6:50:a8:66:fb:9e: 4f:ea:15:f9:47:fa:c7:33:44:94:5e:0d:65:66:3c:89:a1:23: 36:cb:be:d1:36:b0:0d:1f:1d:41:36:06:e8:46:fe:d3:a6:59: ec:9f:62:e4:27:7b:76:73:ca:3f:fb:c5:18:f0:ce:a0:eb:d7: 30:4c:06:6d:cd:2d:a8:79:48:cd:9e:74:0e:43:ff:b7:e8:57: 04:87:a3:3b:09:91:85:71:4a:1c:c9:4b:5d:ba:ed:9f:c5:84: 27:b8:fb:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMYv29IS3S+jgPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NTBiMmU4NGQtZjU2Zi00ZWY5LWI0OTAtZGRkNjIxODhmZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVeSclYbID7OuLJjlBifxRSWmITGc8Nh22fK 3SiymvVRaEzg+tIphhLz0J5iUGYUL9YEyXl4dWFkPS7v0dpV4CVf3lev8eAQCKP/ JfFogr+tRMrgXCh/vHIpLxGsV5jdE38oGnJ1vv8gRZMRLMgQEXm/kMBmJ42kjzSY WAv3rOazpIcv5EEklv4Ri37UU9KarrgQf73+xlyevgqOjCpwWjHAANIVLcnsREm8 utYS+rsefoEf/7rITk4D0ze1uRxVsOq+CPDQVi+ZL4ROPj+s5l+P+bkjEqBGiUmu pafTdIh+4EoWlQD3E2L43+HlbFgLnApbZPH7QhWnJxsP17pUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBrc8d6GU7YIJn6Xo+7g6Bqs7/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWY3NDI3OWYtOTZlMi0z OGM0LTlmODYtMTI1MjBiYWE4Y2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiN/X25rbQPFu9I7v9h2tI3boxb6zDdC+7Z17KxVzQpSIt58/30m/OR WBny/QcVJZy3ooByBJUONkLSq4eXMlsMzXlJLkZ2vsH8JdoLHzoNqao5FLka85E2 oFbE5KQnpzTXOZPi7Hvv+88GNIuSooT1+cK0Bdtio5g3mOLkfqCrCVP2MXM2qBoi VyRbmQmw+tqI+O9/NTMEUBV/P9ZQqGb7nk/qFflH+sczRJReDWVmPImhIzbLvtE2 sA0fHUE2BuhG/tOmWeyfYuQne3Zzyj/7xRjwzqDr1zBMBm3NLah5SM2edA5D/7fo VwSHozsJkYVxShzJS1267Z/FhCe4+0U= -----END CERTIFICATE-----Generated at Sat Aug 23 23:32:40 2025 by rpki-client