$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651e0c05-dec5-3c9e-9bd1-007c34c7bb9f.roa File: 651e0c05-dec5-3c9e-9bd1-007c34c7bb9f.roa (raw, json) Hash identifier: dgpjiFgGqCxf7fJHTxJeELT0/Ani9bTTGPNXod25UkE= Subject key identifier: 20:5E:3E:BD:78:6F:1C:2F:2C:7E:4B:93:26:B4:0B:54:7A:74:B6:D1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E607BB4006CA5E265E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651e0c05-dec5-3c9e-9bd1-007c34c7bb9f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.230.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e6:07:bb:40:06:ca:5e:26:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ca589d6d-5c22-4e30-9488-5080eb371b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:44:23:9b:a5:c1:fb:ed:ec:12:b7:dd:62: bc:65:3f:14:c2:42:c8:29:74:f0:04:56:64:6d:38: b0:45:12:59:c9:26:b8:62:f6:e3:37:2f:cc:94:ed: 1a:20:16:22:6e:04:ef:fa:2e:7b:b7:b2:86:24:aa: a8:33:e5:65:1d:66:53:46:03:35:f3:c5:a6:c6:8c: e3:29:c1:a9:1c:17:30:7c:a6:51:a0:0d:38:7e:16: 2c:b9:2a:c6:be:0c:5e:e6:a7:41:7f:63:40:c3:b6: 7a:ad:06:91:87:c2:c5:f9:65:44:e7:41:8f:ae:51: 14:e0:be:93:d5:1b:72:e7:79:55:0f:08:cc:31:90: 5a:34:aa:e4:03:b2:a1:91:e8:4c:c9:2b:fb:1d:7b: 9f:77:89:cd:29:22:71:0a:c0:a0:2b:fa:5c:b9:98: 0f:34:a9:88:b8:38:56:cf:f7:fd:91:82:4a:76:72: c4:eb:73:9d:7d:f2:84:5e:99:85:41:3f:70:d0:df: 2f:12:23:df:d7:56:3a:26:02:22:dc:4b:80:2c:7d: 9a:dd:5d:d2:d1:ef:cd:3d:71:f4:18:98:c9:25:47: 72:4c:a1:68:5b:62:f7:ad:f9:39:ec:e6:f7:5c:d2: cb:79:40:76:af:3e:24:42:e0:50:c3:ea:4a:78:13: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5E:3E:BD:78:6F:1C:2F:2C:7E:4B:93:26:B4:0B:54:7A:74:B6:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651e0c05-dec5-3c9e-9bd1-007c34c7bb9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:eb:76:50:ab:e6:cd:a7:37:fb:3c:82:83:75:c3:37:0c:fa: 7f:54:80:aa:73:94:6a:50:54:e8:82:83:71:19:09:83:d7:aa: 9f:bf:c8:b1:6a:f2:35:25:c3:6b:f4:f0:28:e0:c0:41:e9:b8: a3:68:31:ce:29:82:f5:c7:72:e2:cd:c5:a0:5f:6c:d9:27:74: 87:94:48:d4:48:07:10:4d:04:63:a9:d3:f6:3a:d8:67:6c:0f: 21:83:f7:84:f4:44:c7:3b:0d:8f:e6:3f:9d:1d:a2:d9:0a:6c: 14:2f:b3:46:5e:aa:4e:f5:bd:ba:68:eb:48:7d:4b:38:63:89: fa:2c:e1:c6:b6:9a:88:e8:8a:6d:81:95:19:2b:12:67:08:40: f7:94:5b:bd:e8:dd:4e:1a:8c:7d:09:4e:de:6a:06:a3:40:2b: a3:23:1f:f7:45:73:0e:ff:9d:79:5e:d4:87:aa:6f:b2:78:bd: ae:a1:93:93:ac:36:28:24:27:40:39:e3:50:55:28:6b:89:59: e0:cd:f1:09:88:61:1f:38:33:52:5b:43:3c:14:bf:2c:79:0f: 70:06:80:92:9b:69:6d:31:3b:5c:1d:2c:29:24:43:82:4b:15: 06:85:1e:e8:d8:18:02:64:b6:eb:b5:c7:83:01:7d:ce:a9:39: c4:04:2b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+YHu0AGyl4mXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2E1ODlkNmQtNWMyMi00ZTMwLTk0ODgtNTA4MGViMzcxYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg9EI5ulwfvt7BK33WK8ZT8UwkLIKXTwBFZk bTiwRRJZySa4YvbjNy/MlO0aIBYibgTv+i57t7KGJKqoM+VlHWZTRgM188Wmxozj KcGpHBcwfKZRoA04fhYsuSrGvgxe5qdBf2NAw7Z6rQaRh8LF+WVE50GPrlEU4L6T 1Rty53lVDwjMMZBaNKrkA7KhkehMySv7HXufd4nNKSJxCsCgK/pcuZgPNKmIuDhW z/f9kYJKdnLE63OdffKEXpmFQT9w0N8vEiPf11Y6JgIi3EuALH2a3V3S0e/NPXH0 GJjJJUdyTKFoW2L3rfk57Ob3XNLLeUB2rz4kQuBQw+pKeBP6VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBePr14bxwvLH5Lkya0C1R6dLbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjUxZTBjMDUtZGVjNS0z YzllLTliZDEtMDA3YzM0YzdiYjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDrdlCr5s2nN/s8goN1wzcM+n9UgKpzlGpQVOiCg3EZCYPXqp+/yLFq 8jUlw2v08CjgwEHpuKNoMc4pgvXHcuLNxaBfbNkndIeUSNRIBxBNBGOp0/Y62Gds DyGD94T0RMc7DY/mP50dotkKbBQvs0Zeqk71vbpo60h9Szhjifos4ca2mojoim2B lRkrEmcIQPeUW73o3U4ajH0JTt5qBqNAK6MjH/dFcw7/nXle1Ieqb7J4va6hk5Os NigkJ0A541BVKGuJWeDN8QmIYR84M1JbQzwUvyx5D3AGgJKbaW0xO1wdLCkkQ4JL FQaFHujYGAJktuu1x4MBfc6pOcQEKx4= -----END CERTIFICATE-----Generated at Sat Aug 23 23:02:26 2025 by rpki-client