$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7402d414-be6f-3ff0-a4d6-e4bc8974ceec.roa File: 7402d414-be6f-3ff0-a4d6-e4bc8974ceec.roa (raw, json) Hash identifier: cE10uXFIxw2UCqYcUTddNaJbnF0PmBsexPaRgUFBieU= Subject key identifier: DD:9E:D4:4D:27:FC:31:D5:11:3D:2A:B6:80:1E:C3:3D:DD:9D:A0:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC24A3B7E74D9C9A20A3640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7402d414-be6f-3ff0-a4d6-e4bc8974ceec.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.194.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:4a:3b:7e:74:d9:c9:a2:0a:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c9ed8c98-049d-41e9-aa9d-a1b77ab4d0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:e9:41:f8:4d:12:da:47:ab:fa:8a:46:94: 7d:e0:ae:93:bd:a2:89:a6:b9:4a:93:2d:37:57:93: a9:26:b0:8c:28:84:99:fa:2c:4e:6d:da:61:96:3e: 50:31:ec:f4:02:84:9a:27:77:ee:f0:da:2e:d7:2f: 57:9a:0e:6d:50:e7:3a:90:5b:07:07:92:78:30:fc: 92:4a:78:74:c6:34:69:b3:f3:3e:6c:a0:93:dc:9c: e0:f3:20:42:ce:11:df:bc:2f:53:87:91:e6:36:34: 18:90:f0:76:9b:a6:f9:67:85:5b:db:ad:ba:50:e7: 83:4e:ff:fa:a8:af:47:18:4c:fb:15:41:64:a9:60: d1:16:a4:a9:ef:42:46:15:ba:47:32:b6:f8:53:e1: cf:14:29:52:dc:36:69:a4:17:ad:20:75:fe:b6:7b: bf:77:12:0d:4e:8b:46:54:15:ac:fd:4b:77:e2:1e: 34:93:0a:e3:d6:34:51:64:e0:42:af:3e:9b:a7:6b: 29:9d:30:9a:fe:a5:69:74:b3:c2:2f:bf:e5:2c:61: 17:78:3a:64:58:16:02:70:56:bb:00:d6:90:2d:1e: ff:90:1a:90:00:cd:84:f6:78:cf:95:dd:ac:7e:7a: e2:10:cb:9a:f2:25:7c:8c:fc:f7:d0:cd:f9:0c:2c: d0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9E:D4:4D:27:FC:31:D5:11:3D:2A:B6:80:1E:C3:3D:DD:9D:A0:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7402d414-be6f-3ff0-a4d6-e4bc8974ceec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:0b:4a:60:b7:04:8a:08:9f:3f:94:6c:15:99:79:f3:89:c8: 91:f0:5f:e4:52:a3:3b:19:cf:8b:97:d3:71:61:6d:21:42:53: 43:39:b1:0d:fd:9f:5d:59:c7:48:fa:2a:f9:bf:23:45:fb:05: 56:66:42:d7:71:d0:a1:72:40:98:fe:26:92:42:04:ba:21:cb: b0:8d:4c:a0:6a:90:01:ed:85:2f:34:9f:4b:9d:f2:42:73:e0: 04:d6:5d:86:ce:f4:8c:61:59:d3:30:23:12:01:1a:8a:39:de: c9:13:03:6a:34:14:18:73:51:43:36:10:25:b9:58:9f:7a:8f: dc:ed:a4:82:a9:a1:3d:cb:74:cc:c6:dc:7f:1f:d7:a5:4c:21: 69:8e:97:dc:7f:94:6c:c0:8f:f0:67:0f:ed:34:38:e5:2f:b9: ed:40:ac:dc:d1:e6:17:4b:0b:53:a4:ed:ff:96:b2:58:7b:a4: 07:57:bd:33:a2:5e:9a:48:bd:6a:3b:c1:95:1a:11:bc:a2:fa: 83:4b:c8:6e:0c:84:dc:ef:21:85:ed:4d:d6:95:2a:8b:28:88: a1:8e:a1:11:f9:80:e4:8c:f7:46:62:df:9c:f8:0f:d2:0b:4f: 47:6f:b0:1f:96:f1:74:f7:19:26:b6:7e:39:bf:af:40:8c:39: a4:1a:b0:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswko7fnTZyaIKNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzllZDhjOTgtMDQ5ZC00MWU5LWFhOWQtYTFiNzdhYjRkMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGLpQfhNEtpHq/qKRpR94K6TvaKJprlKky03 V5OpJrCMKISZ+ixObdphlj5QMez0AoSaJ3fu8Nou1y9Xmg5tUOc6kFsHB5J4MPyS Snh0xjRps/M+bKCT3Jzg8yBCzhHfvC9Th5HmNjQYkPB2m6b5Z4Vb2626UOeDTv/6 qK9HGEz7FUFkqWDRFqSp70JGFbpHMrb4U+HPFClS3DZppBetIHX+tnu/dxINTotG VBWs/Ut34h40kwrj1jRRZOBCrz6bp2spnTCa/qVpdLPCL7/lLGEXeDpkWBYCcFa7 ANaQLR7/kBqQAM2E9njPld2sfnriEMua8iV8jPz30M35DCzQ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2e1E0n/DHVET0qtoAewz3dnaDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzQwMmQ0MTQtYmU2Zi0z ZmYwLWE0ZDYtZTRiYzg5NzRjZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8IgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQLSmC3BIoInz+UbBWZefOJyJHwX+RSozsZz4uX03FhbSFCU0M5sQ39 n11Zx0j6Kvm/I0X7BVZmQtdx0KFyQJj+JpJCBLohy7CNTKBqkAHthS80n0ud8kJz 4ATWXYbO9IxhWdMwIxIBGoo53skTA2o0FBhzUUM2ECW5WJ96j9ztpIKpoT3LdMzG 3H8f16VMIWmOl9x/lGzAj/BnD+00OOUvue1ArNzR5hdLC1Ok7f+Wslh7pAdXvTOi XppIvWo7wZUaEbyi+oNLyG4MhNzvIYXtTdaVKosoiKGOoRH5gOSM90Zi35z4D9IL T0dvsB+W8XT3GSa2fjm/r0CMOaQasKo= -----END CERTIFICATE-----Generated at Sat Aug 23 23:07:35 2025 by rpki-client