$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e411e1-e99b-32f4-9cb3-06e62c4772be.roa File: 88e411e1-e99b-32f4-9cb3-06e62c4772be.roa (raw, json) Hash identifier: UXe3DE0MZZLp2gSTK9Dd/HzLU5iCqE5FKHdiEVd4WBg= Subject key identifier: A4:14:3D:9E:C8:BA:9D:9B:8E:7F:25:1B:88:FA:AA:CD:8C:1F:A2:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F92EC9ED59000F092220 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e411e1-e99b-32f4-9cb3-06e62c4772be.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.204.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f9:2e:c9:ed:59:00:0f:09:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1dfea198-7380-4a0f-9c08-b75bbd931bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:c4:97:c0:f1:b9:21:17:da:0e:83:a0:4b: d1:38:e1:7d:89:6a:e6:21:fb:89:95:3e:5a:9e:91: f3:a9:44:93:d3:68:28:c0:07:1f:11:dc:43:2b:ac: 58:ce:82:41:da:66:32:67:6c:2b:3a:4d:1a:58:be: ca:57:88:19:ab:43:a7:7f:93:d0:90:c4:62:5d:58: 46:8d:4e:69:83:e3:ae:9d:ee:6f:ed:e3:09:37:83: fc:f6:5c:35:93:8a:27:2b:f9:11:2e:a8:05:8e:c2: f5:cc:2e:52:e0:26:04:17:ee:91:b0:16:26:76:77: d3:29:0a:5a:38:a8:29:8a:05:c8:3d:27:d0:2b:48: aa:2d:a0:c5:34:8a:26:48:08:b2:dc:06:f5:c5:6d: 0f:e9:0a:01:31:05:2f:57:14:0d:cb:d3:e8:07:75: a6:d5:5b:b1:5b:1e:e8:3f:d8:a2:0f:1a:e9:8f:71: 6d:e7:e7:a1:52:68:7b:45:81:10:51:26:b9:33:7a: d8:a4:08:a5:b3:8a:87:45:90:f8:28:1f:c8:fb:86: 4e:8a:f0:e5:31:b9:f3:37:7d:02:aa:36:e2:ff:74: 04:f4:ab:d8:27:06:55:20:73:01:cd:ae:6e:f1:f8: 62:54:8b:34:ef:60:bf:6d:09:f1:c1:7a:88:0c:93: a6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:14:3D:9E:C8:BA:9D:9B:8E:7F:25:1B:88:FA:AA:CD:8C:1F:A2:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e411e1-e99b-32f4-9cb3-06e62c4772be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:91:0f:26:3e:6d:0d:07:d4:82:6c:23:45:02:c2:44:fe:51: b3:05:bf:d7:64:1f:f5:49:cc:7d:e7:92:e1:52:39:71:14:c6: cb:b1:48:81:28:7d:46:7e:18:58:98:bf:0a:71:a0:ab:57:d8: 7a:af:8d:99:3b:69:57:7c:bb:be:c3:89:07:d9:93:87:f2:77: 66:41:fb:db:c6:92:1e:68:f8:b0:2a:8c:b1:27:32:ab:c4:b9: be:ee:ae:b3:6e:5a:50:49:86:9f:3b:e6:78:40:6f:17:f6:39: ff:4a:1d:de:29:e2:36:68:1a:82:08:ae:d6:56:01:33:4d:76: 29:28:19:9a:dc:07:0c:c9:32:b9:fb:1e:f0:15:66:05:94:63: c4:b5:99:4f:7e:69:6a:dc:27:7f:ea:5f:b4:4b:e2:07:f5:14: bf:20:5e:eb:6e:31:a9:61:2d:b7:af:67:22:39:29:c5:f6:00: 27:24:a8:c2:62:33:4b:1e:81:c0:59:87:4c:21:54:4c:40:d3: 19:3b:39:46:4d:38:15:e5:1a:65:c9:31:4d:32:d0:25:58:06: 0f:74:5c:5b:37:ed:4d:d4:41:75:13:3e:8f:4e:d6:cd:3b:a3: 41:a3:2a:ff:3f:9d:0b:cd:39:19:7c:ae:94:b9:cb:45:7a:76: d6:85:46:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvkuye1ZAA8JIiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWRmZWExOTgtNzM4MC00YTBmLTljMDgtYjc1YmJkOTMxYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMDEl8DxuSEX2g6DoEvROOF9iWrmIfuJlT5a npHzqUST02gowAcfEdxDK6xYzoJB2mYyZ2wrOk0aWL7KV4gZq0Onf5PQkMRiXVhG jU5pg+Oune5v7eMJN4P89lw1k4onK/kRLqgFjsL1zC5S4CYEF+6RsBYmdnfTKQpa OKgpigXIPSfQK0iqLaDFNIomSAiy3Ab1xW0P6QoBMQUvVxQNy9PoB3Wm1VuxWx7o P9iiDxrpj3Ft5+ehUmh7RYEQUSa5M3rYpAils4qHRZD4KB/I+4ZOivDlMbnzN30C qjbi/3QE9KvYJwZVIHMBza5u8fhiVIs072C/bQnxwXqIDJOm0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQUPZ7Iup2bjn8lG4j6qs2MH6L0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhlNDExZTEtZTk5Yi0z MmY0LTljYjMtMDZlNjJjNDc3MmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8ycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCRDyY+bQ0H1IJsI0UCwkT+UbMFv9dkH/VJzH3nkuFSOXEUxsuxSIEo fUZ+GFiYvwpxoKtX2HqvjZk7aVd8u77DiQfZk4fyd2ZB+9vGkh5o+LAqjLEnMqvE ub7urrNuWlBJhp875nhAbxf2Of9KHd4p4jZoGoIIrtZWATNNdikoGZrcBwzJMrn7 HvAVZgWUY8S1mU9+aWrcJ3/qX7RL4gf1FL8gXutuMalhLbevZyI5KcX2ACckqMJi M0segcBZh0whVExA0xk7OUZNOBXlGmXJMU0y0CVYBg90XFs37U3UQXUTPo9O1s07 o0GjKv8/nQvNORl8rpS5y0V6dtaFRrc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:38:30 2025 by rpki-client