$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa File: 88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa (raw, json) Hash identifier: MIExRIDmOwp82pQ5tdG5RqkTzCqlHqRCY0oiM88HPDc= Subject key identifier: BA:BD:CB:27:FC:9C:89:D1:01:45:77:DE:CD:E4:CC:53:DA:4A:D5:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E51818E8E23B2EA1B2E8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.225.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e5:18:18:e8:e2:3b:2e:a1:b2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6f7c39eb-de9c-4e42-90cc-b290e3fdf99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:ff:f3:13:ca:40:6f:29:3f:a2:89:ef:5e: e2:3e:a1:08:c1:a2:af:35:1c:f6:0d:56:04:f3:75: 2e:be:1d:1e:30:cc:4f:bf:fa:70:4b:40:15:12:a3: 79:5a:91:32:78:a6:d3:36:a7:6d:c0:7a:7b:6a:7a: 38:43:43:02:21:a8:9b:49:11:45:99:d8:1e:11:5b: 40:eb:91:26:35:bf:b2:12:75:ee:e0:f1:bf:82:4e: 1d:b2:2a:bf:fb:b3:03:fe:77:d5:0a:ed:66:f0:27: 67:b9:39:5e:20:64:29:61:c3:33:79:44:6b:8b:0b: 0d:b8:c0:55:b4:f9:1a:da:24:73:27:2c:0b:76:80: c1:58:a6:35:9c:ac:1f:34:43:5c:b0:b7:64:b9:ed: 9c:c7:34:9e:89:1c:38:99:3a:b3:1e:27:f4:6e:a8: 63:8a:c4:68:8f:0b:98:37:52:e1:0f:e0:c9:52:67: c9:2c:be:81:0c:33:c4:d8:9a:f3:11:c8:2a:d8:7e: 1b:40:90:cc:c7:f6:32:46:8e:5e:cf:b5:d1:72:5e: 7a:be:45:87:44:e1:33:78:dd:fc:c0:66:a3:33:00: 2f:7f:f0:9d:25:fb:c5:5e:cb:2c:7b:76:ea:49:af: ab:e9:63:5f:db:ef:87:f3:ff:71:da:e5:11:76:cc: 3b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BD:CB:27:FC:9C:89:D1:01:45:77:DE:CD:E4:CC:53:DA:4A:D5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f2:a7:43:37:5e:62:29:c0:27:44:dd:58:85:79:62:14:4c: 3c:ef:ba:df:2c:60:62:24:23:57:f8:a0:71:5b:77:0c:00:6a: 7a:9a:59:f2:4e:6d:bf:98:ac:c2:bf:13:57:f8:f6:03:a7:51: 3d:45:92:0c:fa:c0:d6:dd:8f:cb:e9:35:aa:4b:d2:ca:fd:6b: 3e:ef:be:8c:8e:9c:d2:0c:40:a3:71:c6:08:8f:7b:89:52:7f: e3:99:e7:90:1f:d6:14:0c:16:36:ce:b1:da:f5:23:5b:c5:5f: 4c:76:12:da:98:d9:68:a5:37:15:60:3a:ad:f3:ed:63:74:52: bc:52:8f:83:06:d1:f1:db:d1:bc:0c:3f:0e:aa:92:5e:be:5b: e5:b6:7c:7b:bb:d0:4b:88:83:b8:21:74:93:23:c1:11:2d:19: 49:bd:3f:6a:db:ac:0a:ba:cf:00:18:14:47:a1:a0:cb:a7:9e: d7:30:ef:24:27:2a:04:6d:1e:71:a1:cb:39:30:29:ea:83:5a: 3f:32:79:99:99:e4:6f:f6:ef:90:a0:31:5a:12:c3:06:cc:36: cd:15:67:c4:bf:78:8d:06:36:af:d9:aa:f6:8a:16:42:8c:9b: a3:d6:14:89:f2:ed:8b:64:d0:d9:57:7b:d4:0f:54:7f:08:75: 80:4a:4a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+UYGOjiOy6hsugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmY3YzM5ZWItZGU5Yy00ZTQyLTkwY2MtYjI5MGUzZmRmOTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbD/8xPKQG8pP6KJ717iPqEIwaKvNRz2DVYE 83Uuvh0eMMxPv/pwS0AVEqN5WpEyeKbTNqdtwHp7ano4Q0MCIaibSRFFmdgeEVtA 65EmNb+yEnXu4PG/gk4dsiq/+7MD/nfVCu1m8CdnuTleIGQpYcMzeURriwsNuMBV tPka2iRzJywLdoDBWKY1nKwfNENcsLdkue2cxzSeiRw4mTqzHif0bqhjisRojwuY N1LhD+DJUmfJLL6BDDPE2JrzEcgq2H4bQJDMx/YyRo5ez7XRcl56vkWHROEzeN38 wGajMwAvf/CdJfvFXssse3bqSa+r6WNf2++H8/9x2uURdsw73QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq9yyf8nInRAUV33s3kzFPaStWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhlN2YxYTEtZjZlYS0z MTA4LWIwMWQtYjFiYjc4Mzk5NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+HgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjyp0M3XmIpwCdE3ViFeWIUTDzvut8sYGIkI1f4oHFbdwwAanqaWfJO bb+YrMK/E1f49gOnUT1Fkgz6wNbdj8vpNapL0sr9az7vvoyOnNIMQKNxxgiPe4lS f+OZ55Af1hQMFjbOsdr1I1vFX0x2EtqY2WilNxVgOq3z7WN0UrxSj4MG0fHb0bwM Pw6qkl6+W+W2fHu70EuIg7ghdJMjwREtGUm9P2rbrAq6zwAYFEehoMunntcw7yQn KgRtHnGhyzkwKeqDWj8yeZmZ5G/275CgMVoSwwbMNs0VZ8S/eI0GNq/ZqvaKFkKM m6PWFIny7Ytk0NlXe9QPVH8IdYBKSsA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:37:42 2025 by rpki-client