$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c78aa7d-a40b-382b-942c-7cb30d1e7098.roa File: 9c78aa7d-a40b-382b-942c-7cb30d1e7098.roa (raw, json) Hash identifier: QaSz0yY445iauC9CKCbIOJy/i1v6vQKVuXiQYeX2LVM= Subject key identifier: E0:39:E4:4D:DE:2E:EA:C7:D9:07:90:8A:13:29:B9:05:41:A7:BA:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC44F1E911945D03A5720E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c78aa7d-a40b-382b-942c-7cb30d1e7098.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.194.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:4f:1e:91:19:45:d0:3a:57:20:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=86a14af4-5878-490b-8afa-2d8f8b066f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:71:1a:6d:d2:af:bb:61:3a:c3:90:17:3e: a1:2a:fe:27:e1:c0:05:a8:35:3a:29:cc:5f:ca:06: 5b:e4:c0:8f:e9:88:86:3e:20:f3:f0:af:01:ce:76: 94:be:5a:3f:1d:26:6a:5d:1b:88:aa:1c:9a:44:d3: dd:8f:42:e1:52:07:eb:c8:7e:b9:08:4c:ed:9b:93: a3:ea:62:d3:32:82:bc:a3:f6:2b:5d:ba:3b:24:23: 7f:4e:fe:a7:2a:93:96:f8:5d:ca:d2:50:46:5d:fd: 8c:73:1f:60:0e:6b:4d:33:51:96:16:e0:a6:8a:ab: 96:0b:4a:fd:1b:71:59:c3:fe:c9:54:fb:f5:4a:e6: ab:d4:16:54:9a:86:24:7d:8f:99:33:93:50:c9:14: 29:a1:09:a8:01:f2:53:4e:5c:f8:09:c6:03:d7:ee: 11:2c:25:75:f9:69:7d:e1:60:57:ab:3f:a1:b5:94: 62:97:fc:b7:f2:52:f1:ca:ec:ca:05:b6:7c:bb:4d: 03:9e:32:1c:e2:06:c0:ac:33:6c:f5:22:72:76:fa: 0d:4d:d7:40:34:30:fe:13:64:b5:8e:32:11:29:f9: 97:7f:68:be:fd:f8:40:cf:cf:d7:80:67:69:93:13: 74:d6:9c:86:24:a0:fa:19:51:ef:c5:c9:f0:20:93: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:E4:4D:DE:2E:EA:C7:D9:07:90:8A:13:29:B9:05:41:A7:BA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c78aa7d-a40b-382b-942c-7cb30d1e7098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:b3:5d:47:13:9b:fa:18:58:e5:6e:3c:5c:8b:5a:39:ab:af: 4a:69:1c:68:17:77:71:71:2b:c7:2f:df:6a:6b:b7:e6:14:25: 9f:1f:e3:71:8a:02:06:2f:88:14:df:d1:d0:98:e3:4a:d6:da: 66:a5:85:9f:55:15:42:fa:a6:b6:a1:b6:b1:3c:83:fb:38:94: 72:23:35:e7:54:0d:2c:5a:f9:cb:7e:05:48:cd:10:06:37:42: 92:d5:fb:b0:fb:94:03:19:ec:6b:37:ff:8f:1b:48:ac:90:20: 1c:80:7f:6b:0a:56:55:fc:6c:40:7b:4a:46:59:84:b8:0f:5e: 03:ec:da:3e:1e:27:a2:0a:09:f9:7c:6c:33:02:f4:b7:18:11: c3:d0:b2:e7:91:c7:e5:21:f4:a9:3e:e9:6b:19:89:f5:f5:7a: 58:aa:60:0f:06:1f:b2:3e:f7:25:8e:54:cc:5a:1e:4b:03:32: 98:03:48:42:05:36:a9:f2:35:5a:0e:e6:05:c2:16:8a:50:cb: 15:6b:25:8c:05:6d:c8:1b:03:38:85:42:e4:dd:cf:fd:40:fd: 55:a7:f6:7f:f2:eb:a5:f9:af:5e:e3:ae:76:d8:94:55:5a:5d: 21:11:2c:67:a6:b8:84:93:44:96:8a:e5:0c:e6:30:8b:1e:2a: b5:2a:87:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxE8ekRlF0DpXIOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODZhMTRhZjQtNTg3OC00OTBiLThhZmEtMmQ4ZjhiMDY2ZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04lxGm3Sr7thOsOQFz6hKv4n4cAFqDU6Kcxf ygZb5MCP6YiGPiDz8K8BznaUvlo/HSZqXRuIqhyaRNPdj0LhUgfryH65CEztm5Oj 6mLTMoK8o/YrXbo7JCN/Tv6nKpOW+F3K0lBGXf2Mcx9gDmtNM1GWFuCmiquWC0r9 G3FZw/7JVPv1Suar1BZUmoYkfY+ZM5NQyRQpoQmoAfJTTlz4CcYD1+4RLCV1+Wl9 4WBXqz+htZRil/y38lLxyuzKBbZ8u00DnjIc4gbArDNs9SJydvoNTddANDD+E2S1 jjIRKfmXf2i+/fhAz8/XgGdpkxN01pyGJKD6GVHvxcnwIJMaCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA55E3eLurH2QeQihMpuQVBp7rMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWM3OGFhN2QtYTQwYi0z ODJiLTk0MmMtN2NiMzBkMWU3MDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8JwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANSzXUcTm/oYWOVuPFyLWjmrr0ppHGgXd3FxK8cv32prt+YUJZ8f43GK AgYviBTf0dCY40rW2malhZ9VFUL6prahtrE8g/s4lHIjNedUDSxa+ct+BUjNEAY3 QpLV+7D7lAMZ7Gs3/48bSKyQIByAf2sKVlX8bEB7SkZZhLgPXgPs2j4eJ6IKCfl8 bDMC9LcYEcPQsueRx+Uh9Kk+6WsZifX1eliqYA8GH7I+9yWOVMxaHksDMpgDSEIF NqnyNVoO5gXCFopQyxVrJYwFbcgbAziFQuTdz/1A/VWn9n/y66X5r17jrnbYlFVa XSERLGemuISTRJaK5QzmMIseKrUqhzI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:07:24 2025 by rpki-client