$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d2cc556-5a3f-3093-862e-7be1590cd3a4.roa File: 9d2cc556-5a3f-3093-862e-7be1590cd3a4.roa (raw, json) Hash identifier: t+mdTZghSGYIzffUHQBcxLbtfrdBnDO/yVhyFvv7fEM= Subject key identifier: 7A:7D:22:50:55:24:E5:F9:0D:5F:2E:E9:0C:C1:64:16:BC:CE:B2:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBC36620D2B37B28B8F180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d2cc556-5a3f-3093-862e-7be1590cd3a4.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33652 IP address blocks: 71.196.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:c3:66:20:d2:b3:7b:28:b8:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=09133a2e-6420-493a-b23f-dd8acf3d7644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e8:cf:2c:12:20:4c:fa:61:72:bd:e2:10:0b: c8:2d:3c:22:68:c4:b1:1b:ae:c9:42:4a:5e:a8:29: 61:0e:ca:82:6b:52:b5:1d:af:bc:2a:50:aa:e6:a1: b0:3e:14:0f:4b:1d:57:f8:c9:58:11:9e:f4:5e:9b: 96:99:3b:3e:40:21:cf:0e:01:26:6d:38:71:66:8a: a4:1c:aa:99:33:4b:93:e9:8d:ab:8a:09:dd:8f:1e: 89:56:58:48:18:bc:80:d2:04:8b:0a:5f:52:2b:55: 77:8e:8c:c5:5c:8e:37:79:9c:45:07:21:f1:21:ac: cb:66:48:f5:56:1a:e4:12:58:c7:d8:55:e1:36:a8: 02:08:11:91:9f:45:d4:f9:c4:69:ed:ba:f3:a8:36: 2b:03:b3:7b:ad:1f:ef:f9:d0:29:be:ad:39:4d:bc: 58:48:ca:df:f4:bf:c2:7f:af:eb:35:23:46:3e:9e: f6:07:d6:bf:c3:56:95:95:b7:a2:e5:6d:f7:59:21: ed:09:e1:71:f8:ee:45:f9:07:0b:ad:7d:8a:37:fd: 6d:d2:96:58:ac:99:7d:47:49:6a:28:43:4d:00:46: 8f:15:9f:c9:c4:c6:76:00:a7:97:29:b5:a0:4b:80: ac:81:b1:30:4b:2f:90:df:7e:f9:29:4d:23:cc:19: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:22:50:55:24:E5:F9:0D:5F:2E:E9:0C:C1:64:16:BC:CE:B2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d2cc556-5a3f-3093-862e-7be1590cd3a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.196.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:70:e8:cc:9d:08:bb:29:2a:96:1d:3a:f7:44:f6:59:8d:fa: 6d:63:5e:b0:52:d0:f4:d5:8b:db:b3:bd:5e:84:f0:d2:48:70: f8:b8:aa:e9:cd:80:82:ad:1f:89:87:a9:3e:9e:30:1d:de:56: c9:7f:f1:83:99:6b:82:7f:e0:86:db:03:7f:2a:52:79:d5:cb: 1f:c6:3b:23:7b:69:f5:24:d2:8a:14:44:24:18:c1:8f:40:d7: a9:e7:64:89:62:d0:9a:e9:46:18:87:f3:c2:c4:06:a5:17:0e: e8:5e:16:ba:9b:e9:96:24:d3:c2:3d:5f:aa:3e:85:ee:fa:91: 5c:6c:e1:13:ce:3e:dc:4d:30:ca:ed:75:23:bc:c0:ce:71:63: 3a:3b:7b:a0:2f:8f:ae:c6:99:8e:85:6b:80:e3:01:43:c0:0f: f4:23:97:d4:c1:12:57:bd:b5:26:9b:d6:93:3f:15:8d:98:c1: df:0f:d4:0c:a1:23:a8:19:dc:63:30:8a:5e:75:cf:02:2a:32: 72:c3:1e:ac:59:6d:08:36:28:a0:b3:e4:ff:6c:a8:fc:0e:b3: 4b:d9:72:db:41:6c:0e:fe:97:e4:15:0a:fa:4b:10:10:1b:4e: 8d:fc:2f:0c:83:22:90:8b:42:09:a8:6b:f8:e2:40:56:d9:40: e7:81:d4:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+8NmINKzeyi48YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MDkxMzNhMmUtNjQyMC00OTNhLWIyM2YtZGQ4YWNmM2Q3NjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOjPLBIgTPphcr3iEAvILTwiaMSxG67JQkpe qClhDsqCa1K1Ha+8KlCq5qGwPhQPSx1X+MlYEZ70XpuWmTs+QCHPDgEmbThxZoqk HKqZM0uT6Y2rigndjx6JVlhIGLyA0gSLCl9SK1V3jozFXI43eZxFByHxIazLZkj1 VhrkEljH2FXhNqgCCBGRn0XU+cRp7brzqDYrA7N7rR/v+dApvq05TbxYSMrf9L/C f6/rNSNGPp72B9a/w1aVlbei5W33WSHtCeFx+O5F+QcLrX2KN/1t0pZYrJl9R0lq KENNAEaPFZ/JxMZ2AKeXKbWgS4CsgbEwSy+Q3375KU0jzBnP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHp9IlBVJOX5DV8u6QzBZBa8zrIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQyY2M1NTYtNWEzZi0z MDkzLTg2MmUtN2JlMTU5MGNkM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR8SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9w6MydCLspKpYdOvdE9lmN+m1jXrBS0PTVi9uzvV6E8NJIcPi4qunN gIKtH4mHqT6eMB3eVsl/8YOZa4J/4IbbA38qUnnVyx/GOyN7afUk0ooURCQYwY9A 16nnZIli0JrpRhiH88LEBqUXDuheFrqb6ZYk08I9X6o+he76kVxs4RPOPtxNMMrt dSO8wM5xYzo7e6Avj67GmY6Fa4DjAUPAD/Qjl9TBEle9tSab1pM/FY2Ywd8P1Ayh I6gZ3GMwil51zwIqMnLDHqxZbQg2KKCz5P9sqPwOs0vZcttBbA7+l+QVCvpLEBAb To38LwyDIpCLQgmoa/jiQFbZQOeB1No= -----END CERTIFICATE-----Generated at Tue Jul 1 22:18:20 2025 by rpki-client