$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9edab825-f85f-3e0a-80a8-0383bcb18042.roa File: 9edab825-f85f-3e0a-80a8-0383bcb18042.roa (raw, json) Hash identifier: Y4DuXdrpzAMrp8iX9SxDeNQKeD6LyU9X0E+W4KN1gfE= Subject key identifier: B5:B8:47:1E:46:59:61:69:87:EA:CD:B2:BC:CA:F0:C7:A2:3E:53:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC35F2DA7E9D10433568C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9edab825-f85f-3e0a-80a8-0383bcb18042.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 71.195.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:5f:2d:a7:e9:d1:04:33:56:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9c12ef26-bcc8-42cf-8dc0-3a2fd987f46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:8f:96:82:8d:af:c2:3d:c1:4c:dd:01:e8: ee:e1:08:a4:b3:5a:b3:b9:5a:6f:f7:68:2d:56:1b: f1:ed:f7:2c:49:b1:90:5f:31:02:73:73:99:0c:bf: 29:7c:0c:9e:29:85:47:31:e3:95:b7:2c:8e:10:ca: 28:96:9b:73:b8:79:3b:db:79:5e:cd:a9:03:a6:ef: fd:09:83:4e:29:f5:36:9c:da:ec:f1:0a:0f:40:c3: ca:8d:a6:66:78:86:5d:73:fe:28:7d:28:85:d2:c6: 9e:20:60:6f:b9:d5:47:0c:aa:52:c7:2c:69:3b:0f: 30:b5:00:4f:57:6c:86:19:7e:d7:03:3c:1e:3a:94: 5e:bf:f3:80:82:56:eb:58:a6:bd:7b:a6:72:44:5e: b8:ee:18:1f:eb:8f:84:65:4e:c4:8f:68:19:93:97: 41:52:6f:4d:1c:04:11:6b:b6:31:3d:84:4e:32:fb: eb:d6:cb:1c:9d:6c:71:37:27:9a:9e:bf:0d:0b:40: 87:98:64:07:9f:a8:0b:62:4d:77:bf:73:34:36:cd: c7:39:37:56:27:1a:39:99:19:27:4d:dd:2a:53:f8: 65:4e:36:37:e2:e6:dd:27:b3:ed:75:b8:aa:f6:21: a1:ad:18:5e:cb:d1:67:bc:a7:0a:45:2a:e7:fd:25: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B8:47:1E:46:59:61:69:87:EA:CD:B2:BC:CA:F0:C7:A2:3E:53:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9edab825-f85f-3e0a-80a8-0383bcb18042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.195.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d0:93:03:65:ff:6c:dc:d0:4d:c5:0f:e2:d7:e1:2c:9e:43: 87:70:09:0d:ff:f6:e5:97:cd:4b:7d:7d:41:2a:8b:4f:dd:6b: 6e:73:a6:b1:07:aa:b6:5d:6b:a3:77:7e:0c:28:93:b6:f5:42: 5a:d1:97:c7:b2:9c:51:58:32:56:80:88:a6:00:67:29:e7:77: 15:35:83:ba:92:7a:d9:40:36:51:fd:e3:70:68:69:15:96:bb: 0e:86:42:cc:8e:67:c9:cf:53:d7:e0:cd:ea:ea:0c:64:5b:53: 3c:d4:35:2e:cb:cc:ef:2d:be:63:3d:3b:eb:71:f4:b0:8f:ba: 1e:4f:25:42:95:86:04:52:ff:ce:ec:14:d8:49:54:bb:20:e8: 2f:aa:e9:6a:8e:eb:19:0a:04:3b:9b:86:8e:5f:07:36:a4:f5: d9:7e:39:be:35:bb:de:50:42:5a:57:f8:4d:49:dd:c3:e4:e2: d1:9a:ba:98:fa:02:fd:27:47:a5:21:5b:96:0c:3b:cd:fa:71: 10:07:b7:b0:8d:0f:54:cd:e1:05:fc:a8:bd:f4:ff:20:54:2c: 27:88:ec:7e:84:76:fb:47:74:9f:21:76:dc:99:c2:a5:63:2a: a4:e8:af:46:87:5d:43:bd:bb:cb:35:0f:48:3b:de:bc:f2:2a: 20:64:70:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw18tp+nRBDNWjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWMxMmVmMjYtYmNjOC00MmNmLThkYzAtM2EyZmQ5ODdmNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiriPloKNr8I9wUzdAeju4Qiks1qzuVpv92gt Vhvx7fcsSbGQXzECc3OZDL8pfAyeKYVHMeOVtyyOEMoolptzuHk723lezakDpu/9 CYNOKfU2nNrs8QoPQMPKjaZmeIZdc/4ofSiF0saeIGBvudVHDKpSxyxpOw8wtQBP V2yGGX7XAzweOpRev/OAglbrWKa9e6ZyRF647hgf64+EZU7Ej2gZk5dBUm9NHAQR a7YxPYROMvvr1sscnWxxNyeanr8NC0CHmGQHn6gLYk13v3M0Ns3HOTdWJxo5mRkn Td0qU/hlTjY34ubdJ7Ptdbiq9iGhrRhey9FnvKcKRSrn/SUs5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW4Rx5GWWFph+rNsrzK8MeiPlNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWVkYWI4MjUtZjg1Zi0z ZTBhLTgwYTgtMDM4M2JjYjE4MDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8PuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTQkwNl/2zc0E3FD+LX4SyeQ4dwCQ3/9uWXzUt9fUEqi0/da25zprEH qrZda6N3fgwok7b1QlrRl8eynFFYMlaAiKYAZynndxU1g7qSetlANlH943BoaRWW uw6GQsyOZ8nPU9fgzerqDGRbUzzUNS7LzO8tvmM9O+tx9LCPuh5PJUKVhgRS/87s FNhJVLsg6C+q6WqO6xkKBDubho5fBzak9dl+Ob41u95QQlpX+E1J3cPk4tGaupj6 Av0nR6UhW5YMO836cRAHt7CND1TN4QX8qL30/yBULCeI7H6EdvtHdJ8hdtyZwqVj KqTor0aHXUO9u8s1D0g73rzyKiBkcHw= -----END CERTIFICATE-----Generated at Sat Aug 23 22:59:21 2025 by rpki-client