$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9d019a-700d-31af-b8ce-d7512ca461f3.roa File: 9f9d019a-700d-31af-b8ce-d7512ca461f3.roa (raw, json) Hash identifier: M+DhaXepaTYxQac1iJkAmGr7a2vdwyLO6ikT9TIoa5I= Subject key identifier: 29:87:14:7E:4A:15:6F:3C:FF:86:DE:43:29:D6:8D:95:E9:29:91:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F8A6B9F6A6CA0D9EA5A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9d019a-700d-31af-b8ce-d7512ca461f3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.202.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f8:a6:b9:f6:a6:ca:0d:9e:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ccdb0e47-7f0e-4d71-a492-32bb0c3a28b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:e8:80:57:c7:f0:b2:86:bc:d6:15:b5:c9: cd:6b:99:8e:bf:16:4f:cb:28:40:22:a2:d0:7c:1e: d4:c0:ff:50:fc:21:f6:62:b7:ce:ae:32:0d:95:60: 1a:c7:f0:0e:1b:58:5d:44:71:a3:4e:a3:e0:b3:69: 8f:fa:c6:d4:9e:5e:2f:a4:a0:eb:54:35:db:87:b1: c9:21:b1:83:c2:5b:ba:f7:5b:63:18:a1:2a:e4:60: e0:69:6c:c5:ae:25:d4:2f:24:ca:23:36:cb:a3:be: 72:04:31:c8:8d:4c:ce:a1:74:72:1c:99:3d:a9:a7: f2:90:1d:da:bb:3b:be:1c:cb:b7:d4:32:a4:94:54: 53:84:b1:65:f9:82:4b:15:18:bb:5e:33:af:e7:9c: 12:9c:05:ea:56:fa:db:c5:8b:e8:73:20:a0:6e:93: 23:85:74:6a:0d:65:86:34:59:ed:59:3c:78:83:6d: b3:27:ad:c5:92:dd:50:48:7d:33:19:07:42:ba:88: 69:89:54:00:3c:b2:50:3b:87:c7:07:10:f5:5e:4a: da:63:79:99:21:3c:40:3c:a5:bc:1b:99:d3:66:d3: 4c:07:9c:5c:25:c5:92:21:cb:84:e3:96:e5:67:64: d2:bb:54:3f:2e:24:5d:06:b6:de:44:a8:62:44:b0: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:14:7E:4A:15:6F:3C:FF:86:DE:43:29:D6:8D:95:E9:29:91:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9d019a-700d-31af-b8ce-d7512ca461f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:6b:33:9b:57:96:26:6b:d7:84:48:83:c5:c8:cd:34:8b:f3: 76:f9:6a:5d:7b:62:1d:4b:bb:77:27:98:47:51:ae:72:fa:02: 20:ab:f9:7e:6c:25:cf:bf:ae:fb:0f:63:0a:73:6b:76:98:18: 92:05:43:e0:45:77:7b:3b:c4:14:77:a4:ef:0a:f5:17:c6:46: 98:9b:19:e1:df:d4:fd:08:41:14:b6:35:9e:17:ae:17:e2:4c: 17:90:1e:21:de:cf:3d:44:b2:c2:28:1e:d8:35:25:77:aa:65: 46:bc:31:ff:0b:a8:51:aa:b9:47:d3:76:3e:5c:21:9f:9c:57: f5:cf:8a:b1:b9:70:50:c6:91:71:e6:c1:30:88:b8:6a:05:2e: 28:3e:3c:79:a2:62:7b:5e:56:3e:05:ed:21:bc:10:c0:5d:f7: 7b:46:53:a7:c0:fd:14:e6:b9:0e:4c:4e:15:cb:57:ab:ca:0d: 66:18:96:f9:4b:79:99:50:a4:d7:67:58:64:35:94:7b:93:14: b3:54:e8:38:36:b4:17:12:2f:8a:a8:34:5c:19:ab:f3:1d:b0: ba:5c:89:a6:53:8a:e9:e1:f8:5e:9d:3b:ab:81:87:21:b2:b1: 48:76:fb:f1:dd:7b:37:0d:a1:21:a6:fe:3e:6f:d5:f9:ee:8a: 8b:74:3c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvimufamyg2epaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2NkYjBlNDctN2YwZS00ZDcxLWE0OTItMzJiYjBjM2EyOGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC/ogFfH8LKGvNYVtcnNa5mOvxZPyyhAIqLQ fB7UwP9Q/CH2YrfOrjINlWAax/AOG1hdRHGjTqPgs2mP+sbUnl4vpKDrVDXbh7HJ IbGDwlu691tjGKEq5GDgaWzFriXULyTKIzbLo75yBDHIjUzOoXRyHJk9qafykB3a uzu+HMu31DKklFRThLFl+YJLFRi7XjOv55wSnAXqVvrbxYvocyCgbpMjhXRqDWWG NFntWTx4g22zJ63Fkt1QSH0zGQdCuohpiVQAPLJQO4fHBxD1XkraY3mZITxAPKW8 G5nTZtNMB5xcJcWSIcuE45blZ2TSu1Q/LiRdBrbeRKhiRLCeWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmHFH5KFW88/4beQynWjZXpKZGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY5ZDAxOWEtNzAwZC0z MWFmLWI4Y2UtZDc1MTJjYTQ2MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8oEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBrM5tXliZr14RIg8XIzTSL83b5al17Yh1Lu3cnmEdRrnL6AiCr+X5s Jc+/rvsPYwpza3aYGJIFQ+BFd3s7xBR3pO8K9RfGRpibGeHf1P0IQRS2NZ4Xrhfi TBeQHiHezz1EssIoHtg1JXeqZUa8Mf8LqFGquUfTdj5cIZ+cV/XPirG5cFDGkXHm wTCIuGoFLig+PHmiYnteVj4F7SG8EMBd93tGU6fA/RTmuQ5MThXLV6vKDWYYlvlL eZlQpNdnWGQ1lHuTFLNU6Dg2tBcSL4qoNFwZq/MdsLpciaZTiunh+F6dO6uBhyGy sUh2+/HdezcNoSGm/j5v1fnuiot0PL0= -----END CERTIFICATE-----Generated at Sun Aug 24 01:37:32 2025 by rpki-client