$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fbda3a-a956-374d-9eac-d1011cc53326.roa File: a3fbda3a-a956-374d-9eac-d1011cc53326.roa (raw, json) Hash identifier: NzFdrGEx6c0SFAgziE3iT7l+A5jOpZJ96aJY/mkVS0I= Subject key identifier: B7:4C:39:C8:64:E8:39:6F:A3:47:17:6B:D2:A6:D0:75:41:54:3C:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E5A961A5B87A38BFD880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fbda3a-a956-374d-9eac-d1011cc53326.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.230.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e5:a9:61:a5:b8:7a:38:bf:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=04c9a8cb-759c-4ee8-a6e2-986fd848de84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:1c:e8:73:ed:11:ea:90:8c:10:e5:dd:30: 72:00:ba:fe:38:40:40:05:5d:90:84:b5:31:c4:4f: d1:25:b3:9a:b3:91:f4:a4:ea:8e:f1:8c:62:e6:ff: 5b:8d:ee:79:a6:e6:7a:2b:05:ae:16:40:b0:71:f2: 21:14:84:51:60:42:92:24:2f:86:87:e9:c1:07:47: 22:9a:be:73:54:a6:f7:d4:50:01:19:5f:5a:3c:99: f9:35:fa:17:82:10:c5:39:07:a0:d3:ba:ab:bc:9a: 02:70:e9:46:32:ed:bd:b1:08:20:6e:46:65:31:1f: 08:fd:5d:de:b1:8f:c3:7e:5c:7a:a6:07:19:0a:7b: 3b:79:21:fe:7f:57:d4:3c:e5:76:d3:60:b3:d4:96: b6:bb:fa:9a:68:8c:7d:77:8c:be:23:58:7a:02:99: 68:bb:5a:32:2c:ee:64:d0:2d:e0:62:41:bf:e9:76: 18:53:2d:31:d4:8a:1e:7a:37:f9:1c:db:5b:0d:2e: 7b:88:b3:1a:cf:67:36:5d:fa:65:9a:73:62:4a:84: 2e:86:57:83:44:8f:32:d7:9c:a5:18:61:ab:96:b1: 06:e2:8b:82:63:d3:66:0e:71:68:94:e7:cd:32:2e: bd:dc:b0:41:88:a2:7c:a3:23:d5:2c:7c:47:26:5f: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4C:39:C8:64:E8:39:6F:A3:47:17:6B:D2:A6:D0:75:41:54:3C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3fbda3a-a956-374d-9eac-d1011cc53326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:94:f2:f6:c7:92:2f:e8:13:75:4f:fc:25:a3:1d:f5:82:e4: b6:c4:62:4c:ff:a1:45:66:3f:56:99:1d:b3:5b:a8:22:d8:09: 26:92:74:6a:b1:e4:bb:ea:97:0d:f7:61:08:a9:a7:b3:67:bd: 84:c8:67:17:9e:72:23:74:d0:9e:bc:ab:5e:cb:57:2e:ce:61: 52:22:27:20:89:7a:4e:05:ac:1a:f2:e9:da:c0:e3:47:a6:96: 0d:4a:21:95:92:e3:45:a6:e6:ce:56:3d:64:07:eb:bd:26:fd: 13:b7:d6:ab:00:15:0e:81:36:db:9b:88:16:9c:d4:0c:75:36: d2:f5:ee:e5:7e:1b:85:68:3b:7c:93:bb:11:56:f0:32:b1:5d: d5:d4:76:31:a5:15:65:65:61:5f:82:d1:44:b6:71:4d:74:ab: 51:fe:6b:a9:07:55:94:60:63:e4:b0:41:20:d0:f4:00:59:30: 79:e5:f7:a3:0c:eb:5a:e2:52:26:0b:fd:e1:5e:d8:9c:c0:5c: 2a:66:08:d5:15:a2:c9:1e:a8:c3:6d:af:23:c5:02:dc:b3:e3: 21:98:70:c2:2e:24:d5:8b:e9:58:f6:29:fe:bf:17:3c:3e:76: 7b:01:ab:ef:c9:06:aa:78:18:cd:23:f8:cb:cf:99:04:76:cb: 33:1f:f5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+WpYaW4eji/2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDRjOWE4Y2ItNzU5Yy00ZWU4LWE2ZTItOTg2ZmQ4NDhkZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKUc6HPtEeqQjBDl3TByALr+OEBABV2QhLUx xE/RJbOas5H0pOqO8Yxi5v9bje55puZ6KwWuFkCwcfIhFIRRYEKSJC+Gh+nBB0ci mr5zVKb31FABGV9aPJn5NfoXghDFOQeg07qrvJoCcOlGMu29sQggbkZlMR8I/V3e sY/Dflx6pgcZCns7eSH+f1fUPOV202Cz1Ja2u/qaaIx9d4y+I1h6Aplou1oyLO5k 0C3gYkG/6XYYUy0x1Ioeejf5HNtbDS57iLMaz2c2XfplmnNiSoQuhleDRI8y15yl GGGrlrEG4ouCY9NmDnFolOfNMi693LBBiKJ8oyPVLHxHJl95ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdMOchk6Dlvo0cXa9Km0HVBVDx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNmYmRhM2EtYTk1Ni0z NzRkLTllYWMtZDEwMTFjYzUzMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+YMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2U8vbHki/oE3VP/CWjHfWC5LbEYkz/oUVmP1aZHbNbqCLYCSaSdGqx 5Lvqlw33YQipp7NnvYTIZxeeciN00J68q17LVy7OYVIiJyCJek4FrBry6drA40em lg1KIZWS40Wm5s5WPWQH670m/RO31qsAFQ6BNtubiBac1Ax1NtL17uV+G4VoO3yT uxFW8DKxXdXUdjGlFWVlYV+C0US2cU10q1H+a6kHVZRgY+SwQSDQ9ABZMHnl96MM 61riUiYL/eFe2JzAXCpmCNUVoskeqMNtryPFAtyz4yGYcMIuJNWL6Vj2Kf6/Fzw+ dnsBq+/JBqp4GM0j+MvPmQR2yzMf9fY= -----END CERTIFICATE-----Generated at Sat Aug 23 23:34:36 2025 by rpki-client