$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a97cbfb8-a864-3bca-8b90-6d06812a5830.roa File: a97cbfb8-a864-3bca-8b90-6d06812a5830.roa (raw, json) Hash identifier: MV4+zFSxrt0DVj2t1U5/g3RxcH7Ajfny+fJrfF30X80= Subject key identifier: E3:F4:4B:9D:E6:44:1F:24:30:F4:A5:09:5C:59:68:41:EB:F4:04:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC15ECFF6530E463C853700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a97cbfb8-a864-3bca-8b90-6d06812a5830.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 71.195.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:5e:cf:f6:53:0e:46:3c:85:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bce2aff9-46ec-4286-845f-0bba81b5e1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:b1:98:6a:06:35:bc:cb:5e:a6:5a:c5:89: 2c:1e:88:8a:6a:b1:e0:c3:97:57:06:a5:c3:94:93: 3f:c9:42:a1:36:85:94:d3:e7:5b:e5:2b:93:ba:17: ce:97:7e:bf:34:3a:98:98:b6:f2:c3:09:32:8b:9c: 16:17:38:5f:a0:ec:68:85:03:a0:ab:a3:0b:82:b9: 91:c1:7d:e7:74:57:c4:b9:5c:be:f9:63:2e:c3:cf: b4:ff:78:91:2c:60:8b:22:88:92:6d:78:7f:23:cc: 90:7e:e2:6d:bb:27:1b:3c:62:15:3c:a5:af:e1:42: 57:f4:49:f9:eb:1f:13:e0:e6:7b:ac:ca:76:50:ad: 0a:ca:9a:21:15:38:33:26:ef:28:b7:14:b4:4d:e6: 3f:2e:78:2e:ad:92:31:96:c5:5a:db:0c:3b:33:4c: 66:3c:3e:88:f0:e8:a9:f0:a4:72:d5:4e:47:50:53: 9d:10:c9:fe:3a:bb:be:a7:ae:6d:a9:3c:1f:a7:1d: f8:3d:a1:62:01:d0:5c:98:dd:de:02:28:ed:84:6b: 2e:b7:d2:34:a5:fa:cd:d1:dc:a3:e6:4e:25:52:66: 9c:47:84:4d:34:90:4a:62:4f:fa:df:1a:da:ca:43: a8:fd:e6:71:cc:9e:55:99:23:fc:93:8c:18:8e:34: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F4:4B:9D:E6:44:1F:24:30:F4:A5:09:5C:59:68:41:EB:F4:04:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a97cbfb8-a864-3bca-8b90-6d06812a5830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.195.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:6d:65:39:3f:5c:e2:0f:88:71:02:9f:cf:2d:75:d9:73:5e: 96:e2:b7:b7:a2:2e:4a:39:13:b4:00:fa:4a:fd:f2:6c:82:b2: 7c:bd:fa:fa:4e:11:21:98:8b:a1:b3:ac:36:41:eb:99:92:29: 9b:d7:98:bc:d1:64:98:d6:a8:e7:0e:dc:27:60:79:77:3c:92: 46:cf:15:e5:0d:8f:65:4f:72:32:a1:c8:71:fa:a0:d2:c4:15: 1b:93:7f:38:5c:12:e8:2f:aa:68:60:ce:7f:e0:4d:04:0d:51: ae:02:c5:ac:35:df:6b:c5:2b:2e:2e:38:d3:cc:c0:45:64:29: 03:79:6b:94:91:c7:c5:3d:c8:18:0e:b4:c8:9d:5b:72:c8:1c: 93:fd:3b:a4:9a:b1:08:7f:77:7b:55:7e:b9:41:40:38:7e:48: 2a:21:3d:35:72:42:36:26:c8:b8:61:b0:d3:c7:af:7a:73:8e: e5:80:89:d9:f0:93:21:d3:56:fc:ee:de:39:76:7d:2b:b9:2f: b9:f1:98:81:6b:a9:27:a9:8f:97:c0:51:f2:61:a8:08:94:7e: a0:89:ba:ca:d6:1c:56:fb:a9:57:91:9b:53:98:b4:54:d7:6c: 1b:e3:b1:ab:cf:d1:8e:0f:a8:14:32:cc:80:fd:29:43:c2:42: e0:3a:f6:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswV7P9lMORjyFNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmNlMmFmZjktNDZlYy00Mjg2LTg0NWYtMGJiYTgxYjVlMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky2xmGoGNbzLXqZaxYksHoiKarHgw5dXBqXD lJM/yUKhNoWU0+db5SuTuhfOl36/NDqYmLbywwkyi5wWFzhfoOxohQOgq6MLgrmR wX3ndFfEuVy++WMuw8+0/3iRLGCLIoiSbXh/I8yQfuJtuycbPGIVPKWv4UJX9En5 6x8T4OZ7rMp2UK0KypohFTgzJu8otxS0TeY/LngurZIxlsVa2ww7M0xmPD6I8Oip 8KRy1U5HUFOdEMn+Oru+p65tqTwfpx34PaFiAdBcmN3eAijthGsut9I0pfrN0dyj 5k4lUmacR4RNNJBKYk/63xraykOo/eZxzJ5VmSP8k4wYjjS4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP0S53mRB8kMPSlCVxZaEHr9AQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk3Y2JmYjgtYTg2NC0z YmNhLThiOTAtNmQwNjgxMmE1ODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8P4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1tZTk/XOIPiHECn88tddlzXpbit7eiLko5E7QA+kr98myCsny9+vpO ESGYi6GzrDZB65mSKZvXmLzRZJjWqOcO3CdgeXc8kkbPFeUNj2VPcjKhyHH6oNLE FRuTfzhcEugvqmhgzn/gTQQNUa4Cxaw132vFKy4uONPMwEVkKQN5a5SRx8U9yBgO tMidW3LIHJP9O6SasQh/d3tVfrlBQDh+SCohPTVyQjYmyLhhsNPHr3pzjuWAidnw kyHTVvzu3jl2fSu5L7nxmIFrqSepj5fAUfJhqAiUfqCJusrWHFb7qVeRm1OYtFTX bBvjsavP0Y4PqBQyzID9KUPCQuA69mQ= -----END CERTIFICATE-----Generated at Sun Aug 24 01:22:52 2025 by rpki-client