$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa156db5-b750-3364-a111-a96a95c7bee9.roa File: aa156db5-b750-3364-a111-a96a95c7bee9.roa (raw, json) Hash identifier: eySTQRDqo7JiLW/1lToNiZYg8UKiZsLHYVjXXrssMFg= Subject key identifier: 5A:96:26:84:10:8E:CA:31:A7:7C:C2:E5:EA:0A:2F:B0:44:F4:FD:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC248024F4413DC58D11100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa156db5-b750-3364-a111-a96a95c7bee9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.194.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:48:02:4f:44:13:dc:58:d1:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3048a971-6abc-4f5a-bc98-7ad2b746fce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:e3:89:58:38:b0:65:7e:f8:3b:7b:da:f2: 73:e6:fb:0a:0d:01:23:b7:b0:9b:e5:a6:32:12:f8: 2b:02:62:af:32:34:e2:f7:28:fd:23:0c:ec:ac:38: 27:6c:f2:db:c2:d4:f8:a6:b5:27:67:18:5e:09:75: 5b:06:d0:20:53:bf:b0:e0:15:f9:bd:f9:cb:fd:33: a4:12:e7:52:4f:ba:78:9d:78:4d:3f:52:7e:ae:9b: 8a:1c:32:de:99:3b:bd:db:4c:d6:59:72:47:3f:f6: 6a:a5:f4:38:43:a2:bf:eb:c3:3d:20:d9:fc:52:2d: 29:b1:41:72:e3:34:52:2d:9d:c0:f6:03:c2:83:dd: 83:81:65:f2:b5:33:b4:71:ae:ec:a7:b2:a4:6d:11: 5c:ed:39:3b:57:ab:3c:a3:65:6e:00:e9:c4:d9:ac: 9e:41:71:84:d6:c7:4a:c2:76:ea:c9:82:07:b9:a1: 48:32:41:d6:20:7e:01:e3:aa:7e:27:57:0c:af:30: 26:2b:a2:99:36:75:f8:e0:ff:1a:02:32:6d:b8:39: e7:87:bf:b7:5b:74:37:4e:f7:b7:68:fb:eb:67:7d: 6b:2a:d5:24:72:f5:3c:bb:c1:10:3e:4c:4b:4a:c3: 76:8f:7b:0f:07:55:21:b2:cf:0c:30:9e:da:e2:b5: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:96:26:84:10:8E:CA:31:A7:7C:C2:E5:EA:0A:2F:B0:44:F4:FD:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa156db5-b750-3364-a111-a96a95c7bee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a0:c4:3a:1d:17:c2:05:3a:d9:42:f0:88:e0:58:4c:96:3e: 3d:0b:6f:30:90:68:bf:f2:12:a6:d2:45:ef:2f:a0:28:97:36: b0:b9:a5:3a:ca:32:16:a1:f6:7c:25:6a:fc:95:ee:da:08:fc: 27:75:20:15:e2:3a:3f:c2:b7:f0:5f:e1:c8:56:0c:5d:ed:45: 26:8e:48:83:af:d5:c7:63:44:3c:b4:b6:40:49:9f:1e:d3:64: 82:b6:26:85:66:e7:af:3e:9d:b6:f9:d9:97:bf:70:fa:f4:d3: d0:fa:f1:ab:f5:45:a8:53:42:58:49:68:b8:7f:85:02:eb:35: e7:d4:02:ec:ee:51:06:93:74:12:7d:17:ad:67:eb:d8:82:2c: c2:79:58:8e:e6:6e:8b:55:b0:9e:23:13:8a:8a:99:35:df:08: e0:2b:fa:ca:e9:cb:6f:25:51:06:b8:f7:fb:f6:9c:7c:e5:10: ae:ec:08:5c:42:bb:a2:5f:6e:80:f3:df:f6:b1:77:9a:9d:7c: d7:74:49:01:50:77:62:07:46:5d:47:4e:30:ef:32:2e:b9:72: c4:82:5b:4b:11:de:f8:17:a7:ad:8d:6e:fb:a1:b1:47:13:ff: cc:3a:1f:d3:5c:4d:14:de:7a:5e:84:54:25:9e:07:5b:74:88: 90:7d:bf:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswkgCT0QT3FjREQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzA0OGE5NzEtNmFiYy00ZjVhLWJjOTgtN2FkMmI3NDZmY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uPjiVg4sGV++Dt72vJz5vsKDQEjt7Cb5aYy EvgrAmKvMjTi9yj9IwzsrDgnbPLbwtT4prUnZxheCXVbBtAgU7+w4BX5vfnL/TOk EudST7p4nXhNP1J+rpuKHDLemTu920zWWXJHP/ZqpfQ4Q6K/68M9INn8Ui0psUFy 4zRSLZ3A9gPCg92DgWXytTO0ca7sp7KkbRFc7Tk7V6s8o2VuAOnE2ayeQXGE1sdK wnbqyYIHuaFIMkHWIH4B46p+J1cMrzAmK6KZNnX44P8aAjJtuDnnh7+3W3Q3Tve3 aPvrZ31rKtUkcvU8u8EQPkxLSsN2j3sPB1Uhss8MMJ7a4rVsrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqWJoQQjsoxp3zC5eoKL7BE9P2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWExNTZkYjUtYjc1MC0z MzY0LWExMTEtYTk2YTk1YzdiZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8KUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKegxDodF8IFOtlC8IjgWEyWPj0LbzCQaL/yEqbSRe8voCiXNrC5pTrK Mhah9nwlavyV7toI/Cd1IBXiOj/Ct/Bf4chWDF3tRSaOSIOv1cdjRDy0tkBJnx7T ZIK2JoVm568+nbb52Ze/cPr009D68av1RahTQlhJaLh/hQLrNefUAuzuUQaTdBJ9 F61n69iCLMJ5WI7mbotVsJ4jE4qKmTXfCOAr+srpy28lUQa49/v2nHzlEK7sCFxC u6JfboDz3/axd5qdfNd0SQFQd2IHRl1HTjDvMi65csSCW0sR3vgXp62NbvuhsUcT /8w6H9NcTRTeel6EVCWeB1t0iJB9v6w= -----END CERTIFICATE-----Generated at Sat Aug 23 23:25:57 2025 by rpki-client