$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed2b5b6-ecc4-3c36-adfa-53432e17c522.roa File: aed2b5b6-ecc4-3c36-adfa-53432e17c522.roa (raw, json) Hash identifier: 1P6mirwqGNs1hBc7QsRj2Ubnl+Ao+UwD0p+W7vGWqG8= Subject key identifier: 48:49:D6:91:72:40:BE:9C:1E:68:91:35:5F:C8:FA:71:0E:8E:29:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC451F01DBEB4BA22323E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed2b5b6-ecc4-3c36-adfa-53432e17c522.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.201.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:51:f0:1d:be:b4:ba:22:32:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=82bc93cd-dffd-4c5a-a97d-9305b2fc74e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:0b:a7:9a:d6:9d:6a:ad:dd:e2:a2:a0:9c: 76:c2:4a:76:a3:34:bb:2a:10:03:8b:9c:5b:02:ef: fe:58:4a:bd:47:c7:7f:c7:ac:d2:ae:8d:ee:68:a0: 39:88:c4:aa:52:92:ad:f9:41:ef:24:4f:a3:1f:68: 79:b9:d2:55:29:80:ca:cd:71:9d:78:5b:49:d7:67: e6:64:9d:fd:5c:c7:89:d0:3b:1a:4d:64:78:b5:97: 97:77:f2:cc:15:41:1a:21:15:a7:f5:17:8f:d2:89: cb:db:47:0d:c6:64:74:f6:a7:ea:65:05:34:6c:2c: bd:77:a0:15:18:5d:ba:9e:6b:db:59:98:16:09:3e: 72:d4:e9:19:5a:57:5d:96:5f:10:f0:62:ec:7a:1b: c9:6c:79:77:d1:cd:fc:e0:c3:e7:de:3a:a2:67:66: eb:93:08:7d:d3:43:c2:fd:24:d6:e9:23:5f:9f:ee: 8d:7a:df:0d:77:35:88:9c:e9:02:d1:77:08:d6:83: 67:cb:fd:85:95:2b:4f:67:02:b9:10:2e:af:a7:b0: 0c:d6:17:85:29:27:69:3e:d8:78:55:cd:d2:38:e8: 77:88:cb:9e:90:e4:3a:26:ff:c5:0b:43:58:7a:0a: 6c:e3:ba:05:d5:ad:c0:83:17:de:1b:b1:55:06:43: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:49:D6:91:72:40:BE:9C:1E:68:91:35:5F:C8:FA:71:0E:8E:29:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed2b5b6-ecc4-3c36-adfa-53432e17c522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:82:2f:ae:57:0e:fe:fc:dd:99:5b:52:ee:45:43:46:84:b3: a1:88:0f:fd:4a:14:73:fd:6a:99:00:e6:9e:e9:24:76:d4:75: 4a:72:eb:81:8c:77:fa:30:10:c9:36:05:09:d2:f7:e6:9d:df: ff:b8:04:e2:f4:10:bd:6d:99:ea:e4:3f:5c:7e:2f:b2:0d:cf: ab:81:be:ab:62:61:8f:ee:2d:c3:46:06:a9:c3:47:0c:0f:9b: 7c:1a:74:57:98:36:a1:e2:9f:36:80:e3:4f:ef:8c:c5:5e:a6: ec:50:ba:f0:22:2c:8e:81:2c:36:bb:2a:c3:81:7e:e8:2c:83: 43:dc:28:f4:2a:4a:54:d5:df:0a:b2:87:42:2a:74:89:c1:6c: 88:6a:26:ca:45:ab:53:42:7b:6f:b0:e7:f4:a3:c0:8c:e3:47: 6a:03:f7:ad:f1:81:a0:d2:e1:1a:fb:29:e7:b0:74:c5:aa:9a: b2:7a:74:30:0a:63:6a:a5:d6:25:7c:85:88:6c:24:b5:ea:fa: f9:d6:90:4d:23:8a:ad:c6:63:95:d6:3b:c1:9a:45:10:e8:7c: 06:be:df:4f:7d:28:86:aa:47:90:22:70:e5:22:1b:82:90:fa: 5e:47:11:f3:00:d8:62:17:e3:c9:ab:fb:fa:14:e4:3a:c0:56: 81:f2:fc:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxFHwHb60uiIyPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODJiYzkzY2QtZGZmZC00YzVhLWE5N2QtOTMwNWIyZmM3NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/cLp5rWnWqt3eKioJx2wkp2ozS7KhADi5xb Au/+WEq9R8d/x6zSro3uaKA5iMSqUpKt+UHvJE+jH2h5udJVKYDKzXGdeFtJ12fm ZJ39XMeJ0DsaTWR4tZeXd/LMFUEaIRWn9ReP0onL20cNxmR09qfqZQU0bCy9d6AV GF26nmvbWZgWCT5y1OkZWlddll8Q8GLsehvJbHl30c384MPn3jqiZ2brkwh900PC /STW6SNfn+6Net8NdzWInOkC0XcI1oNny/2FlStPZwK5EC6vp7AM1heFKSdpPth4 Vc3SOOh3iMuekOQ6Jv/FC0NYegps47oF1a3AgxfeG7FVBkPcxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhJ1pFyQL6cHmiRNV/I+nEOjilMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVkMmI1YjYtZWNjNC0z YzM2LWFkZmEtNTM0MzJlMTdjNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8mYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiCL65XDv783ZlbUu5FQ0aEs6GID/1KFHP9apkA5p7pJHbUdUpy64GM d/owEMk2BQnS9+ad3/+4BOL0EL1tmerkP1x+L7INz6uBvqtiYY/uLcNGBqnDRwwP m3wadFeYNqHinzaA40/vjMVepuxQuvAiLI6BLDa7KsOBfugsg0PcKPQqSlTV3wqy h0IqdInBbIhqJspFq1NCe2+w5/SjwIzjR2oD963xgaDS4Rr7KeewdMWqmrJ6dDAK Y2ql1iV8hYhsJLXq+vnWkE0jiq3GY5XWO8GaRRDofAa+3099KIaqR5AicOUiG4KQ +l5HEfMA2GIX48mr+/oU5DrAVoHy/Eg= -----END CERTIFICATE-----Generated at Sun Aug 24 03:53:17 2025 by rpki-client