$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2271ec4-9603-3a1c-a7bc-72ea2ea6d7dd.roa File: b2271ec4-9603-3a1c-a7bc-72ea2ea6d7dd.roa (raw, json) Hash identifier: UgSf1yWk+G+FHWpGJuy6UX8OkLZNoCetl+X7FAz7VGM= Subject key identifier: 98:8E:81:CD:E4:3D:FA:09:52:B7:01:B3:F5:AE:A6:94:5A:1E:F2:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC24C317B4D02C5673EB280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2271ec4-9603-3a1c-a7bc-72ea2ea6d7dd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.201.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:4c:31:7b:4d:02:c5:67:3e:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=32f64a7a-7a79-4a26-b031-a0c90ce0d6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:5f:03:60:9a:56:25:b5:d9:2e:28:88:f9: ff:da:fd:8a:b5:a1:e6:19:47:1d:01:67:25:8a:89: 4b:c0:a4:de:ee:8e:a3:29:6c:68:ac:fe:07:67:ef: 0f:f8:08:0e:f1:30:65:22:45:1c:f6:00:9f:09:68: 5b:82:8b:e6:fa:a1:1f:f9:f4:a7:57:c0:08:eb:c5: 64:c9:5e:52:a9:6a:20:6e:53:25:0e:4d:e6:a8:67: f4:fa:03:1a:9b:b1:4d:d1:7d:da:a0:0a:26:83:19: 85:af:66:00:43:0a:00:23:40:10:b4:c5:d1:0b:91: 46:40:b2:22:1b:39:f2:96:a7:cd:fb:8c:0a:ce:b7: 79:e7:a3:3f:e2:7e:36:29:cc:70:9e:3b:87:13:34: 0f:b0:0f:51:21:18:61:1a:65:4e:e0:6e:3c:39:b7: d3:44:55:11:67:ac:ce:e2:e4:8e:61:01:86:b6:03: 79:a1:2f:60:1b:b3:36:99:93:79:c1:46:98:1c:21: 40:05:71:3c:2c:95:09:ec:ed:9c:75:25:c6:be:d9: 8e:bb:4e:b0:1d:d0:9b:ea:91:71:27:03:05:bc:07: b9:f2:73:a0:6b:b5:8a:75:75:7b:8c:f4:ee:ca:4b: 77:69:f5:bd:1d:34:db:74:5e:25:af:c0:44:73:dc: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8E:81:CD:E4:3D:FA:09:52:B7:01:B3:F5:AE:A6:94:5A:1E:F2:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2271ec4-9603-3a1c-a7bc-72ea2ea6d7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:83:b7:37:bc:71:7b:8e:2a:c4:37:03:e1:ff:78:91:f3:b2: 3d:a5:19:c4:46:77:b7:82:80:5c:ae:2c:90:2d:b1:0c:31:bd: 53:e2:3f:76:73:50:24:fb:1b:70:12:33:ba:2c:1e:26:ca:20: 86:7a:61:5d:51:b6:34:a5:2c:aa:31:7d:9b:45:7c:20:34:59: b5:8d:61:af:a1:07:d2:93:6f:0d:62:48:29:29:8a:ec:08:d1: e2:c5:13:e0:16:12:21:d6:d8:0a:fc:c4:fa:c0:2b:f6:88:59: ff:6b:b7:12:c0:b4:bf:57:c5:6d:be:d9:3f:ff:7c:8b:ce:57: b8:f1:1e:d3:22:57:82:87:47:f9:c2:cb:2f:aa:36:fc:52:7f: dd:b0:ad:d0:9c:58:da:ae:d7:38:e6:46:d0:93:92:18:0c:4b: 4d:12:4a:6b:85:a2:99:e2:77:c5:48:c9:57:93:b6:9d:50:b5: 32:47:60:4a:d0:8e:5c:40:ca:83:7d:95:6e:40:16:d6:be:ce: 2d:1e:ff:66:1d:4d:f6:b9:fe:d7:be:f7:69:84:1a:df:5b:2d: 48:cc:50:3e:42:76:93:35:b8:81:06:26:93:17:38:bc:6d:07: be:6a:86:f7:8a:96:74:a1:45:e9:d0:3c:84:db:ce:75:f1:d8: 49:e0:b5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswkwxe00CxWc+soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzJmNjRhN2EtN2E3OS00YTI2LWIwMzEtYTBjOTBjZTBkNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5NfA2CaViW12S4oiPn/2v2KtaHmGUcdAWcl iolLwKTe7o6jKWxorP4HZ+8P+AgO8TBlIkUc9gCfCWhbgovm+qEf+fSnV8AI68Vk yV5SqWogblMlDk3mqGf0+gMam7FN0X3aoAomgxmFr2YAQwoAI0AQtMXRC5FGQLIi GznylqfN+4wKzrd556M/4n42KcxwnjuHEzQPsA9RIRhhGmVO4G48ObfTRFURZ6zO 4uSOYQGGtgN5oS9gG7M2mZN5wUaYHCFABXE8LJUJ7O2cdSXGvtmOu06wHdCb6pFx JwMFvAe58nOga7WKdXV7jPTuykt3afW9HTTbdF4lr8BEc9z6QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiOgc3kPfoJUrcBs/WuppRaHvKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIyNzFlYzQtOTYwMy0z YTFjLWE3YmMtNzJlYTJlYTZkN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACDtze8cXuOKsQ3A+H/eJHzsj2lGcRGd7eCgFyuLJAtsQwxvVPiP3Zz UCT7G3ASM7osHibKIIZ6YV1RtjSlLKoxfZtFfCA0WbWNYa+hB9KTbw1iSCkpiuwI 0eLFE+AWEiHW2Ar8xPrAK/aIWf9rtxLAtL9XxW2+2T//fIvOV7jxHtMiV4KHR/nC yy+qNvxSf92wrdCcWNqu1zjmRtCTkhgMS00SSmuFopnid8VIyVeTtp1QtTJHYErQ jlxAyoN9lW5AFta+zi0e/2YdTfa5/te+92mEGt9bLUjMUD5CdpM1uIEGJpMXOLxt B75qhveKlnShRenQPITbznXx2EngtSs= -----END CERTIFICATE-----Generated at Sat Aug 23 23:14:05 2025 by rpki-client