$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b396392a-dbc7-3715-aa48-41ae9d8833f4.roa File: b396392a-dbc7-3715-aa48-41ae9d8833f4.roa (raw, json) Hash identifier: vhp7PjonVEgk2qheRrjmDVFrshtEPOAkbwK4ysryO/g= Subject key identifier: 41:AA:D9:82:81:DF:30:E9:1A:5E:CC:FB:F1:CA:7C:90:6A:F0:AB:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC24BB80ADC8233F1B78820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b396392a-dbc7-3715-aa48-41ae9d8833f4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.201.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:4b:b8:0a:dc:82:33:f1:b7:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=588088b8-004f-4a4e-ae53-acf05c69c2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:b3:bf:91:83:eb:c9:5b:3e:bb:20:c2:aa: e9:65:0e:fd:3d:ec:62:93:29:94:f0:4c:c9:ce:4b: 72:d9:d6:e0:ff:21:1e:9a:49:5f:3f:b1:27:b7:30: 65:9b:5b:7e:cb:e2:08:39:5d:a0:23:09:9f:f9:a2: 81:f3:a2:31:f9:13:03:45:17:b2:cf:30:5e:a4:fd: b8:28:42:c3:cf:0e:1b:a6:fc:57:20:16:64:e7:52: e9:a0:9e:10:93:ce:9f:fe:2d:5e:f0:2a:78:2b:df: 21:3a:8c:1a:a5:c6:3f:61:99:1c:63:e5:59:da:3a: ec:7b:51:8b:c8:71:ac:68:f1:c0:6f:17:cb:c1:da: 98:64:1f:5d:11:cb:98:b3:96:20:df:26:7c:37:2f: b8:4e:d0:06:5f:0e:07:11:f5:18:9b:e9:49:78:43: 87:5b:cc:99:f2:d9:37:e0:f9:67:93:6a:d9:1f:0b: f9:a4:c4:50:08:5e:de:34:d7:9d:59:12:84:f0:a4: a0:ed:6d:46:9f:f3:a1:c4:ce:95:99:70:73:1f:35: 26:2b:36:1f:95:06:3a:ae:07:73:66:b3:e3:28:d6: 1f:3a:0b:1a:51:78:2b:8e:55:f5:39:7f:d0:7a:ba: d1:92:32:6d:dc:79:c2:72:46:1b:c7:49:0c:b9:b1: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AA:D9:82:81:DF:30:E9:1A:5E:CC:FB:F1:CA:7C:90:6A:F0:AB:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b396392a-dbc7-3715-aa48-41ae9d8833f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4c:05:d3:c5:30:0a:b6:59:c7:53:65:bc:dd:93:2f:47:d3: f1:f3:46:1c:de:16:50:c0:2f:cc:a6:ec:20:ad:54:a8:cd:12: 69:84:db:57:11:aa:fe:ec:e1:22:6f:e2:42:b3:dd:82:ef:c4: 57:22:59:11:1a:a9:74:85:18:99:3a:52:bd:1a:9d:97:95:55: 2b:28:8b:5a:fa:e9:cb:67:a8:c3:f2:8b:57:bf:1e:2d:00:0f: 75:64:68:87:3c:c9:fd:a7:b5:dd:1d:8a:5d:42:3b:63:33:42: 8f:e9:f1:6f:c7:cc:b9:98:3a:f5:80:bd:30:4e:04:13:2d:12: 43:e5:99:76:bb:78:32:41:38:39:88:02:5d:f3:48:13:4d:8f: 5e:28:ab:87:91:f5:0f:80:6d:1e:74:e9:48:61:5c:07:38:d1: 28:e5:19:ba:a3:7f:0b:d6:01:9f:a1:80:51:d2:dc:76:f0:92: 33:6f:59:21:ce:23:7c:1c:14:b0:16:f3:af:a5:d6:a5:1c:13: 9c:18:ad:68:6d:23:b4:60:41:92:b5:b5:ff:be:e3:35:cf:15: a9:c5:7c:7f:bd:d7:77:04:20:30:a9:46:4c:6e:b2:b9:6a:52: fb:2e:38:a8:2b:69:f5:53:cf:91:39:14:11:e4:14:67:2a:b8: 4d:c4:21:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswku4CtyCM/G3iCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTg4MDg4YjgtMDA0Zi00YTRlLWFlNTMtYWNmMDVjNjljMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjazv5GD68lbPrsgwqrpZQ79PexikymU8EzJ zkty2dbg/yEemklfP7EntzBlm1t+y+IIOV2gIwmf+aKB86Ix+RMDRReyzzBepP24 KELDzw4bpvxXIBZk51LpoJ4Qk86f/i1e8Cp4K98hOowapcY/YZkcY+VZ2jrse1GL yHGsaPHAbxfLwdqYZB9dEcuYs5Yg3yZ8Ny+4TtAGXw4HEfUYm+lJeEOHW8yZ8tk3 4Plnk2rZHwv5pMRQCF7eNNedWRKE8KSg7W1Gn/OhxM6VmXBzHzUmKzYflQY6rgdz ZrPjKNYfOgsaUXgrjlX1OX/QerrRkjJt3HnCckYbx0kMubEe3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGq2YKB3zDpGl7M+/HKfJBq8KuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjM5NjM5MmEtZGJjNy0z NzE1LWFhNDgtNDFhZTlkODgzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8nAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5MBdPFMAq2WcdTZbzdky9H0/HzRhzeFlDAL8ym7CCtVKjNEmmE21cR qv7s4SJv4kKz3YLvxFciWREaqXSFGJk6Ur0anZeVVSsoi1r66ctnqMPyi1e/Hi0A D3VkaIc8yf2ntd0dil1CO2MzQo/p8W/HzLmYOvWAvTBOBBMtEkPlmXa7eDJBODmI Al3zSBNNj14oq4eR9Q+AbR506UhhXAc40SjlGbqjfwvWAZ+hgFHS3HbwkjNvWSHO I3wcFLAW86+l1qUcE5wYrWhtI7RgQZK1tf++4zXPFanFfH+913cEIDCpRkxusrlq UvsuOKgrafVTz5E5FBHkFGcquE3EIcE= -----END CERTIFICATE-----Generated at Sun Aug 24 10:59:29 2025 by rpki-client