$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b463ca5a-ca30-3a3c-9045-a94edf3cfea2.roa File: b463ca5a-ca30-3a3c-9045-a94edf3cfea2.roa (raw, json) Hash identifier: 9G4GClyIeStFKvSSnfzCvjtgmxjtD6VzXJbgvsT5hNc= Subject key identifier: C3:B2:EA:E8:16:FC:57:E4:F0:91:E1:CF:7B:7D:D4:07:7C:91:15:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1DA1D66556C34B2C85700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b463ca5a-ca30-3a3c-9045-a94edf3cfea2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.224.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:da:1d:66:55:6c:34:b2:c8:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=551273b1-d175-45f1-8578-6f0182f2dfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:57:4f:d1:84:98:5d:2f:b9:21:7a:12:df: 7b:56:95:04:49:8c:97:c9:d9:c7:fa:9f:ca:98:46: 70:ce:c0:f6:58:13:e7:c4:0f:86:2d:84:17:83:8e: 34:8d:4e:f2:f6:d0:9d:7b:37:d4:ae:da:ca:ec:84: 17:f8:ef:54:bb:63:fb:25:12:f2:b5:5f:15:64:50: 7a:8e:b4:4d:87:e4:76:99:2b:ae:71:7c:83:12:59: bf:f1:c2:9b:40:91:41:39:a7:dd:45:37:df:f1:9c: 48:1d:99:54:6b:6b:00:73:7e:44:2f:59:20:8a:41: 7e:47:1a:a1:61:ed:21:14:60:80:48:72:a1:7f:d1: 29:0b:a2:4d:03:65:38:d9:25:2c:6c:00:56:f1:08: 92:cf:ae:64:58:f2:46:40:d0:95:5f:58:0d:3c:60: 67:c5:84:3f:dd:93:67:4e:b0:d0:fb:9e:56:e3:b1: 07:c8:1d:5b:62:02:c7:40:31:36:8d:66:6b:66:b4: 72:79:38:e8:c7:f6:94:b1:2a:03:19:1b:9a:d0:31: 1c:2c:c1:4d:90:b2:da:62:23:80:17:42:73:e9:ac: e7:e7:87:84:91:ff:9f:2d:38:d6:e7:b9:59:e7:f7: ea:34:86:f8:46:2a:9e:47:77:b6:13:6e:8f:d4:38: 82:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B2:EA:E8:16:FC:57:E4:F0:91:E1:CF:7B:7D:D4:07:7C:91:15:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b463ca5a-ca30-3a3c-9045-a94edf3cfea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:bf:be:26:45:61:5d:0a:b8:6e:6e:a2:13:10:7a:22:f0:6b: a0:06:aa:58:cf:77:9f:7c:58:bc:52:d0:a1:06:72:0a:36:cf: 5a:90:d5:e9:29:26:aa:e8:bd:a1:0a:0f:24:d5:69:77:e0:04: a1:ff:e9:6c:60:d7:3b:90:97:06:d7:dd:c2:ba:5c:4d:f3:14: d3:70:39:22:f4:1a:81:9a:49:9e:87:d4:a2:74:11:c6:b8:26: c7:b8:9c:85:61:13:88:78:62:a5:ce:c0:64:b5:c3:30:57:84: f7:5d:04:03:21:2d:d8:76:cd:db:cf:84:00:46:84:2b:f4:5f: e7:20:92:34:ff:9b:2e:04:3f:10:13:b7:9b:fb:60:74:a2:58: 48:a5:53:ef:69:ef:f0:ef:4e:84:0e:f5:42:a2:3f:2d:41:e6: d0:03:91:15:a6:42:1e:f3:aa:1a:0c:ba:7b:b0:e8:43:fb:44: 05:06:37:a2:72:4b:b1:18:e9:a4:36:74:46:53:53:93:1c:1b: 10:bd:b3:8a:6f:3e:7c:c4:33:ce:21:95:02:e6:fe:80:1b:d2: 62:23:ca:5c:6c:30:af:8a:3e:be:48:87:7a:c3:57:31:5d:ae: ac:c2:97:ba:26:5e:eb:6e:93:ec:7c:87:60:68:d4:3f:06:41: b7:5c:4b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswdodZlVsNLLIVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTUxMjczYjEtZDE3NS00NWYxLTg1NzgtNmYwMTgyZjJkZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq11XT9GEmF0vuSF6Et97VpUESYyXydnH+p/K mEZwzsD2WBPnxA+GLYQXg440jU7y9tCdezfUrtrK7IQX+O9Uu2P7JRLytV8VZFB6 jrRNh+R2mSuucXyDElm/8cKbQJFBOafdRTff8ZxIHZlUa2sAc35EL1kgikF+Rxqh Ye0hFGCASHKhf9EpC6JNA2U42SUsbABW8QiSz65kWPJGQNCVX1gNPGBnxYQ/3ZNn TrDQ+55W47EHyB1bYgLHQDE2jWZrZrRyeTjox/aUsSoDGRua0DEcLMFNkLLaYiOA F0Jz6azn54eEkf+fLTjW57lZ5/fqNIb4RiqeR3e2E26P1DiC4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOy6ugW/Ffk8JHhz3t91Ad8kRWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQ2M2NhNWEtY2EzMC0z YTNjLTkwNDUtYTk0ZWRmM2NmZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+DgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW/viZFYV0KuG5uohMQeiLwa6AGqljPd598WLxS0KEGcgo2z1qQ1ekp JqrovaEKDyTVaXfgBKH/6Wxg1zuQlwbX3cK6XE3zFNNwOSL0GoGaSZ6H1KJ0Eca4 Jse4nIVhE4h4YqXOwGS1wzBXhPddBAMhLdh2zdvPhABGhCv0X+cgkjT/my4EPxAT t5v7YHSiWEilU+9p7/DvToQO9UKiPy1B5tADkRWmQh7zqhoMunuw6EP7RAUGN6Jy S7EY6aQ2dEZTU5McGxC9s4pvPnzEM84hlQLm/oAb0mIjylxsMK+KPr5Ih3rDVzFd rqzCl7omXutuk+x8h2Bo1D8GQbdcS4Q= -----END CERTIFICATE-----Generated at Sun Aug 24 01:13:14 2025 by rpki-client