$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f9af23-ca76-3f8c-b1ef-518044665cee.roa File: c2f9af23-ca76-3f8c-b1ef-518044665cee.roa (raw, json) Hash identifier: dYr0M90PyO/JG2iUAYD75dTmKGaBo2t82+kGBa15L+c= Subject key identifier: 3F:93:79:5A:47:50:94:0E:80:3C:9A:32:8F:8F:40:E4:46:C7:42:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E7540A86B1A78C5EA240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f9af23-ca76-3f8c-b1ef-518044665cee.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.230.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e7:54:0a:86:b1:a7:8c:5e:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9b178768-4832-42a9-9b44-4e124dc75433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:38:b8:13:de:0f:0c:c4:de:0f:49:b1:03: 25:b3:ba:cb:5b:f8:71:30:45:fa:b9:d6:31:19:dc: bd:82:8b:ae:b6:c0:32:67:dd:ac:20:b5:e6:02:4b: a3:f8:0a:d7:71:6a:34:45:a7:9c:12:19:8b:20:10: 25:a5:03:cd:86:f7:22:86:d6:ab:96:34:30:9f:1c: 73:a9:65:74:3f:6f:cd:5c:6e:8b:87:bb:02:71:d6: 1b:3d:92:62:c9:64:d6:4f:97:28:9f:52:c0:81:c4: b3:1e:c0:38:69:55:7f:be:ae:92:ed:d5:8e:ea:ff: 49:b9:08:e3:5d:01:89:62:af:51:09:e1:9b:5b:78: ac:27:e8:ae:fd:25:5a:32:af:d8:b4:a3:a5:90:07: 39:4e:98:f4:39:32:98:1b:94:06:3f:42:ae:62:fd: 58:b0:56:30:3a:98:85:ab:5b:49:d4:15:2b:82:88: 22:a0:8c:76:7f:b1:36:90:b8:56:b2:1a:ae:8b:b1: 06:54:25:a4:2f:95:1f:38:1c:60:ac:79:45:55:bc: bf:16:12:3e:19:b9:62:4a:2d:ad:19:80:8a:98:5e: 81:36:46:7c:c6:38:1e:b7:ff:6e:52:8d:e2:c2:a8: 30:3c:25:ed:66:8d:29:52:51:f8:33:9a:ff:86:b8: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:93:79:5A:47:50:94:0E:80:3C:9A:32:8F:8F:40:E4:46:C7:42:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2f9af23-ca76-3f8c-b1ef-518044665cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:06:86:55:55:d8:eb:2f:43:01:3c:95:3a:47:69:d1:b7:96: 9d:5a:aa:30:39:b9:8e:b9:c1:54:98:1b:bc:07:03:1e:b1:d6: b3:85:50:f4:e9:aa:3b:99:fe:29:74:c5:87:98:10:65:93:cc: 34:43:69:32:15:f6:b5:dc:58:78:b2:00:23:88:94:4d:af:ca: 9f:e8:d0:6f:f4:8f:53:2e:06:b4:38:82:7e:24:26:4e:e9:2d: 74:4d:aa:48:b8:e1:e1:46:65:a1:31:d3:97:d1:13:43:bd:e4: 01:cb:97:ad:6c:ff:80:b8:8f:11:6c:f1:b6:e6:16:f7:b4:df: a6:99:d6:5c:0c:1e:1a:f3:ad:2b:39:d4:98:bb:10:4e:c0:b7: 2e:64:42:3c:11:e6:60:0a:30:25:38:8c:a3:41:5c:41:98:a7: 2f:dd:ab:d4:d0:80:47:c3:3f:cf:b8:00:dd:91:be:70:e7:af: 03:c2:7a:fb:07:ee:82:0c:19:a9:99:b9:93:85:54:88:d2:17: df:db:50:70:76:a4:e1:97:78:33:6d:45:60:8e:e2:b8:9d:a1: 64:61:60:be:a0:9c:22:72:58:ae:60:1b:9a:44:f2:f6:d5:12: a6:67:ff:8a:a4:2f:7f:8a:31:98:84:12:29:91:77:d5:48:2f: a1:3d:eb:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+dUCoaxp4xeokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWIxNzg3NjgtNDgzMi00MmE5LTliNDQtNGUxMjRkYzc1NDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkog4uBPeDwzE3g9JsQMls7rLW/hxMEX6udYx Gdy9gouutsAyZ92sILXmAkuj+ArXcWo0RaecEhmLIBAlpQPNhvcihtarljQwnxxz qWV0P2/NXG6Lh7sCcdYbPZJiyWTWT5con1LAgcSzHsA4aVV/vq6S7dWO6v9JuQjj XQGJYq9RCeGbW3isJ+iu/SVaMq/YtKOlkAc5Tpj0OTKYG5QGP0KuYv1YsFYwOpiF q1tJ1BUrgogioIx2f7E2kLhWshqui7EGVCWkL5UfOBxgrHlFVby/FhI+GbliSi2t GYCKmF6BNkZ8xjget/9uUo3iwqgwPCXtZo0pUlH4M5r/hrhW0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+TeVpHUJQOgDyaMo+PQORGx0IUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzJmOWFmMjMtY2E3Ni0z ZjhjLWIxZWYtNTE4MDQ0NjY1Y2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+bEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0GhlVV2OsvQwE8lTpHadG3lp1aqjA5uY65wVSYG7wHAx6x1rOFUPTp qjuZ/il0xYeYEGWTzDRDaTIV9rXcWHiyACOIlE2vyp/o0G/0j1MuBrQ4gn4kJk7p LXRNqki44eFGZaEx05fRE0O95AHLl61s/4C4jxFs8bbmFve036aZ1lwMHhrzrSs5 1Ji7EE7Aty5kQjwR5mAKMCU4jKNBXEGYpy/dq9TQgEfDP8+4AN2RvnDnrwPCevsH 7oIMGamZuZOFVIjSF9/bUHB2pOGXeDNtRWCO4ridoWRhYL6gnCJyWK5gG5pE8vbV EqZn/4qkL3+KMZiEEimRd9VIL6E9684= -----END CERTIFICATE-----Generated at Sun Aug 24 01:12:00 2025 by rpki-client