$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c711c2f0-03e5-3a14-8971-e483439f058f.roa File: c711c2f0-03e5-3a14-8971-e483439f058f.roa (raw, json) Hash identifier: KYCs2zMsRuVEGMgyHP+/s3dJRtg6OVmN33daV5mO+mQ= Subject key identifier: DD:87:1B:F1:BA:14:0E:ED:D4:64:5B:D5:D7:0F:4A:54:9F:51:A7:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4565AF2B531663E67EA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c711c2f0-03e5-3a14-8971-e483439f058f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.57.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:56:5a:f2:b5:31:66:3e:67:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=35bd9cb7-5f73-4fc6-bbb2-93a2c7125a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:6b:c7:d3:36:95:ae:d4:17:f9:67:2c:94: f5:43:b7:4e:7a:16:73:23:93:d5:e7:3e:b1:3f:2a: 23:c5:fd:0e:bc:b4:13:ce:e3:e1:6d:02:ea:83:f6: f5:b9:7b:a7:21:fd:3b:16:81:f9:2c:11:46:1b:fb: 12:fb:31:92:41:a3:01:68:8a:9a:08:e9:ac:db:f6: 0f:60:05:f4:5b:86:8b:f8:fe:6e:dc:2c:5d:87:8c: 68:1f:51:ba:e8:4f:9b:6b:13:d7:16:a3:e5:2a:a6: 6d:8f:93:8a:95:99:aa:29:a6:ec:4b:8a:ee:50:02: 32:5a:13:8c:83:f0:ac:c1:ac:55:33:49:b5:65:da: 1c:c9:12:7c:7e:1e:dd:a5:2c:b7:f6:d6:44:7b:db: e6:1b:b0:28:f8:33:68:c6:58:4d:a6:a4:2e:5c:ed: d7:fb:35:a6:bb:bb:29:9a:f7:cf:91:b7:54:a5:54: a0:ab:12:ff:fa:3a:9a:92:ab:d0:ad:ad:a4:b9:f6: 7f:da:38:62:9b:fa:df:ab:16:33:25:11:df:fa:cb: 75:a4:75:58:3a:22:2d:0e:0d:78:8b:73:53:94:1e: 9d:d5:b9:ae:8a:cf:27:f1:c3:a1:c9:4e:89:9d:bd: 01:5c:a8:83:8b:67:79:b2:7d:1d:c6:c6:85:26:33: 06:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:1B:F1:BA:14:0E:ED:D4:64:5B:D5:D7:0F:4A:54:9F:51:A7:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c711c2f0-03e5-3a14-8971-e483439f058f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:87:05:c6:1d:fd:67:52:33:45:c5:0f:81:d8:be:43:7a:a9: b3:72:2e:f7:a2:08:cf:c3:80:b4:62:1f:c6:e2:35:84:8c:6b: 7f:fb:ba:6f:5d:73:d5:79:cd:36:dd:02:82:99:6a:4a:76:33: ca:ae:07:20:ae:65:88:d0:5e:2c:b3:e6:07:a1:fa:a4:50:f2: d3:ad:f3:4d:ad:59:3e:e6:31:f2:0f:27:a7:c7:af:89:93:20: 1e:6b:4f:a3:ec:29:d3:48:cf:70:ed:0d:96:cf:a9:1c:17:70: d7:b1:ed:93:9a:e5:af:86:3e:e4:f0:30:31:07:78:f3:ab:13: e2:99:5f:8a:33:e8:8c:b3:93:03:aa:b5:58:d3:02:79:44:f9: 55:2a:d3:aa:ae:e4:1e:41:13:08:c0:60:23:ee:87:f9:da:53: 3b:42:16:ee:2a:43:e5:ee:a5:43:3c:07:c5:6c:c5:80:8f:d1: d7:94:7e:98:5f:5c:3e:82:55:50:2b:8e:f6:d6:da:dd:b4:1c: 5f:e5:01:78:ed:ae:4b:3b:23:f3:9d:34:66:fa:ef:26:cd:59: 98:99:52:be:54:13:96:98:41:fa:df:cf:c8:bc:2f:b5:bb:b5: ef:ce:97:18:93:8f:78:89:5e:01:0e:2b:3f:ac:61:e3:62:64: 6b:02:15:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxFZa8rUxZj5n6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzViZDljYjctNWY3My00ZmM2LWJiYjItOTNhMmM3MTI1YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPxrx9M2la7UF/lnLJT1Q7dOehZzI5PV5z6x Pyojxf0OvLQTzuPhbQLqg/b1uXunIf07FoH5LBFGG/sS+zGSQaMBaIqaCOms2/YP YAX0W4aL+P5u3Cxdh4xoH1G66E+baxPXFqPlKqZtj5OKlZmqKabsS4ruUAIyWhOM g/CswaxVM0m1ZdocyRJ8fh7dpSy39tZEe9vmG7Ao+DNoxlhNpqQuXO3X+zWmu7sp mvfPkbdUpVSgqxL/+jqakqvQra2kufZ/2jhim/rfqxYzJRHf+st1pHVYOiItDg14 i3NTlB6d1bmuis8n8cOhyU6Jnb0BXKiDi2d5sn0dxsaFJjMGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2HG/G6FA7t1GRb1dcPSlSfUadaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzcxMWMyZjAtMDNlNS0z YTE0LTg5NzEtZTQ4MzQzOWYwNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyHBcYd/WdSM0XFD4HYvkN6qbNyLveiCM/DgLRiH8biNYSMa3/7um9d c9V5zTbdAoKZakp2M8quByCuZYjQXiyz5geh+qRQ8tOt802tWT7mMfIPJ6fHr4mT IB5rT6PsKdNIz3DtDZbPqRwXcNex7ZOa5a+GPuTwMDEHePOrE+KZX4oz6IyzkwOq tVjTAnlE+VUq06qu5B5BEwjAYCPuh/naUztCFu4qQ+XupUM8B8VsxYCP0deUfphf XD6CVVArjvbW2t20HF/lAXjtrks7I/OdNGb67ybNWZiZUr5UE5aYQfrfz8i8L7W7 te/OlxiTj3iJXgEOKz+sYeNiZGsCFew= -----END CERTIFICATE-----Generated at Sun Aug 24 09:34:01 2025 by rpki-client