$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d173893c-6b0e-38d2-b86a-44deede8935d.roa File: d173893c-6b0e-38d2-b86a-44deede8935d.roa (raw, json) Hash identifier: yooQmkZ4gFyTGhU4yWuVeG/u6V+xmFS6zAJiq0QFpog= Subject key identifier: A8:3B:0B:0A:85:2C:2A:70:60:D7:0C:46:33:88:CB:B0:F7:17:9B:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5111E1A159124DA804E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d173893c-6b0e-38d2-b86a-44deede8935d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.198.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:11:1e:1a:15:91:24:da:80:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3d15f07d-f634-436f-9107-b0e0e9abcd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:bd:d3:bd:46:06:9d:3f:b7:cd:a9:5a:40: d2:fd:bf:41:f8:87:6f:7a:4d:21:8f:70:22:5a:04: 92:cd:00:01:ef:1d:c0:f6:01:9d:15:cb:fa:7c:ed: ee:1c:32:18:04:8e:31:23:5e:30:46:7a:9f:4c:e0: 01:6e:3c:22:1f:90:e5:8c:b1:49:6e:1f:b8:c3:01: ec:e5:2e:c1:32:44:25:cd:09:5c:af:31:4a:12:3f: 16:eb:3e:e6:ca:69:0b:bf:f8:71:5a:27:5e:e5:50: d9:07:dd:ee:70:6b:f3:43:b0:8a:52:65:32:49:fe: da:0a:7a:0b:c2:df:88:b8:27:78:2f:ae:13:2c:6a: 49:58:60:b8:b3:43:44:c5:fe:4e:ee:99:46:02:7f: 85:7f:6a:26:2c:7b:e2:28:2e:93:8c:5d:8a:d2:3f: be:3b:76:a3:93:56:50:9e:ed:c4:86:5d:78:15:bd: f7:66:ea:74:06:b9:ae:f2:84:16:2e:f6:c1:f0:19: eb:43:73:6a:20:ad:2d:3a:4f:0f:0d:4b:cc:db:32: f0:0e:4e:ac:cd:fd:20:2a:c4:62:83:e2:c0:a5:95: 38:89:0e:73:d1:c0:8a:7f:69:30:b8:d2:ce:dc:9e: cb:e7:dd:2d:0c:b8:2f:4e:31:25:e9:5e:50:a9:6d: f4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3B:0B:0A:85:2C:2A:70:60:D7:0C:46:33:88:CB:B0:F7:17:9B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d173893c-6b0e-38d2-b86a-44deede8935d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:c9:eb:24:a1:2a:b6:4c:01:ae:db:22:3b:1a:e0:96:22:44: 67:db:97:6c:18:2f:08:de:8d:fb:3d:c9:99:6e:39:ab:5b:29: fe:33:21:67:52:55:38:55:50:15:51:41:9a:01:80:5f:f8:68: ea:58:dc:98:0e:fd:85:2a:63:da:55:00:17:ba:cf:ff:de:0c: fb:f6:41:08:49:07:d7:27:82:17:45:08:57:ae:8b:5d:5f:6c: 3b:d6:33:48:84:bb:6a:a4:ce:04:19:5e:74:4b:b7:e4:7e:b1: e8:33:62:8c:d2:19:51:c0:c8:2b:94:6a:f1:b7:06:02:a0:a3: 1a:e2:a5:5b:79:37:55:76:aa:95:0b:8f:f8:50:7c:c6:ea:24: 6d:e4:74:08:b5:b1:78:ca:27:1a:e2:6c:7d:c3:21:5b:94:e2: 46:20:2b:90:bb:9f:20:d2:30:03:3e:40:73:08:60:ed:ac:02: a8:fc:8c:ce:26:b9:a2:c5:81:c1:0b:0f:52:d8:3a:83:a5:7c: bf:09:3f:b1:84:ef:95:5a:ec:d6:ce:d2:cf:8d:47:7e:5d:e5: d3:2e:a0:ea:fd:f4:27:59:c0:4c:92:51:99:06:1c:5a:10:c8: c1:11:9d:98:36:be:9b:3c:2a:a6:3c:d7:3b:ac:c1:dc:fe:6a: 03:5f:3d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxREeGhWRJNqATgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2QxNWYwN2QtZjYzNC00MzZmLTkxMDctYjBlMGU5YWJjZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd69071GBp0/t82pWkDS/b9B+Idvek0hj3Ai WgSSzQAB7x3A9gGdFcv6fO3uHDIYBI4xI14wRnqfTOABbjwiH5DljLFJbh+4wwHs 5S7BMkQlzQlcrzFKEj8W6z7mymkLv/hxWide5VDZB93ucGvzQ7CKUmUySf7aCnoL wt+IuCd4L64TLGpJWGC4s0NExf5O7plGAn+Ff2omLHviKC6TjF2K0j++O3ajk1ZQ nu3Ehl14Fb33Zup0Brmu8oQWLvbB8BnrQ3NqIK0tOk8PDUvM2zLwDk6szf0gKsRi g+LApZU4iQ5z0cCKf2kwuNLO3J7L590tDLgvTjEl6V5QqW30mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg7CwqFLCpwYNcMRjOIy7D3F5u8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE3Mzg5M2MtNmIwZS0z OGQyLWI4NmEtNDRkZWVkZTg5MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANTJ6yShKrZMAa7bIjsa4JYiRGfbl2wYLwjejfs9yZluOatbKf4zIWdS VThVUBVRQZoBgF/4aOpY3JgO/YUqY9pVABe6z//eDPv2QQhJB9cnghdFCFeui11f bDvWM0iEu2qkzgQZXnRLt+R+segzYozSGVHAyCuUavG3BgKgoxripVt5N1V2qpUL j/hQfMbqJG3kdAi1sXjKJxribH3DIVuU4kYgK5C7nyDSMAM+QHMIYO2sAqj8jM4m uaLFgcELD1LYOoOlfL8JP7GE75Va7NbO0s+NR35d5dMuoOr99CdZwEySUZkGHFoQ yMERnZg2vps8KqY81zuswdz+agNfPdE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:51:30 2025 by rpki-client