$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d614ff08-1476-30aa-bfc8-70bceab5c13e.roa File: d614ff08-1476-30aa-bfc8-70bceab5c13e.roa (raw, json) Hash identifier: flIS6t8AU6HnyjflavZKz8LG4FBkSFUuRb6Mmbfox1k= Subject key identifier: 76:52:9A:EE:43:B3:9C:7F:23:A8:A3:1A:ED:D8:28:3A:48:DC:68:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC35F7C464C0A7CACBC8B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d614ff08-1476-30aa-bfc8-70bceab5c13e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 71.199.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:5f:7c:46:4c:0a:7c:ac:bc:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fec8be7b-087c-4051-89df-1f8ab919706a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:ce:b7:f0:f5:5e:8b:4d:00:08:a1:4f:0c: 60:0b:54:5e:20:a0:27:60:d7:e2:bc:51:17:39:a2: d6:90:27:dc:ef:20:05:44:fc:f5:bd:73:9f:ff:ab: 2c:79:2b:68:91:3a:4e:db:c4:7b:62:00:02:9c:3b: 52:0a:6f:95:05:42:ab:96:ea:06:39:ff:87:d6:b9: ac:9a:0d:c9:38:ce:c7:88:d6:66:a3:a1:69:ba:5e: bc:c6:e7:3c:6a:6a:12:6a:a3:01:50:ff:24:74:17: 64:8b:1e:89:ae:3f:8c:6f:34:64:14:1d:33:d8:d6: 1c:be:b3:f2:ac:be:76:d1:4e:3b:72:3e:3d:88:9b: c9:7d:e7:25:01:a4:86:b9:cc:1a:12:37:20:75:43: ff:c1:4c:63:8f:fa:76:b2:61:76:5d:e3:dc:6c:61: 4b:e6:56:f1:44:31:68:6d:e9:09:06:9f:96:be:b6: 40:90:35:d4:d9:82:77:97:14:e1:0d:cb:f8:90:f8: fe:80:9f:62:48:65:02:1f:81:f5:34:42:0c:30:38: d6:94:04:41:c1:91:07:8e:e4:16:a9:b9:9e:82:9e: 2a:22:1d:83:cd:75:11:bf:dd:a0:6e:7f:35:cc:d3: fa:eb:b9:ea:93:08:c6:9d:ba:6d:96:b1:5c:79:c5: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:52:9A:EE:43:B3:9C:7F:23:A8:A3:1A:ED:D8:28:3A:48:DC:68:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d614ff08-1476-30aa-bfc8-70bceab5c13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.199.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:34:24:ce:80:d5:84:77:02:45:ad:df:4e:70:fd:30:a1:19: 6e:1c:7c:1b:83:2c:76:4b:6e:48:8c:d6:94:4b:68:06:48:6a: d6:e8:b6:38:8d:47:e1:0f:b5:48:44:1c:58:0d:b7:c2:b9:50: b6:c3:bc:dd:4f:a4:31:9c:e1:79:f3:31:41:dc:83:bc:d4:cc: b8:57:ad:39:30:d1:5a:fe:75:1e:01:4f:bf:7e:af:ce:79:ed: da:1d:93:20:1a:31:94:c6:6e:6d:dd:06:f3:e5:37:56:95:4b: aa:5a:71:85:73:1f:45:e0:ac:0c:c3:d4:c2:29:5a:ef:6f:29: 49:18:46:40:b2:e8:4d:ab:28:f0:55:06:7a:04:24:a9:b5:65: 44:d8:23:cd:eb:87:c7:66:39:76:3f:0f:c6:80:c5:07:f4:ed: 40:66:18:18:94:c3:e8:d4:a3:5d:37:4d:5a:72:29:90:fb:a0: 14:f2:95:af:22:d1:72:1e:4d:dc:c1:80:6a:0d:9b:c5:fc:4b: ff:c2:00:c9:34:62:d5:74:00:b1:15:ef:6f:86:1c:f8:40:07: 85:a7:91:47:0a:d2:50:2c:81:75:c7:46:61:30:df:63:3a:a4: 2a:3f:65:f9:8e:41:5d:22:04:9f:a4:2a:49:22:6d:90:d8:26: cf:ff:18:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw198RkwKfKy8i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmVjOGJlN2ItMDg3Yy00MDUxLTg5ZGYtMWY4YWI5MTk3MDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq/Ot/D1XotNAAihTwxgC1ReIKAnYNfivFEX OaLWkCfc7yAFRPz1vXOf/6sseStokTpO28R7YgACnDtSCm+VBUKrluoGOf+H1rms mg3JOM7HiNZmo6Fpul68xuc8amoSaqMBUP8kdBdkix6Jrj+MbzRkFB0z2NYcvrPy rL520U47cj49iJvJfeclAaSGucwaEjcgdUP/wUxjj/p2smF2XePcbGFL5lbxRDFo bekJBp+WvrZAkDXU2YJ3lxThDcv4kPj+gJ9iSGUCH4H1NEIMMDjWlARBwZEHjuQW qbmegp4qIh2DzXURv92gbn81zNP667nqkwjGnbptlrFcecUxtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZSmu5Ds5x/I6ijGu3YKDpI3Gi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDYxNGZmMDgtMTQ3Ni0z MGFhLWJmYzgtNzBiY2VhYjVjMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8cMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN40JM6A1YR3AkWt305w/TChGW4cfBuDLHZLbkiM1pRLaAZIatbotjiN R+EPtUhEHFgNt8K5ULbDvN1PpDGc4XnzMUHcg7zUzLhXrTkw0Vr+dR4BT79+r855 7dodkyAaMZTGbm3dBvPlN1aVS6pacYVzH0XgrAzD1MIpWu9vKUkYRkCy6E2rKPBV BnoEJKm1ZUTYI83rh8dmOXY/D8aAxQf07UBmGBiUw+jUo103TVpyKZD7oBTyla8i 0XIeTdzBgGoNm8X8S//CAMk0YtV0ALEV72+GHPhAB4WnkUcK0lAsgXXHRmEw32M6 pCo/ZfmOQV0iBJ+kKkkibZDYJs//GEE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:29:47 2025 by rpki-client