$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8add4d7-252d-3eb0-8400-9e506d3b171a.roa File: d8add4d7-252d-3eb0-8400-9e506d3b171a.roa (raw, json) Hash identifier: qJmstFkyRti1XFxNfe87oKamMkPGe1Ow/vY/6xDEHj0= Subject key identifier: C3:81:78:57:39:7E:F5:A2:F1:45:AA:9D:06:8D:59:3F:83:8D:7F:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC45292BF2B3BF4E5432F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8add4d7-252d-3eb0-8400-9e506d3b171a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.201.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:52:92:bf:2b:3b:f4:e5:43:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b82442d0-1ee5-41d4-8819-7cabf875cac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:bf:19:84:a1:91:b7:c2:7b:27:20:77:24: b3:8e:1d:56:c8:e6:e0:ab:cf:82:03:c0:67:dd:02: 4d:7a:54:71:bc:f6:c6:b1:bc:9e:13:11:6b:af:30: 61:52:21:66:bf:6f:9a:d8:f0:ea:c0:ed:92:66:1c: db:a2:ad:52:c9:3a:ce:a2:e9:0d:da:6c:20:49:55: 91:45:ab:56:61:e9:49:77:6c:9f:74:32:62:8b:58: 04:48:c0:55:d1:8c:83:e1:34:7d:5d:3a:94:d7:7e: 34:04:b5:eb:e6:9d:c9:b6:0c:73:3c:5b:e8:c1:9f: 03:5f:90:2f:3a:f8:6b:2a:15:18:15:01:e3:21:b8: ce:e8:45:5b:43:47:f1:fd:45:83:a8:af:0e:0a:0b: 55:01:d1:14:ca:7d:01:2f:a8:7b:e4:b2:dd:56:fc: 45:7b:30:06:e2:3f:80:8e:16:3f:2f:9d:19:1d:14: 13:d5:80:5f:49:b8:b8:30:4d:f5:bf:a9:73:72:33: cc:56:e7:d8:57:88:d7:3b:43:97:d6:90:ef:4b:31: 73:df:9d:bf:3a:0d:39:a4:73:34:32:6d:24:82:f1: fb:91:1b:68:1d:dc:af:9e:bc:e8:4a:1f:96:b4:4b: 74:b9:68:84:ca:69:bd:e6:98:33:3b:77:fe:8d:65: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:81:78:57:39:7E:F5:A2:F1:45:AA:9D:06:8D:59:3F:83:8D:7F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8add4d7-252d-3eb0-8400-9e506d3b171a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:32:60:0e:2c:ed:c8:41:4a:84:93:44:3b:76:88:db:9c:8f: de:44:a8:c8:02:eb:bc:02:7c:2e:ea:a4:23:df:1d:e1:4a:cf: 38:b5:39:82:11:29:e3:7b:00:20:4c:e6:eb:16:6c:90:ce:4f: 6b:c0:14:bc:70:cc:6a:af:d5:c2:54:d8:41:c5:d8:2a:cc:04: b2:b3:97:12:1d:b5:a9:85:01:53:12:5e:98:6a:0b:12:1b:fa: 7a:1b:36:f5:8c:98:d6:5e:4a:94:a6:aa:07:07:de:b6:70:e2: 6d:16:9b:f0:fc:8d:8b:ea:e7:ae:d5:55:55:a2:66:4e:96:85: dc:f9:a8:a7:b5:a5:01:5e:2e:f4:27:ce:07:3f:f7:5a:84:03: d3:a1:9b:f9:33:0b:d1:21:48:a9:76:e3:d0:85:b6:8b:6d:6a: 5f:54:d8:f0:7b:8e:2e:c5:55:82:2c:87:00:1c:9c:14:46:68: d8:e0:c3:69:c4:de:14:95:ca:c3:de:c4:3f:1e:b0:c7:fb:34: 3f:bd:1a:04:1f:f7:67:c5:e3:1b:89:d4:02:e2:a3:3f:7c:62: 41:b2:97:14:be:ce:d0:9d:d5:51:b2:da:8a:77:d3:ec:59:76: 6b:0e:37:79:06:ac:5c:ca:b1:0d:86:9a:89:97:4c:e7:22:f8: 90:1b:fa:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxFKSvys79OVDL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjgyNDQyZDAtMWVlNS00MWQ0LTg4MTktN2NhYmY4NzVjYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAi/GYShkbfCeycgdySzjh1WyObgq8+CA8Bn 3QJNelRxvPbGsbyeExFrrzBhUiFmv2+a2PDqwO2SZhzboq1SyTrOoukN2mwgSVWR RatWYelJd2yfdDJii1gESMBV0YyD4TR9XTqU1340BLXr5p3JtgxzPFvowZ8DX5Av OvhrKhUYFQHjIbjO6EVbQ0fx/UWDqK8OCgtVAdEUyn0BL6h75LLdVvxFezAG4j+A jhY/L50ZHRQT1YBfSbi4ME31v6lzcjPMVufYV4jXO0OX1pDvSzFz352/Og05pHM0 Mm0kgvH7kRtoHdyvnrzoSh+WtEt0uWiEymm95pgzO3f+jWXDawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOBeFc5fvWi8UWqnQaNWT+DjX9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhhZGQ0ZDctMjUyZC0z ZWIwLTg0MDAtOWU1MDZkM2IxNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR8nEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0yYA4s7chBSoSTRDt2iNucj95EqMgC67wCfC7qpCPfHeFKzzi1OYIR KeN7ACBM5usWbJDOT2vAFLxwzGqv1cJU2EHF2CrMBLKzlxIdtamFAVMSXphqCxIb +nobNvWMmNZeSpSmqgcH3rZw4m0Wm/D8jYvq567VVVWiZk6Whdz5qKe1pQFeLvQn zgc/91qEA9Ohm/kzC9EhSKl249CFtottal9U2PB7ji7FVYIshwAcnBRGaNjgw2nE 3hSVysPexD8esMf7ND+9GgQf92fF4xuJ1ALioz98YkGylxS+ztCd1VGy2op30+xZ dmsON3kGrFzKsQ2GmomXTOci+JAb+kw= -----END CERTIFICATE-----Generated at Sat Aug 23 23:41:41 2025 by rpki-client