$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5bf946f-4d09-3d92-9127-2147f1a39863.roa File: e5bf946f-4d09-3d92-9127-2147f1a39863.roa (raw, json) Hash identifier: g3kyPC3Fpj+unPSi9Cg5JJk4Lap7Kj3Vqb3WYYM2qPg= Subject key identifier: 36:73:3B:EB:45:D8:FB:7D:60:5E:B5:05:C8:8A:77:A2:D1:91:1E:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC44F895E27A924232818C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5bf946f-4d09-3d92-9127-2147f1a39863.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.194.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:4f:89:5e:27:a9:24:23:28:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=991ab6fd-98bd-4b17-a081-41eea2fce45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:89:f3:55:3e:52:ff:a0:12:f4:7d:ad:6b: 20:10:80:51:0b:f4:9b:52:50:50:08:27:71:b5:1f: b1:55:94:6a:f3:7f:8e:05:6a:2e:ba:af:67:d4:43: e2:75:f0:e8:ca:fc:67:2c:e6:cd:93:2d:df:38:3a: 62:d5:42:6c:b0:32:30:e9:07:e1:b3:38:c3:9d:25: 87:bc:17:c8:63:70:61:11:65:bd:23:e6:58:32:76: 67:d8:cf:fe:d4:1e:3d:cf:8f:61:30:7a:20:7e:88: 37:0d:6d:92:fc:fd:07:32:47:fb:d3:8b:12:81:7d: 68:05:15:81:8a:16:fb:48:f8:95:a7:25:e2:a9:fa: 85:00:1e:ee:49:88:ea:f5:d4:fc:73:93:77:9e:eb: 97:fa:27:36:d6:87:49:89:b4:e2:67:19:af:4f:81: 02:29:39:b2:d5:73:a0:10:9b:d9:f1:2e:b9:2a:9e: 5a:48:07:dd:a2:cc:21:91:1e:7f:43:6c:8a:fa:72: 16:4d:56:e9:08:9a:8a:7a:40:c4:28:58:d5:fa:4b: 57:09:04:4d:dd:a5:fc:ff:88:cf:b9:11:37:e6:20: 8a:50:d1:e1:6e:53:25:6e:07:3d:a5:c4:0a:cb:fe: e4:a8:12:13:f3:f8:e4:cb:d2:61:c5:6f:db:5b:19: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:73:3B:EB:45:D8:FB:7D:60:5E:B5:05:C8:8A:77:A2:D1:91:1E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5bf946f-4d09-3d92-9127-2147f1a39863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:75:e5:79:25:b7:85:30:6d:7d:9c:00:26:0b:fb:c2:c2:07: 05:be:c5:85:f5:d0:77:46:0f:b1:3c:2c:ba:50:2f:83:51:47: b6:f9:42:5a:71:af:a0:77:09:d8:da:1f:31:6a:52:e2:99:91: 32:e1:f0:98:ff:fc:b4:eb:e8:30:9f:0b:f3:89:61:ec:2f:b5: 3f:2a:8b:09:c7:23:12:ad:94:0e:fb:97:13:11:43:18:31:37: 2e:4a:5a:3c:d1:9a:50:5f:f6:62:e1:4d:b7:b5:2d:17:c5:46: 60:16:ce:66:b6:64:c3:58:76:84:ab:dd:f6:e9:41:2c:70:3d: 3c:e9:5e:f9:69:f1:0e:4e:dd:46:88:0c:55:02:c9:4a:8c:e5: 9e:c0:78:ff:e3:44:72:98:8a:cf:fd:93:33:7e:99:54:7e:9f: b2:15:15:0f:44:60:39:4d:cc:43:a4:06:0a:fa:0e:77:bd:4d: 5f:c4:79:1a:1c:7e:d8:d8:67:25:4f:b5:46:d8:e9:ec:6d:5b: 20:99:43:71:ae:85:0b:8f:a7:a9:ae:9f:d8:4e:2d:cc:43:c5: e1:e8:2d:98:e1:91:4c:d8:3a:c6:f6:da:c8:97:5f:b3:df:d7: 16:40:06:fa:e9:ab:b5:d0:80:33:03:6b:bc:1d:89:0a:86:97: 25:10:2f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxE+JXiepJCMoGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTkxYWI2ZmQtOThiZC00YjE3LWEwODEtNDFlZWEyZmNlNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry2J81U+Uv+gEvR9rWsgEIBRC/SbUlBQCCdx tR+xVZRq83+OBWouuq9n1EPidfDoyvxnLObNky3fODpi1UJssDIw6QfhszjDnSWH vBfIY3BhEWW9I+ZYMnZn2M/+1B49z49hMHogfog3DW2S/P0HMkf704sSgX1oBRWB ihb7SPiVpyXiqfqFAB7uSYjq9dT8c5N3nuuX+ic21odJibTiZxmvT4ECKTmy1XOg EJvZ8S65Kp5aSAfdoswhkR5/Q2yK+nIWTVbpCJqKekDEKFjV+ktXCQRN3aX8/4jP uRE35iCKUNHhblMlbgc9pcQKy/7kqBIT8/jky9JhxW/bWxnMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZzO+tF2Pt9YF61BciKd6LRkR4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTViZjk0NmYtNGQwOS0z ZDkyLTkxMjctMjE0N2YxYTM5ODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8KsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN15Xklt4UwbX2cACYL+8LCBwW+xYX10HdGD7E8LLpQL4NRR7b5Qlpx r6B3CdjaHzFqUuKZkTLh8Jj//LTr6DCfC/OJYewvtT8qiwnHIxKtlA77lxMRQxgx Ny5KWjzRmlBf9mLhTbe1LRfFRmAWzma2ZMNYdoSr3fbpQSxwPTzpXvlp8Q5O3UaI DFUCyUqM5Z7AeP/jRHKYis/9kzN+mVR+n7IVFQ9EYDlNzEOkBgr6Dne9TV/EeRoc ftjYZyVPtUbY6extWyCZQ3GuhQuPp6mun9hOLcxDxeHoLZjhkUzYOsb22siXX7Pf 1xZABvrpq7XQgDMDa7wdiQqGlyUQL5Q= -----END CERTIFICATE-----Generated at Sun Aug 24 05:36:06 2025 by rpki-client