$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f478fead-6d82-3cbb-b0a7-6e9cf323a088.roa File: f478fead-6d82-3cbb-b0a7-6e9cf323a088.roa (raw, json) Hash identifier: 2F1usgwHAMzMG3rJNeBLV6e/cgBOCCmqCU0Xd8YCIsI= Subject key identifier: 2E:46:C8:86:F6:69:3E:36:3E:D3:27:0B:05:19:DC:97:47:28:F3:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3E1B4C12E92602E22ECC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f478fead-6d82-3cbb-b0a7-6e9cf323a088.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 71.224.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:e1:b4:c1:2e:92:60:2e:22:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=460fdf80-ced7-4c47-97ff-2ebeac8d7367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:49:c0:d8:8e:69:3f:3a:6a:f1:d6:28:05: 39:b0:46:f9:db:5d:53:2c:ea:3c:76:4a:67:00:6a: b1:b4:18:ba:5e:82:ba:06:82:85:77:34:dd:4c:a7: a8:01:39:d1:4f:36:52:86:21:93:b5:64:6f:52:7a: e4:b5:57:e2:1a:21:45:ff:58:90:4c:90:96:4a:2f: 71:9d:16:0b:bd:05:da:2e:31:f5:77:20:54:09:2f: 62:b6:f4:8e:90:83:0d:bb:15:83:85:74:45:18:32: c6:c8:66:cd:d6:6a:67:fb:86:02:15:1a:d7:34:9b: 97:5f:39:e2:9e:46:62:ce:d7:57:a7:7c:aa:36:29: 9b:48:56:1d:84:f5:e0:0a:b2:fa:6a:28:92:9b:9e: d6:e9:30:32:8c:71:49:64:1a:64:41:ac:14:52:f1: ed:2b:b3:10:43:97:d8:24:10:4a:be:30:0e:86:58: f9:91:f7:ef:7d:37:37:ab:1e:78:6c:63:a8:c7:56: 31:cd:0d:55:b4:47:ed:f7:4d:15:67:4b:4c:2f:82: a3:45:95:65:bb:3e:05:ea:2a:ed:da:61:bc:91:0d: 7d:61:10:12:27:19:71:d5:dd:27:91:ba:97:e1:20: 0b:77:f3:3e:39:f3:f5:2f:26:e7:54:59:e3:0e:63: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:46:C8:86:F6:69:3E:36:3E:D3:27:0B:05:19:DC:97:47:28:F3:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f478fead-6d82-3cbb-b0a7-6e9cf323a088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:1c:d5:de:6d:7c:32:af:e6:39:fc:27:e7:8b:c2:61:c1:fd: b9:b9:b7:c5:8d:86:61:a2:0a:16:a8:1d:9f:e0:7d:f3:3f:89: 0e:b3:3a:f9:3b:b8:93:37:ea:84:dd:86:85:33:84:8c:a6:ee: 86:42:2f:97:30:88:83:37:5e:be:fc:8d:57:af:7a:4b:fc:59: 7f:4a:56:31:35:c6:6e:d0:d9:f4:0a:c2:61:5e:31:75:b8:36: 11:4f:08:46:6c:cb:f6:70:af:1a:08:39:6f:8e:c5:5f:ff:7e: da:d3:fe:2a:44:82:37:bb:59:92:93:58:5f:8c:8a:9b:17:09: bc:9f:b1:87:ea:f5:95:36:66:49:d8:6e:dc:69:9c:6d:ff:dd: e4:2d:ca:a3:42:88:b1:bf:a7:9e:65:16:7d:1e:fc:07:ea:50: e8:1f:a8:ce:8f:c7:3e:dc:88:db:58:e4:b2:d2:de:28:e2:99: b9:d2:37:1f:7e:52:39:0a:b0:23:2b:7d:23:a6:8e:af:96:bc: 4e:3a:2a:b8:0a:53:0e:1a:8b:05:1c:f0:e7:66:53:66:e4:6f: 42:fb:d7:5c:c4:3b:f4:cd:62:5d:52:02:d7:0e:f5:f5:2c:60: d8:0d:d8:97:e4:a8:4a:92:70:20:cd:33:f4:d2:66:65:82:59: 7d:a2:c8:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw+G0wS6SYC4i7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDYwZmRmODAtY2VkNy00YzQ3LTk3ZmYtMmViZWFjOGQ3MzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ5JwNiOaT86avHWKAU5sEb5211TLOo8dkpn AGqxtBi6XoK6BoKFdzTdTKeoATnRTzZShiGTtWRvUnrktVfiGiFF/1iQTJCWSi9x nRYLvQXaLjH1dyBUCS9itvSOkIMNuxWDhXRFGDLGyGbN1mpn+4YCFRrXNJuXXzni nkZiztdXp3yqNimbSFYdhPXgCrL6aiiSm57W6TAyjHFJZBpkQawUUvHtK7MQQ5fY JBBKvjAOhlj5kffvfTc3qx54bGOox1YxzQ1VtEft900VZ0tML4KjRZVluz4F6irt 2mG8kQ19YRASJxlx1d0nkbqX4SALd/M+OfP1LybnVFnjDmM+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5GyIb2aT42PtMnCwUZ3JdHKPPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQ3OGZlYWQtNmQ4Mi0z Y2JiLWIwYTctNmU5Y2YzMjNhMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+CkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkc1d5tfDKv5jn8J+eLwmHB/bm5t8WNhmGiChaoHZ/gffM/iQ6zOvk7 uJM36oTdhoUzhIym7oZCL5cwiIM3Xr78jVevekv8WX9KVjE1xm7Q2fQKwmFeMXW4 NhFPCEZsy/ZwrxoIOW+OxV//ftrT/ipEgje7WZKTWF+MipsXCbyfsYfq9ZU2ZknY btxpnG3/3eQtyqNCiLG/p55lFn0e/AfqUOgfqM6Pxz7ciNtY5LLS3ijimbnSNx9+ UjkKsCMrfSOmjq+WvE46KrgKUw4aiwUc8OdmU2bkb0L711zEO/TNYl1SAtcO9fUs YNgN2JfkqEqScCDNM/TSZmWCWX2iyC0= -----END CERTIFICATE-----Generated at Sun Aug 24 04:27:38 2025 by rpki-client