$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f684f67e-6208-3a52-b1b7-6552a64556e3.roa File: f684f67e-6208-3a52-b1b7-6552a64556e3.roa (raw, json) Hash identifier: T16f2bdAkPgRTNDoDDixLQYRXWwKtoAoHwm/jzhY4tk= Subject key identifier: 4E:4A:0E:9F:32:93:ED:B4:52:82:EC:E6:85:84:49:06:CD:0E:10:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2F6408EA16402BDEDC880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f684f67e-6208-3a52-b1b7-6552a64556e3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 71.198.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:f6:40:8e:a1:64:02:bd:ed:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d864f7eb-84ee-43a3-82dc-f1b42d84f9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5d:bc:8a:97:7e:d2:e3:1e:fb:b9:ff:6e:8e: 82:1e:10:9d:47:62:6c:c5:c7:8a:3b:4b:99:36:4f: be:15:6c:f0:77:c9:c4:b0:0f:9e:5c:c4:7c:b9:3a: a7:da:fd:ab:26:a4:d3:70:a8:db:4f:2c:4a:a3:7a: 7c:d6:94:5f:ac:7a:f3:f4:14:fc:28:65:16:6b:98: be:56:96:33:65:c6:27:c8:70:68:ca:94:c0:f4:14: 6a:93:7c:a2:35:e1:1d:e6:91:41:0d:27:f4:3b:f2: 48:d2:b5:3f:e7:56:db:39:a1:e5:8e:ff:d0:9f:94: ca:22:6a:c1:4a:7d:68:63:9a:66:fa:3a:c5:19:15: 30:5f:7e:9f:b1:86:a3:3d:78:b2:73:9c:72:bd:9a: d7:eb:91:84:19:f9:d9:3e:8f:03:fa:c0:f8:2c:50: 72:0c:7a:45:2d:e6:6d:d6:3a:65:56:da:41:3a:eb: ec:a0:62:1f:3b:8a:8a:fa:84:79:5c:38:ef:d8:5a: 91:e0:aa:75:59:43:fe:ff:6c:fd:39:ad:7b:ee:60: 49:69:54:d5:a0:0b:ab:ce:46:f8:0d:40:05:65:fc: 0f:13:63:ae:67:54:21:f6:e1:0d:9d:6f:62:b3:ae: 88:52:27:bc:49:56:fe:25:d9:57:66:2b:e3:5a:ac: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4A:0E:9F:32:93:ED:B4:52:82:EC:E6:85:84:49:06:CD:0E:10:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f684f67e-6208-3a52-b1b7-6552a64556e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:02:c4:29:90:7a:e9:f3:3b:53:d4:91:1d:ee:7c:c9:79:6c: ea:95:0c:49:59:72:b5:02:64:42:ff:2e:9b:ea:6b:bb:68:80: e3:9c:28:f5:ef:af:44:da:4a:95:15:e5:35:aa:41:07:58:96: e6:4b:19:f9:57:03:40:1b:99:88:06:68:d6:14:37:ad:fe:83: 08:58:c6:80:a4:d4:8f:c7:b1:b2:71:df:b0:75:07:e0:a7:77: af:db:0a:19:4e:19:8d:a5:46:95:ab:3d:24:0f:3f:a1:7c:6b: 4f:7f:82:0e:50:80:cf:5d:e5:af:06:ac:04:a7:66:ef:76:2a: fe:2c:8e:a0:dd:4a:a6:71:20:fb:4f:7b:1c:a8:f7:8b:cc:24: 96:65:82:9c:96:23:f9:78:2e:c5:57:2b:20:20:d7:b0:6e:42: c3:da:71:c0:60:de:91:93:13:25:2b:df:89:68:7a:3a:74:85: e5:f9:86:c0:1b:1a:e7:1d:c2:7e:07:8a:0b:2d:b3:0c:a0:79: c6:ba:4e:51:96:c2:25:10:31:3b:0e:43:07:25:1c:11:1a:54: cf:90:cb:4a:88:87:d8:54:48:68:8c:c5:c0:92:52:b1:c5:b8: 62:32:1e:ee:07:11:c6:00:10:09:4b:79:20:4a:a0:4d:66:48: 23:55:7c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswvZAjqFkAr3tyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDg2NGY3ZWItODRlZS00M2EzLTgyZGMtZjFiNDJkODRmOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg128ipd+0uMe+7n/bo6CHhCdR2JsxceKO0uZ Nk++FWzwd8nEsA+eXMR8uTqn2v2rJqTTcKjbTyxKo3p81pRfrHrz9BT8KGUWa5i+ VpYzZcYnyHBoypTA9BRqk3yiNeEd5pFBDSf0O/JI0rU/51bbOaHljv/Qn5TKImrB Sn1oY5pm+jrFGRUwX36fsYajPXiyc5xyvZrX65GEGfnZPo8D+sD4LFByDHpFLeZt 1jplVtpBOuvsoGIfO4qK+oR5XDjv2FqR4Kp1WUP+/2z9Oa177mBJaVTVoAurzkb4 DUAFZfwPE2OuZ1Qh9uENnW9is66IUie8SVb+JdlXZivjWqyCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5KDp8yk+20UoLs5oWESQbNDhAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjY4NGY2N2UtNjIwOC0z YTUyLWIxYjctNjU1MmE2NDU1NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8YkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsCxCmQeunzO1PUkR3ufMl5bOqVDElZcrUCZEL/Lpvqa7togOOcKPXv r0TaSpUV5TWqQQdYluZLGflXA0AbmYgGaNYUN63+gwhYxoCk1I/HsbJx37B1B+Cn d6/bChlOGY2lRpWrPSQPP6F8a09/gg5QgM9d5a8GrASnZu92Kv4sjqDdSqZxIPtP exyo94vMJJZlgpyWI/l4LsVXKyAg17BuQsPaccBg3pGTEyUr34loejp0heX5hsAb Gucdwn4Higstswygeca6TlGWwiUQMTsOQwclHBEaVM+Qy0qIh9hUSGiMxcCSUrHF uGIyHu4HEcYAEAlLeSBKoE1mSCNVfI0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:29:53 2025 by rpki-client