$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa215b16-ac60-3451-a9a8-2311cceb5237.roa File: fa215b16-ac60-3451-a9a8-2311cceb5237.roa (raw, json) Hash identifier: 0Wa3gLXNvBC6BHHuVWkShNU9PHd8dOpGft7dijfoa/s= Subject key identifier: 5F:3B:C3:75:31:0C:CF:A0:FE:43:29:D0:3B:76:65:37:34:5B:EC:A4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC451677BCECC12492B3BC8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa215b16-ac60-3451-a9a8-2311cceb5237.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 71.201.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:51:67:7b:ce:cc:12:49:2b:3b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=42efea6e-81b4-4c3a-b8de-d6e312661a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:75:60:17:73:85:88:68:53:ec:92:4f:5c:23: 36:43:a8:34:c9:fc:55:1c:06:54:f3:c0:6d:a7:59: f7:6d:66:08:0d:bf:72:5a:c2:f1:ca:be:fb:31:23: 54:1e:39:52:c7:f8:67:e2:06:bd:fd:8f:88:16:d1: f8:d8:47:ec:bd:54:42:dd:c3:3b:5b:18:14:04:17: 52:82:6a:6d:37:23:66:21:6e:56:48:8b:71:57:18: 2b:59:c7:cc:fa:e1:c1:41:bc:3e:f8:70:37:b2:55: a7:85:ce:b8:86:e3:8c:ae:5b:46:65:29:d4:03:b0: 72:17:9c:15:7d:33:a6:24:ba:83:9e:62:e1:bc:b2: 71:16:77:bc:ec:bc:bd:ac:ab:46:19:c6:5a:34:44: 22:56:40:97:49:8d:d6:9b:18:f3:50:ad:4f:71:21: 24:60:3a:50:59:8d:e3:38:02:17:80:40:9f:a1:8f: 37:ef:74:6c:41:97:79:38:ee:1a:7e:4d:e2:ad:74: 2f:d9:ec:e7:6b:1c:2b:08:6d:e5:2e:9f:51:f5:56: 7b:0c:43:66:ef:21:ab:36:a8:28:fb:22:b8:99:32: fd:fe:b2:0b:aa:43:83:0d:20:83:84:f6:b9:b7:06: 4b:e0:36:b7:f5:18:81:b9:cc:90:3b:20:e0:77:25: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3B:C3:75:31:0C:CF:A0:FE:43:29:D0:3B:76:65:37:34:5B:EC:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa215b16-ac60-3451-a9a8-2311cceb5237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0d:fa:a7:ab:37:8d:a3:6a:bc:08:eb:57:1f:c6:c9:2d:ec: af:9a:06:5f:68:f1:49:cd:62:28:83:71:e9:6f:e6:61:b0:c5: ac:5f:be:26:5b:a7:d2:39:2e:f0:50:7f:e1:31:32:34:2c:5d: 70:38:a0:91:e4:8f:a9:31:1d:2f:67:40:69:94:bc:3b:09:fb: ed:35:3c:5b:4b:5d:22:87:87:a2:1a:8f:e4:cd:06:ab:15:c5: 8f:c1:ae:b5:d0:ad:3c:9f:ec:3e:23:a5:1a:db:ac:fd:e5:3d: 63:69:99:2c:8a:74:40:e4:a0:ff:2d:64:12:27:aa:c2:65:87: b0:dc:d5:3d:2e:48:ec:ca:2f:8f:68:2c:a7:1f:e0:f7:97:d2: 05:90:70:a2:69:44:fd:5a:ec:4d:6a:18:a4:d6:f8:00:d9:fa: 54:14:ba:62:37:83:f6:2e:7a:2a:41:b0:39:df:e6:7c:99:98: 17:a2:f7:06:9f:b1:33:3e:53:df:27:0c:5a:18:24:3f:a8:52: 22:52:04:67:a6:d8:b6:48:c5:fa:d7:57:4c:1b:55:b5:e3:89: 66:8e:1e:e8:ef:2c:6b:0e:0e:40:4d:6d:9e:c6:52:1a:ae:0c: 6f:7c:3c:c2:55:7d:7c:29:f7:ba:f5:b1:19:10:90:fa:82:bf: 1f:c7:63:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxFFne87MEkkrO8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDJlZmVhNmUtODFiNC00YzNhLWI4ZGUtZDZlMzEyNjYxYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3VgF3OFiGhT7JJPXCM2Q6g0yfxVHAZU88Bt p1n3bWYIDb9yWsLxyr77MSNUHjlSx/hn4ga9/Y+IFtH42EfsvVRC3cM7WxgUBBdS gmptNyNmIW5WSItxVxgrWcfM+uHBQbw++HA3slWnhc64huOMrltGZSnUA7ByF5wV fTOmJLqDnmLhvLJxFne87Ly9rKtGGcZaNEQiVkCXSY3WmxjzUK1PcSEkYDpQWY3j OAIXgECfoY8373RsQZd5OO4afk3irXQv2eznaxwrCG3lLp9R9VZ7DENm7yGrNqgo +yK4mTL9/rILqkODDSCDhPa5twZL4Da39RiBucyQOyDgdyWjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF87w3UxDM+g/kMp0Dt2ZTc0W+ykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmEyMTViMTYtYWM2MC0z NDUxLWE5YTgtMjMxMWNjZWI1MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8lkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoN+qerN42jarwI61cfxskt7K+aBl9o8UnNYiiDcelv5mGwxaxfviZb p9I5LvBQf+ExMjQsXXA4oJHkj6kxHS9nQGmUvDsJ++01PFtLXSKHh6Iaj+TNBqsV xY/BrrXQrTyf7D4jpRrbrP3lPWNpmSyKdEDkoP8tZBInqsJlh7Dc1T0uSOzKL49o LKcf4PeX0gWQcKJpRP1a7E1qGKTW+ADZ+lQUumI3g/YueipBsDnf5nyZmBei9waf sTM+U98nDFoYJD+oUiJSBGem2LZIxfrXV0wbVbXjiWaOHujvLGsODkBNbZ7GUhqu DG98PMJVfXwp97r1sRkQkPqCvx/HY6w= -----END CERTIFICATE-----Generated at Sat Aug 23 23:28:56 2025 by rpki-client