$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b998832-6d1e-3ad3-ae02-6e66547ea3de.roa File: 1b998832-6d1e-3ad3-ae02-6e66547ea3de.roa (raw, json) Hash identifier: OkzlMJbMHFEuv6q4Wf/xi21nTDB6cwBIy7qWLl6LVfM= Subject key identifier: 86:03:FF:A5:C2:1A:4C:06:37:FC:44:AF:EC:45:37:97:5B:E0:5E:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB9765BD9D7C01036DE000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b998832-6d1e-3ad3-ae02-6e66547ea3de.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 71.236.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:97:65:bd:9d:7c:01:03:6d:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=f6e6ea46-d728-469f-9762-d8e439e4bcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:dc:07:5f:96:26:a4:d3:73:da:02:8e:f4: 2a:fa:2b:06:50:91:ff:7b:3f:40:2d:20:40:c4:bd: 3f:de:f7:28:c0:f8:0f:a3:43:b5:59:53:6c:37:ba: c9:7a:67:32:81:0d:9b:39:de:4c:bc:17:48:c5:87: b6:78:c5:8d:fe:ee:42:11:ca:f7:fd:ed:da:27:bc: d9:a2:5f:66:dc:b2:79:2e:61:2d:82:e0:50:b4:e7: 1b:e1:2a:7e:8b:ac:60:09:fc:6c:b0:a1:85:98:ab: 7d:ba:2d:24:79:2f:a3:0b:83:ca:d0:af:c2:42:13: 58:41:34:07:23:c6:e1:db:be:a4:99:b7:43:a2:f8: 41:08:ef:d4:8a:d8:cb:f0:a7:d6:1e:29:ee:db:80: 4d:5d:01:64:7f:91:ea:bb:dd:51:e1:82:13:3a:b1: 00:0d:39:dd:f5:a5:39:65:f5:06:65:33:8c:fb:57: e6:16:ba:76:ff:e3:ea:e2:51:dc:c4:2b:af:20:e2: 1b:cb:18:53:ae:de:b2:1a:b3:be:d7:2b:9a:a1:2c: 4d:80:f9:79:f0:e7:cf:99:e6:06:f4:e3:4a:12:27: d8:56:b9:a1:b5:e8:42:8c:8c:e0:de:b2:d6:d2:21: d0:ca:4f:f4:db:22:d8:05:3f:a3:ad:a9:30:9a:c3: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:FF:A5:C2:1A:4C:06:37:FC:44:AF:EC:45:37:97:5B:E0:5E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b998832-6d1e-3ad3-ae02-6e66547ea3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a9:3c:da:af:88:39:98:63:6f:5a:6d:ea:0a:46:12:cd:b6: db:1d:53:5a:ed:5c:93:f7:a5:92:1d:0b:14:26:2e:f6:85:9e: 00:aa:8f:0f:ba:95:6b:72:93:25:58:72:4c:c8:28:17:b4:5d: 35:e7:39:87:82:65:37:6e:70:b8:64:5f:4f:ea:f9:91:6f:65: 34:e9:33:6c:e8:7e:25:f8:5f:5f:4c:7e:cd:59:fe:ca:12:ad: f9:a4:e1:3a:d1:ca:64:0b:ff:54:cb:e2:81:8f:04:98:66:f5: 52:20:fb:07:d9:fb:b3:41:81:39:d8:af:bc:7d:c8:2b:87:b4: 1e:ca:f2:f8:4c:79:4f:47:df:8f:69:00:05:3d:70:d5:10:dd: c8:3e:d3:b0:f5:df:e7:ad:3f:dd:f5:fb:7c:64:25:a4:1b:11: ba:2a:65:bd:2d:8d:61:71:a1:b7:3b:f6:93:d7:e8:ea:9f:e5: d8:0c:55:02:f4:d7:c2:d5:15:ef:d8:9c:8b:b2:9e:08:c8:36: d8:b5:1f:29:c5:a0:49:23:cd:88:c0:88:c2:02:91:85:37:48: 86:dc:92:f3:27:0c:8d:e2:f2:af:5d:db:bc:a9:80:c4:b3:e5: 78:ed:75:c5:67:79:f9:95:e9:77:9d:35:09:e6:b4:8f:1b:25: 01:31:50:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq065dlvZ18AQNt4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjZlNmVhNDYtZDcyOC00NjlmLTk3NjItZDhlNDM5ZTRiY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2rcB1+WJqTTc9oCjvQq+isGUJH/ez9ALSBA xL0/3vcowPgPo0O1WVNsN7rJemcygQ2bOd5MvBdIxYe2eMWN/u5CEcr3/e3aJ7zZ ol9m3LJ5LmEtguBQtOcb4Sp+i6xgCfxssKGFmKt9ui0keS+jC4PK0K/CQhNYQTQH I8bh276kmbdDovhBCO/UitjL8KfWHinu24BNXQFkf5Hqu91R4YITOrEADTnd9aU5 ZfUGZTOM+1fmFrp2/+Pq4lHcxCuvIOIbyxhTrt6yGrO+1yuaoSxNgPl58OfPmeYG 9ONKEifYVrmhtehCjIzg3rLW0iHQyk/02yLYBT+jrakwmsNQTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYD/6XCGkwGN/xEr+xFN5db4F4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWI5OTg4MzItNmQxZS0z YWQzLWFlMDItNmU2NjU0N2VhM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+pPNqviDmYY29abeoKRhLNttsdU1rtXJP3pZIdCxQmLvaFngCqjw+6 lWtykyVYckzIKBe0XTXnOYeCZTducLhkX0/q+ZFvZTTpM2zofiX4X19Mfs1Z/soS rfmk4TrRymQL/1TL4oGPBJhm9VIg+wfZ+7NBgTnYr7x9yCuHtB7K8vhMeU9H349p AAU9cNUQ3cg+07D13+etP931+3xkJaQbEboqZb0tjWFxobc79pPX6Oqf5dgMVQL0 18LVFe/YnIuyngjINti1HynFoEkjzYjAiMICkYU3SIbckvMnDI3i8q9d27ypgMSz 5XjtdcVnefmV6XedNQnmtI8bJQExULA= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:08 2025 by rpki-client