$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa File: 24a30da4-284f-359d-a000-798bee3ee6c2.roa (raw, json) Hash identifier: oQwYeZRIFRcC4ahgAh/oubsl3m+g2gmRGaaKyTLbPek= Subject key identifier: C4:CA:43:5E:95:AC:10:3E:89:3F:6A:20:BD:A3:06:2E:0C:1B:85:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB9964634D2B638151CDC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 71.237.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:99:64:63:4d:2b:63:81:51:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=29f988db-8ad6-4efd-a044-1b1abc2bac9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:87:2a:eb:b5:d1:3e:d0:dd:d6:ee:57:dc: 1d:4c:f6:16:c5:16:e1:8e:02:e2:3b:cf:81:6c:f2: 2a:46:4d:9b:50:d5:ce:f0:8e:11:91:fa:08:1b:0a: e6:83:3d:e4:27:10:d9:09:86:54:81:91:fa:c6:70: ab:7a:bb:41:06:01:77:56:97:06:ba:48:4f:3c:d9: be:f8:55:02:fb:ce:7c:f8:ec:08:eb:f9:6c:9b:1f: a3:a5:11:2a:78:7f:88:1d:75:6a:ed:40:7d:8d:d0: 12:a2:76:f4:1f:3f:a1:89:39:59:a3:09:36:a1:1a: 1d:5b:1b:b1:9f:23:c2:25:4e:82:5e:cf:e6:06:70: 2a:26:2e:ad:6e:d3:53:3f:22:90:4b:eb:9f:9b:17: 84:a4:aa:be:8f:b7:6c:93:df:c3:47:b5:e8:5f:a1: 49:29:94:ee:ff:85:39:15:be:32:67:d8:63:ba:48: 92:da:3e:7c:a2:f1:85:44:fc:ad:ce:74:a2:6d:8b: 2f:a1:3e:5d:c5:a5:06:45:43:6f:1d:e2:79:81:69: 64:01:c1:19:ae:0d:e0:18:98:14:b2:1e:4d:c4:d2: a6:17:cd:23:b9:a5:d4:48:aa:99:c6:1e:0f:48:59: 17:7c:e1:20:9b:59:a7:d8:f1:80:ff:43:45:b9:a5: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CA:43:5E:95:AC:10:3E:89:3F:6A:20:BD:A3:06:2E:0C:1B:85:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24a30da4-284f-359d-a000-798bee3ee6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c5:66:62:46:2f:c5:a1:cd:3e:fc:c4:af:32:3d:85:68:ac: c6:2b:cc:f1:a1:6f:e6:83:45:f6:ca:43:51:9e:44:73:d0:4c: bf:32:f6:f0:6c:4b:c3:3f:f7:45:b8:a0:7c:c6:f3:48:a7:4f: a9:07:b3:df:56:22:57:0c:91:a7:88:6e:4f:3c:27:88:6d:c1: 65:9b:33:2c:75:7d:e8:1f:61:ba:34:6e:6f:07:06:9b:ff:dc: 47:0e:30:e7:21:3b:cd:3d:1c:bb:b0:5f:b6:34:82:3c:a9:3f: 95:59:13:c8:2a:e3:3b:cb:14:82:a3:82:5b:b0:9f:cc:ae:f9: 05:63:bf:3b:5d:87:ac:f6:55:3e:78:22:f4:50:00:a2:21:b6: 91:8c:ed:fe:39:6e:79:20:9a:b4:c4:07:29:d2:98:4e:94:07: 94:d1:8f:dc:b9:7f:11:84:2c:bd:db:6d:f4:c7:a4:09:a7:74: e0:d9:32:01:38:1d:71:4a:d3:12:0a:f5:a8:45:58:96:83:d5: 93:fa:97:98:f4:6a:b8:2c:4e:cb:23:ac:46:27:d0:2a:a2:0c: f0:39:32:69:60:f5:0c:ed:dd:87:60:45:23:80:c5:49:9e:08: 07:c5:2a:77:50:a0:9d:fd:6c:cf:fa:14:18:87:1a:0a:55:97: 48:c4:7e:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq065lkY00rY4FRzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MjlmOTg4ZGItOGFkNi00ZWZkLWEwNDQtMWIxYWJjMmJhYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4SHKuu10T7Q3dbuV9wdTPYWxRbhjgLiO8+B bPIqRk2bUNXO8I4RkfoIGwrmgz3kJxDZCYZUgZH6xnCrertBBgF3VpcGukhPPNm+ +FUC+858+OwI6/lsmx+jpREqeH+IHXVq7UB9jdASonb0Hz+hiTlZowk2oRodWxux nyPCJU6CXs/mBnAqJi6tbtNTPyKQS+ufmxeEpKq+j7dsk9/DR7XoX6FJKZTu/4U5 Fb4yZ9hjukiS2j58ovGFRPytznSibYsvoT5dxaUGRUNvHeJ5gWlkAcEZrg3gGJgU sh5NxNKmF80juaXUSKqZxh4PSFkXfOEgm1mn2PGA/0NFuaWjtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTKQ16VrBA+iT9qIL2jBi4MG4V5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRhMzBkYTQtMjg0Zi0z NTlkLWEwMDAtNzk4YmVlM2VlNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrFZmJGL8WhzT78xK8yPYVorMYrzPGhb+aDRfbKQ1GeRHPQTL8y9vBs S8M/90W4oHzG80inT6kHs99WIlcMkaeIbk88J4htwWWbMyx1fegfYbo0bm8HBpv/ 3EcOMOchO809HLuwX7Y0gjypP5VZE8gq4zvLFIKjgluwn8yu+QVjvztdh6z2VT54 IvRQAKIhtpGM7f45bnkgmrTEBynSmE6UB5TRj9y5fxGELL3bbfTHpAmndODZMgE4 HXFK0xIK9ahFWJaD1ZP6l5j0argsTssjrEYn0CqiDPA5Mmlg9Qzt3YdgRSOAxUme CAfFKndQoJ39bM/6FBiHGgpVl0jEfqc= -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:44 2025 by rpki-client