$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72af9a2b-a519-386d-8996-e7134cc968e0.roa File: 72af9a2b-a519-386d-8996-e7134cc968e0.roa (raw, json) Hash identifier: /amacuCi2RgyTlf8hvTPKhHMVSK02lhNMDmIbB66k9s= Subject key identifier: 00:0F:8D:B9:AE:D4:72:EC:8C:F6:A7:C0:37:7D:0B:C2:5A:67:82:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED578C37900E4F09F8F340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72af9a2b-a519-386d-8996-e7134cc968e0.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 71.238.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:57:8c:37:90:0e:4f:09:f8:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=f97929aa-9720-4cc2-849a-790c1afbde46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cd:04:52:6e:ee:6b:99:07:64:c4:55:53:90: f6:e8:fd:ab:6d:78:da:bb:20:5c:73:88:f3:42:c4: f2:8e:df:34:f9:61:3f:79:96:1c:dc:a3:e8:7c:d2: 92:91:d2:9a:81:45:3c:51:1f:0b:c2:87:d6:03:83: 37:62:38:db:9c:9c:5d:a3:cf:1e:79:14:9e:c8:66: c5:f5:5d:21:a5:1e:89:6b:29:2f:42:cd:f1:7f:e6: 9d:96:89:9d:14:f4:ab:48:f8:6a:65:f1:5e:60:cb: dd:fa:5e:12:9f:a2:c3:d5:2c:a7:48:bc:de:86:34: ad:b7:88:de:f6:a2:ae:b0:2e:a2:c6:aa:db:54:b0: 2f:67:24:db:87:13:43:7f:1a:a6:e1:0e:44:4b:c1: d9:46:e6:e8:3e:9a:72:9b:8f:af:7b:10:9c:b3:db: 16:ce:dd:23:5f:b0:32:60:ac:d7:c7:40:ac:53:35: 61:85:d3:8c:bd:cb:91:56:a1:b6:6f:df:bc:23:5b: 35:cf:9e:89:ad:da:d8:91:e4:fe:f9:88:b3:ab:8a: 5b:5e:26:20:67:46:ff:ee:2c:e9:76:d3:fc:12:14: 98:b2:9b:7b:57:c7:2f:99:85:e4:a5:32:ce:ea:3f: 7a:df:aa:f2:8e:80:78:a1:8d:43:ac:90:c4:21:ef: 01:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0F:8D:B9:AE:D4:72:EC:8C:F6:A7:C0:37:7D:0B:C2:5A:67:82:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72af9a2b-a519-386d-8996-e7134cc968e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b7:a1:42:66:98:9f:78:9f:d8:3f:6e:56:ef:ef:24:83:88: d5:bb:a3:d3:02:38:31:60:e9:a2:40:92:53:98:1c:0e:fe:07: 7a:eb:f8:8f:29:c9:c4:9b:94:1d:b3:06:0c:e2:9b:ac:de:22: 62:e0:17:42:34:ea:e9:fc:0b:6f:1d:7a:4d:a5:29:45:65:1c: 12:8b:b1:13:2a:e7:dd:c1:61:85:79:d8:45:46:b5:93:82:93: 35:cd:f1:b0:1d:15:24:ad:62:01:8a:99:6e:c3:fb:d2:29:31: 3b:16:d4:3d:d0:86:70:2f:e4:4d:3b:c8:79:79:09:af:cb:0f: c7:41:78:cb:0a:ef:ac:d6:4f:06:b9:4e:82:d1:74:d4:ff:e4: 5c:13:3b:0c:1b:a5:d6:cf:8c:4e:43:46:21:d2:db:d3:da:fa: 56:74:43:aa:c3:32:e0:3b:e3:9c:51:26:82:26:e7:ee:66:58: 8a:ac:b0:4e:a0:73:37:c5:26:07:c7:05:69:4e:93:37:bd:c1: 8b:0a:34:9e:61:52:6b:6c:cd:3b:ea:06:74:b9:ba:5a:bd:74: fb:0f:cc:ce:f2:78:33:ef:d5:53:b3:c6:5a:8c:60:dc:b8:c9: c0:64:16:eb:41:f8:45:35:90:7e:43:17:17:c9:43:42:7e:f1: 30:86:ba:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07VeMN5AOTwn480AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk Zjk3OTI5YWEtOTcyMC00Y2MyLTg0OWEtNzkwYzFhZmJkZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM0EUm7ua5kHZMRVU5D26P2rbXjauyBcc4jz QsTyjt80+WE/eZYc3KPofNKSkdKagUU8UR8LwofWA4M3YjjbnJxdo88eeRSeyGbF 9V0hpR6JaykvQs3xf+adlomdFPSrSPhqZfFeYMvd+l4Sn6LD1SynSLzehjStt4je 9qKusC6ixqrbVLAvZyTbhxNDfxqm4Q5ES8HZRuboPppym4+vexCcs9sWzt0jX7Ay YKzXx0CsUzVhhdOMvcuRVqG2b9+8I1s1z56JrdrYkeT++Yizq4pbXiYgZ0b/7izp dtP8EhSYspt7V8cvmYXkpTLO6j9636ryjoB4oY1DrJDEIe8BswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAPjbmu1HLsjPanwDd9C8JaZ4IXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJhZjlhMmItYTUxOS0z ODZkLTg5OTYtZTcxMzRjYzk2OGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi3oUJmmJ94n9g/blbv7ySDiNW7o9MCODFg6aJAklOYHA7+B3rr+I8p ycSblB2zBgzim6zeImLgF0I06un8C28dek2lKUVlHBKLsRMq593BYYV52EVGtZOC kzXN8bAdFSStYgGKmW7D+9IpMTsW1D3QhnAv5E07yHl5Ca/LD8dBeMsK76zWTwa5 ToLRdNT/5FwTOwwbpdbPjE5DRiHS29Pa+lZ0Q6rDMuA745xRJoIm5+5mWIqssE6g czfFJgfHBWlOkze9wYsKNJ5hUmtszTvqBnS5ulq9dPsPzM7yeDPv1VOzxlqMYNy4 ycBkFutB+EU1kH5DFxfJQ0J+8TCGuvg= -----END CERTIFICATE-----Generated at Wed Aug 6 11:04:19 2025 by rpki-client