$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87bbe647-eb87-3786-9227-da902d677452.roa File: 87bbe647-eb87-3786-9227-da902d677452.roa (raw, json) Hash identifier: 65bkTKDgnppLxw3sus601vP3ovfLJuHp7MDNf2Gh6HM= Subject key identifier: FC:9A:7B:B4:8F:94:F5:A2:38:8F:BE:41:A3:C3:6A:69:B7:9E:70:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB9640FAFFDD174C9846F8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87bbe647-eb87-3786-9227-da902d677452.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 71.193.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:96:40:fa:ff:dd:17:4c:98:46:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a674fa12-ad07-4594-9ffb-04540a9ac7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:47:a0:d4:f5:94:f0:29:d1:3a:15:b6:96: a0:51:1b:1c:05:05:c4:f8:95:99:12:a2:44:89:0e: 91:1a:a7:b0:b1:9c:a5:f7:9f:7f:e0:c8:b8:09:1d: e1:40:c4:4c:b2:e5:bb:f0:15:b4:53:65:f7:c0:7d: c3:8b:f3:d3:e5:b5:fd:ed:fe:3a:6b:2c:2c:2b:98: e0:14:80:e3:28:29:06:5b:56:1f:9a:04:c3:a7:ac: 9c:0d:49:ec:f7:6f:51:11:d4:7e:98:43:41:72:a0: a3:c1:68:ab:0b:25:47:1a:7f:76:df:ca:94:10:54: de:9f:66:b1:9a:58:e2:86:48:0e:cc:ca:c5:69:8d: 02:c5:d1:4b:e5:b2:29:d1:42:a7:3a:7d:63:0a:a6: c9:a9:04:0f:30:ba:5a:15:06:3f:28:4f:0d:5f:b9: cb:cd:8d:fe:83:74:12:dc:6c:f8:28:a2:47:ea:36: d5:15:d8:a6:2e:86:72:10:7f:a8:83:c4:db:21:c2: be:d0:1d:91:8c:39:b9:31:b7:5e:a7:4c:2e:2d:72: 23:e4:b9:0a:00:6c:e0:d9:10:fa:a4:b9:21:05:45: e0:b2:aa:2d:9b:d4:bd:f4:69:b0:c9:31:1f:54:b8: f6:65:ee:59:87:bf:2e:ed:e7:21:76:e0:bc:3a:c0: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9A:7B:B4:8F:94:F5:A2:38:8F:BE:41:A3:C3:6A:69:B7:9E:70:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87bbe647-eb87-3786-9227-da902d677452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:77:ec:fa:97:1d:b0:7a:43:2b:63:05:76:63:42:d6:bb:2d: ab:ea:31:cc:ae:df:52:ab:92:f4:b7:f2:62:9c:70:41:98:6b: fb:d6:fc:c3:c4:b6:0c:74:be:43:bd:4c:91:87:12:1a:47:61: 69:0c:09:92:52:0d:74:cc:78:8c:ce:65:e9:d5:bd:37:3b:97: ac:44:9a:ee:2f:7c:74:e0:c2:66:79:26:43:44:88:24:9d:a7: be:f2:52:54:35:a0:8a:d7:74:95:1a:ab:b5:40:24:fd:15:7e: 5a:33:3a:d5:c0:a2:3a:3f:3a:7c:08:6f:97:6e:7e:23:db:d0: 36:f2:45:9a:e6:17:59:5a:ac:b6:24:d3:3b:83:fa:8f:b8:76: 6d:92:25:b0:d5:69:2e:99:55:c8:22:ab:79:35:19:ca:db:59: 57:a4:03:22:32:e8:4c:ef:94:f3:08:ee:52:3a:e6:fb:80:b3: 5d:0d:a0:ef:69:39:f3:88:34:6a:fb:b5:1f:b9:a2:6a:16:c8: cb:71:ea:cf:e7:27:c3:41:7b:48:c2:5c:6d:58:4e:76:89:49: f4:75:c9:69:6d:24:ff:34:ac:fa:ac:90:9c:33:50:20:ee:68: 76:8d:4e:2b:c7:c0:68:3a:e2:fe:76:58:fe:fa:f8:48:a7:2e: dd:66:4e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq065ZA+v/dF0yYRvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTY3NGZhMTItYWQwNy00NTk0LTlmZmItMDQ1NDBhOWFjN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR1HoNT1lPAp0ToVtpagURscBQXE+JWZEqJE iQ6RGqewsZyl959/4Mi4CR3hQMRMsuW78BW0U2X3wH3Di/PT5bX97f46aywsK5jg FIDjKCkGW1YfmgTDp6ycDUns929REdR+mENBcqCjwWirCyVHGn9238qUEFTen2ax mljihkgOzMrFaY0CxdFL5bIp0UKnOn1jCqbJqQQPMLpaFQY/KE8NX7nLzY3+g3QS 3Gz4KKJH6jbVFdimLoZyEH+og8TbIcK+0B2RjDm5Mbdep0wuLXIj5LkKAGzg2RD6 pLkhBUXgsqotm9S99GmwyTEfVLj2Ze5Zh78u7echduC8OsAfSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyae7SPlPWiOI++QaPDamm3nnATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdiYmU2NDctZWI4Ny0z Nzg2LTkyMjctZGE5MDJkNjc3NDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR8HhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ37PqXHbB6QytjBXZjQta7LavqMcyu31KrkvS38mKccEGYa/vW/MPE tgx0vkO9TJGHEhpHYWkMCZJSDXTMeIzOZenVvTc7l6xEmu4vfHTgwmZ5JkNEiCSd p77yUlQ1oIrXdJUaq7VAJP0VflozOtXAojo/OnwIb5dufiPb0DbyRZrmF1larLYk 0zuD+o+4dm2SJbDVaS6ZVcgiq3k1GcrbWVekAyIy6EzvlPMI7lI65vuAs10NoO9p OfOINGr7tR+5omoWyMtx6s/nJ8NBe0jCXG1YTnaJSfR1yWltJP80rPqskJwzUCDu aHaNTivHwGg64v52WP76+EinLt1mToc= -----END CERTIFICATE-----Generated at Sat Aug 9 15:11:11 2025 by rpki-client