$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa File: aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa (raw, json) Hash identifier: aeY2YUgs59kVLPgzlDdbFe+smESrK1wRwPvwmPW/qTo= Subject key identifier: 05:FE:DA:B9:31:38:89:6F:AD:BD:37:4F:AF:B7:C1:4A:92:9D:A6:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB9C7CF9F2E523FAEAC900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 71.238.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:9c:7c:f9:f2:e5:23:fa:ea:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=0e0d8d48-0e02-4f65-bf80-ac78a4c4b0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:63:43:59:b6:f4:0c:27:81:d2:13:b2:e2: 16:8e:74:ba:8d:bb:0a:1f:13:95:31:e5:17:97:b2: e4:44:98:0c:ff:81:2f:c7:50:84:7e:77:d0:7b:af: 5f:22:c8:55:2c:66:ff:75:43:c8:92:34:5e:d2:a4: 81:96:9c:7e:1c:d1:a7:26:ed:1a:54:ed:5e:e8:1c: a7:a6:b2:4a:ba:a5:00:f6:7a:ca:50:43:3a:82:0c: 1a:15:e1:95:bc:aa:4c:4f:54:b5:85:b2:07:19:d1: bb:8c:9f:e4:bf:25:69:b3:3e:09:3c:b4:d6:01:95: 67:59:e8:05:ff:e3:05:13:41:75:c2:62:ef:f1:9b: 43:c0:78:d1:95:9c:38:15:2d:67:2e:5b:58:9a:fe: 0d:aa:e0:d6:cd:8f:3d:ae:6e:28:eb:ee:60:26:b6: 73:14:81:7c:07:78:a7:0f:4f:12:d9:39:bf:62:da: 76:d2:df:a4:2e:18:d6:6f:0a:c8:d3:c7:72:b8:ad: 76:8c:0a:c6:37:07:d2:09:99:a9:eb:5f:a8:85:ab: df:13:c5:4b:69:3c:54:10:30:47:b6:0f:bc:5e:f5: ca:02:05:8e:04:d9:91:54:87:77:e8:81:ff:94:9a: ec:fa:0e:97:a4:5a:8c:29:2a:dd:b8:c0:f7:78:ec: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FE:DA:B9:31:38:89:6F:AD:BD:37:4F:AF:B7:C1:4A:92:9D:A6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:43:38:68:f7:16:99:99:75:23:b1:38:e2:61:15:cf:ba:bb: 95:8d:ec:14:5e:78:6e:67:6c:06:4c:39:78:82:33:fb:57:02: 82:a5:e3:b4:18:6f:a8:bd:a8:36:8a:53:49:d0:ad:e0:a4:f0: 10:13:87:4c:18:02:47:e6:54:1e:d9:ae:96:b3:9f:16:87:35: 12:ed:d4:79:9a:3c:8d:d8:0d:59:5c:4c:2b:e4:88:a0:27:ac: 51:67:3f:cc:4e:43:17:0c:a4:67:fb:4b:f3:ba:09:cf:cd:f5: 0a:63:20:01:1a:8b:35:54:cc:b8:53:5b:0f:1d:cd:de:a1:69: 92:db:e7:53:08:df:73:71:1c:61:7f:e5:c3:49:d5:70:58:fa: 55:65:55:8f:30:87:d0:2e:55:af:1d:95:7d:c9:c6:0f:24:3a: 96:1e:f4:68:71:01:9f:68:24:3e:73:52:0e:f7:a8:2c:f8:a2: f4:4d:70:0d:b2:30:59:27:39:6e:72:f0:07:31:d2:4c:ee:dc: 6c:78:2f:d4:b8:66:a7:25:30:06:1a:3a:bf:c0:23:c5:1d:38: ee:5e:bc:9a:17:ce:28:79:be:1e:8f:45:ac:32:aa:35:7d:46: ef:e4:1b:7b:17:e6:90:c2:a4:3c:fc:2e:42:29:3b:8c:0b:61: 4c:41:a4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq065x8+fLlI/rqyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGUwZDhkNDgtMGUwMi00ZjY1LWJmODAtYWM3OGE0YzRiMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AhjQ1m29AwngdITsuIWjnS6jbsKHxOVMeUX l7LkRJgM/4Evx1CEfnfQe69fIshVLGb/dUPIkjRe0qSBlpx+HNGnJu0aVO1e6Byn prJKuqUA9nrKUEM6ggwaFeGVvKpMT1S1hbIHGdG7jJ/kvyVpsz4JPLTWAZVnWegF /+MFE0F1wmLv8ZtDwHjRlZw4FS1nLltYmv4NquDWzY89rm4o6+5gJrZzFIF8B3in D08S2Tm/Ytp20t+kLhjWbwrI08dyuK12jArGNwfSCZmp61+ohavfE8VLaTxUEDBH tg+8XvXKAgWOBNmRVId36IH/lJrs+g6XpFqMKSrduMD3eOxipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX+2rkxOIlvrb03T6+3wUqSnaZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZmNjRlNGEtMGU3NC0z Y2M1LThiNDAtNTcwNzg2ZDhhMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVDOGj3FpmZdSOxOOJhFc+6u5WN7BReeG5nbAZMOXiCM/tXAoKl47QY b6i9qDaKU0nQreCk8BATh0wYAkfmVB7ZrpaznxaHNRLt1HmaPI3YDVlcTCvkiKAn rFFnP8xOQxcMpGf7S/O6Cc/N9QpjIAEaizVUzLhTWw8dzd6haZLb51MI33NxHGF/ 5cNJ1XBY+lVlVY8wh9AuVa8dlX3Jxg8kOpYe9GhxAZ9oJD5zUg73qCz4ovRNcA2y MFknOW5y8Acx0kzu3Gx4L9S4ZqclMAYaOr/AI8UdOO5evJoXzih5vh6PRawyqjV9 Ru/kG3sX5pDCpDz8LkIpO4wLYUxBpEM= -----END CERTIFICATE-----Generated at Wed Aug 6 11:17:51 2025 by rpki-client