$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa File: d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa (raw, json) Hash identifier: jRqdgEnoo4uJmgR5NBekU+OUIWfLU7gKoJrxvh7n6Yk= Subject key identifier: EB:0D:EE:AD:17:D5:B3:30:36:F5:4A:E5:8D:6E:E2:E8:33:45:B9:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB9AE4BB4BCC7C2FBD1280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 71.237.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:9a:e4:bb:4b:cc:7c:2f:bd:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=07a71bc3-e06f-4b0c-8046-a249b8cc9bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cd:a8:6e:6c:34:c0:44:0b:dc:64:af:96:a1: 4e:01:4e:03:5c:7d:26:3a:ba:c4:19:bc:fa:9c:4c: 5d:90:d5:cf:71:bb:aa:c8:98:0e:e7:c3:50:6d:ff: 0a:de:d5:7c:e0:d2:bc:9b:28:a9:3f:30:8f:40:de: 92:3e:f5:49:b6:56:27:87:fe:4d:7b:19:71:5f:f4: db:90:5b:1f:c8:ea:fb:0f:b7:fd:26:80:b5:0a:38: bb:b5:da:a9:03:ee:2e:65:b4:57:87:2e:73:dc:2a: e7:c6:51:c1:3c:4b:47:e5:ca:11:0b:91:a1:66:f7: 3a:e2:6a:68:70:34:31:c2:81:d4:c2:1f:7b:c3:57: 1d:e8:91:4a:5f:75:f8:25:b9:1e:53:28:a8:a8:dc: 89:55:78:4a:b9:13:17:6d:2e:6d:ff:ae:62:aa:f9: ea:f4:6e:8c:47:db:b1:ff:06:6b:1f:35:39:64:32: 66:7c:91:cc:6a:16:d1:61:1f:f4:17:57:b7:b3:79: 82:7e:be:72:bb:5a:b0:65:f8:e2:6b:92:78:7b:f3: 58:84:20:7d:c6:8f:8c:e6:16:3c:6d:25:7a:4c:7f: e3:ac:88:09:8b:b8:34:9f:21:d5:b9:d5:97:cb:fe: c6:f1:cb:da:bc:87:03:b9:64:c2:6c:79:8f:c6:5a: 29:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0D:EE:AD:17:D5:B3:30:36:F5:4A:E5:8D:6E:E2:E8:33:45:B9:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e4:57:93:81:3f:67:2f:ae:98:da:a7:b5:c1:95:75:e0:8e: eb:25:78:fe:fe:4b:ab:d0:4d:5a:23:d3:50:5a:49:61:2a:e3: 30:3a:8d:eb:c8:e1:b7:db:8e:90:f7:68:f8:a9:19:7d:8f:ff: 7d:99:71:7f:bb:f9:2e:d2:78:48:13:ae:17:f8:84:b8:f7:38: 24:b2:66:13:96:4d:14:79:d0:13:e2:66:be:8f:5f:99:dd:ae: 33:98:72:34:34:34:8c:74:ce:66:06:bd:cf:e6:4a:44:a7:72: 48:6d:76:ae:5c:98:10:72:02:66:ca:bc:2e:6b:9d:91:27:aa: 97:8b:57:cf:d3:8d:43:06:23:bd:1a:68:c6:f3:29:eb:d0:97: 67:b8:7d:0c:04:5f:3e:ec:6b:21:3b:b1:ad:77:5e:6f:92:95: e5:26:b5:66:9f:9e:a2:29:5a:3d:0b:60:20:78:c7:59:a2:fe: 8f:40:14:7d:71:b9:99:3d:c5:b7:de:c7:c1:a9:fd:13:d6:9a: 1a:03:80:87:f0:cf:2d:8d:fc:c4:83:aa:d9:08:bb:6b:19:43: 0f:e9:8b:ed:fd:45:21:36:f1:2a:48:03:9d:91:43:e6:c8:22: 1e:75:fd:ed:0e:59:eb:c1:75:b2:7a:77:67:fb:c3:9d:e8:1e: 89:37:47:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq065rku0vMfC+9EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDdhNzFiYzMtZTA2Zi00YjBjLTgwNDYtYTI0OWI4Y2M5YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl82obmw0wEQL3GSvlqFOAU4DXH0mOrrEGbz6 nExdkNXPcbuqyJgO58NQbf8K3tV84NK8myipPzCPQN6SPvVJtlYnh/5NexlxX/Tb kFsfyOr7D7f9JoC1Cji7tdqpA+4uZbRXhy5z3CrnxlHBPEtH5coRC5GhZvc64mpo cDQxwoHUwh97w1cd6JFKX3X4JbkeUyioqNyJVXhKuRMXbS5t/65iqvnq9G6MR9ux /wZrHzU5ZDJmfJHMahbRYR/0F1e3s3mCfr5yu1qwZfjia5J4e/NYhCB9xo+M5hY8 bSV6TH/jrIgJi7g0nyHVudWXy/7G8cvavIcDuWTCbHmPxlopjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsN7q0X1bMwNvVK5Y1u4ugzRbl+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDlhYWY0YmUtMmE5Zi0z ZDNhLTk2ZDUtODNlM2NkNTVhOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/kV5OBP2cvrpjap7XBlXXgjusleP7+S6vQTVoj01BaSWEq4zA6jevI 4bfbjpD3aPipGX2P/32ZcX+7+S7SeEgTrhf4hLj3OCSyZhOWTRR50BPiZr6PX5nd rjOYcjQ0NIx0zmYGvc/mSkSnckhtdq5cmBByAmbKvC5rnZEnqpeLV8/TjUMGI70a aMbzKevQl2e4fQwEXz7sayE7sa13Xm+SleUmtWafnqIpWj0LYCB4x1mi/o9AFH1x uZk9xbfex8Gp/RPWmhoDgIfwzy2N/MSDqtkIu2sZQw/pi+39RSE28SpIA52RQ+bI Ih51/e0OWevBdbJ6d2f7w53oHok3R9E= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:57 2025 by rpki-client