$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7688609-61f0-3de3-b5d8-3be1d65e5b02.roa File: f7688609-61f0-3de3-b5d8-3be1d65e5b02.roa (raw, json) Hash identifier: 4SJOKNY/GSFMU5P1gclunCGGFZwsK9r4E5wT5Cfr6dk= Subject key identifier: 77:F6:1B:8B:95:27:5D:9B:65:BA:B3:CC:39:22:B7:06:B5:B6:F6:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EB9B78BEE426C1FAB13D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7688609-61f0-3de3-b5d8-3be1d65e5b02.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 71.238.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:9b:78:be:e4:26:c1:fa:b1:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=94d90bbf-5d6b-443b-b2c2-42074a9a1e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4d:0c:01:ed:de:fe:5c:cb:c6:a8:61:3e:4c: 50:0c:70:bc:6f:20:11:4a:30:71:aa:43:3a:3d:e8: 4a:df:1a:8e:2f:f9:ce:53:a1:96:b9:cf:09:27:41: fa:47:28:cc:3e:02:0c:97:31:4a:3a:f7:da:34:1a: 9a:5e:2c:e5:40:96:95:0c:df:dc:4d:32:f4:05:4b: dc:16:3b:d4:ad:83:98:2c:5a:1f:49:f1:c1:8b:c7: 97:b0:94:7c:01:56:8e:93:8c:0e:f3:5f:78:47:2d: f6:68:1b:fa:46:47:f2:5f:3f:4a:a4:47:f1:d4:0b: ae:43:45:06:7b:d1:76:42:bb:ee:58:f8:7b:4b:43: e5:b3:2f:cd:22:c7:26:ae:88:08:d9:f1:9f:8b:82: cd:e2:b0:a2:a8:58:bc:fc:2c:d4:db:f2:0b:a7:64: 9e:3a:fc:77:3f:e4:76:70:32:9a:81:8b:be:bf:17: 87:3b:a2:df:02:ca:9f:70:83:8d:86:b7:76:67:83: 17:12:e3:13:a0:b3:be:8b:3c:8c:90:ea:b6:38:22: c4:df:ec:ba:81:20:5e:91:c6:a6:ec:93:e4:ad:83: ea:0c:b3:fa:10:75:25:c2:05:1c:e5:81:42:70:b1: d4:29:0a:d4:f8:d2:97:97:f7:58:90:a8:b5:42:5b: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F6:1B:8B:95:27:5D:9B:65:BA:B3:CC:39:22:B7:06:B5:B6:F6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7688609-61f0-3de3-b5d8-3be1d65e5b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:47:af:12:49:d0:80:5c:2d:64:28:ee:6b:12:c2:1e:5f:26: 89:65:c9:4f:95:a4:4e:dd:d2:fd:bc:90:ea:3b:2e:39:23:ec: b7:bb:4c:d1:05:5b:fc:d2:a0:b5:88:de:80:2e:5a:13:d0:6e: 7c:96:be:f1:f7:5c:6e:8f:d2:8f:51:d9:17:17:ce:0d:bc:80: cc:20:24:e8:aa:49:7e:f4:f3:92:0b:23:45:d6:b9:64:ea:a0: b1:12:d4:47:98:34:a9:d9:4b:22:60:80:7c:dc:ef:a2:93:b1: 09:60:93:4a:5b:7f:54:4e:59:ed:e2:7b:e9:58:f7:32:17:fa: bd:b5:02:21:b6:06:2d:e2:38:95:ee:d9:2f:de:ef:04:f6:ea: a1:0e:02:42:0b:d7:36:78:b8:73:28:4e:77:fe:b6:48:67:68: 45:2d:08:75:d7:87:9f:f0:88:19:ab:07:c2:f6:f7:f4:a1:bf: 3e:0c:ca:ef:52:31:4d:98:44:f2:12:c4:9c:da:40:49:21:81: 00:fd:b3:09:ca:ea:cf:7b:ec:e5:04:aa:cc:f0:e1:b6:90:56: 1c:11:61:cf:66:d1:07:5a:e5:13:0b:de:15:da:ee:cb:46:3a: b5:0c:d2:0a:7b:c7:ed:46:4d:23:b2:47:ea:06:bb:66:be:ca: 67:bf:28:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq065t4vuQmwfqxPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OTRkOTBiYmYtNWQ2Yi00NDNiLWIyYzItNDIwNzRhOWExZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj00MAe3e/lzLxqhhPkxQDHC8byARSjBxqkM6 PehK3xqOL/nOU6GWuc8JJ0H6RyjMPgIMlzFKOvfaNBqaXizlQJaVDN/cTTL0BUvc FjvUrYOYLFofSfHBi8eXsJR8AVaOk4wO8194Ry32aBv6RkfyXz9KpEfx1AuuQ0UG e9F2QrvuWPh7S0Plsy/NIscmrogI2fGfi4LN4rCiqFi8/CzU2/ILp2SeOvx3P+R2 cDKagYu+vxeHO6LfAsqfcIONhrd2Z4MXEuMToLO+izyMkOq2OCLE3+y6gSBekcam 7JPkrYPqDLP6EHUlwgUc5YFCcLHUKQrU+NKXl/dYkKi1QltJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf2G4uVJ12bZbqzzDkitwa1tvaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjc2ODg2MDktNjFmMC0z ZGUzLWI1ZDgtM2JlMWQ2NWU1YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExHrxJJ0IBcLWQo7msSwh5fJollyU+VpE7d0v28kOo7Ljkj7Le7TNEF W/zSoLWI3oAuWhPQbnyWvvH3XG6P0o9R2RcXzg28gMwgJOiqSX7085ILI0XWuWTq oLES1EeYNKnZSyJggHzc76KTsQlgk0pbf1ROWe3ie+lY9zIX+r21AiG2Bi3iOJXu 2S/e7wT26qEOAkIL1zZ4uHMoTnf+tkhnaEUtCHXXh5/wiBmrB8L29/Shvz4Myu9S MU2YRPISxJzaQEkhgQD9swnK6s977OUEqszw4baQVhwRYc9m0Qda5RML3hXa7stG OrUM0gp7x+1GTSOyR+oGu2a+yme/KKI= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:03 2025 by rpki-client