$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa File: a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa (raw, json) Hash identifier: 0gTxbPG8mAb92COp5c/PIHbfMPDJv5nE/eMHk6kDrrY= Subject key identifier: 75:6C:CD:D5:52:C8:D9:E5:0D:6A:84:7D:30:B4:6F:D5:60:D9:8C:2F Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E9655202BA9D1339D0E5A00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 71.44.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:55:20:2b:a9:d1:33:9d:0e:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=7f059307-5aec-45bc-af69-6634953fd603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:28:f1:1c:34:dc:bf:db:f4:ff:f5:20:fe: 1c:a6:e0:1c:61:54:21:e3:53:20:3f:bf:0b:20:17: 26:67:dd:8d:6b:66:3c:f1:d2:40:92:cd:d1:98:fa: 3b:d9:60:80:e1:55:38:d3:23:45:e7:c7:9e:0e:40: 7c:64:a6:9b:2b:c5:c7:46:24:13:23:a2:5f:bd:5c: 4f:b1:60:8d:16:f6:b7:4f:47:30:64:2a:90:19:74: 99:72:7b:5f:11:f7:30:40:2e:a6:3d:72:2f:10:f8: fb:ef:88:b9:7b:b6:b6:2d:48:d8:36:39:ab:de:f7: d4:4b:3a:6d:cf:76:b7:43:46:2b:c8:fe:45:87:c7: fa:b1:2b:78:50:10:ac:a1:37:17:e3:a0:92:2a:ba: 32:04:7f:60:e3:f0:30:36:30:60:ce:6c:63:51:e4: 95:0a:4a:b3:4e:2b:ce:d6:60:ce:9d:45:06:5c:a7: c5:34:74:f2:b3:84:09:c4:bd:8d:96:cf:b8:43:e5: 08:ae:07:c6:1c:35:36:e3:92:5e:03:79:d5:32:00: a0:fd:1b:16:85:bf:a4:6d:b5:fd:27:0c:ad:50:e9: 09:2c:bb:4a:f5:b5:da:ae:98:9f:0a:ce:db:d8:c5: 43:7b:74:6b:ce:f6:80:a2:2d:5c:2d:8c:2a:07:46: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6C:CD:D5:52:C8:D9:E5:0D:6A:84:7D:30:B4:6F:D5:60:D9:8C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a4f11fc9-3a63-3932-bf34-f7d6ef3c90b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:42:2f:78:eb:83:d9:bb:05:7b:89:6b:ff:4b:ff:61:ee:c2: 1c:e5:21:1e:04:a4:35:1e:53:b0:f7:31:be:9a:b3:6d:71:9f: 75:71:42:52:dc:a2:7d:54:52:be:d2:a6:ab:f9:f1:42:da:0b: b4:d7:24:a0:d3:f6:39:1e:c2:7f:ed:9f:6b:f5:85:28:ff:13: 42:dd:cc:6c:03:89:9c:46:80:60:ff:8d:86:f9:91:48:c8:46: 69:28:1c:ad:90:3e:7f:e6:d3:4a:fb:ee:76:81:78:4e:61:9e: c7:bc:b9:c2:8f:b6:7c:d8:a5:d0:2d:2b:0d:5b:0a:e0:9c:65: 1e:93:a8:67:3e:db:3d:66:6e:ff:71:c2:10:33:aa:35:ea:63: 93:5a:54:90:69:c5:c2:12:56:64:9d:03:f2:07:6e:c5:1c:04: dd:2c:c5:c8:8b:7d:cc:aa:cf:d2:13:ba:b6:98:4b:43:fe:a1: bb:02:c4:0b:65:b2:4a:37:9e:a5:bc:fd:a2:44:f0:d4:bb:8e: c6:8a:84:4f:9b:34:b9:d2:dc:20:9c:a7:c3:e9:3d:99:08:ef: ba:ed:94:66:62:9b:d6:ff:51:63:60:c9:16:51:f6:75:26:f8: b0:ac:8a:2b:86:ce:a0:76:1d:d2:31:14:98:1e:b5:3a:12:ae: 0f:d2:67:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellUgK6nRM50OWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk N2YwNTkzMDctNWFlYy00NWJjLWFmNjktNjYzNDk1M2ZkNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9so8Rw03L/b9P/1IP4cpuAcYVQh41MgP78L IBcmZ92Na2Y88dJAks3RmPo72WCA4VU40yNF58eeDkB8ZKabK8XHRiQTI6JfvVxP sWCNFva3T0cwZCqQGXSZcntfEfcwQC6mPXIvEPj774i5e7a2LUjYNjmr3vfUSzpt z3a3Q0YryP5Fh8f6sSt4UBCsoTcX46CSKroyBH9g4/AwNjBgzmxjUeSVCkqzTivO 1mDOnUUGXKfFNHTys4QJxL2Nls+4Q+UIrgfGHDU245JeA3nVMgCg/RsWhb+kbbX9 JwytUOkJLLtK9bXarpifCs7b2MVDe3RrzvaAoi1cLYwqB0YdPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVszdVSyNnlDWqEfTC0b9Vg2YwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTRmMTFmYzktM2E2My0z OTMyLWJmMzQtZjdkNmVmM2M5MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRyxmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZCL3jrg9m7BXuJa/9L/2HuwhzlIR4EpDUeU7D3Mb6as21xn3VxQlLc on1UUr7Spqv58ULaC7TXJKDT9jkewn/tn2v1hSj/E0LdzGwDiZxGgGD/jYb5kUjI RmkoHK2QPn/m00r77naBeE5hnse8ucKPtnzYpdAtKw1bCuCcZR6TqGc+2z1mbv9x whAzqjXqY5NaVJBpxcISVmSdA/IHbsUcBN0sxciLfcyqz9ITuraYS0P+obsCxAtl sko3nqW8/aJE8NS7jsaKhE+bNLnS3CCcp8PpPZkI77rtlGZim9b/UWNgyRZR9nUm +LCsiiuGzqB2HdIxFJgetToSrg/SZ50= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:46 2025 by rpki-client