$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa File: d966d503-7893-3029-a31a-2ca439bfc75d.roa (raw, json) Hash identifier: Q+pR6A5ZQLXVqJV27jeJ6Z1+WhjAJfoRYQoyc6WWQG4= Subject key identifier: 4A:98:93:95:EA:67:1C:A9:D9:09:D0:8D:18:6B:C1:F1:3B:BA:A5:2A Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E965196511969B58C1A6460 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 71.44.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:51:96:51:19:69:b5:8c:1a:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=f2ebd52a-d408-4529-984a-c21517260610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:2a:a5:b1:b0:21:c9:f2:53:3a:4c:32:f3: 05:f0:aa:71:66:11:32:2a:c5:16:5d:1f:40:cc:36: 89:7b:5e:fd:1b:a6:6c:e2:93:64:4b:0d:c6:23:9f: 54:ba:3c:04:2c:c4:48:1b:99:ea:f4:63:ce:e5:04: bc:d7:cb:0c:d5:b3:4a:75:ac:10:75:47:70:cf:99: ec:ff:9d:ad:ee:ac:ec:f7:7c:da:ab:11:bf:fa:e3: 04:ca:d5:e2:f0:39:02:28:e6:10:4e:c7:7a:b7:5c: 50:db:aa:3e:81:82:48:ae:74:47:58:25:44:22:2e: 57:94:61:05:f4:bb:23:b6:06:41:79:53:32:27:11: df:c1:d5:59:86:19:3e:ee:4b:8e:9a:13:d8:0a:d9: ca:2e:68:6c:13:99:f9:f5:a1:13:34:98:ff:a4:fd: 35:bc:f8:15:06:2c:44:e6:d3:cc:87:11:15:ad:df: b4:4d:1f:cd:ff:bc:aa:95:b8:c4:75:ef:78:3b:e0: 8c:a0:34:8d:b2:94:c7:79:58:c9:53:6f:11:a1:52: 32:09:0b:41:86:ae:2f:12:f3:e4:84:c8:dc:2c:18: 43:55:0b:6c:54:16:12:ec:a1:24:02:a4:ed:2d:72: 53:ba:8d:20:ef:f2:a0:cf:61:90:53:ac:d7:2a:b1: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:98:93:95:EA:67:1C:A9:D9:09:D0:8D:18:6B:C1:F1:3B:BA:A5:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d966d503-7893-3029-a31a-2ca439bfc75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:43:95:03:c0:93:43:52:1e:98:5e:9b:c4:8c:b7:71:27:61: 49:ae:3b:57:64:e7:4e:33:be:75:d2:a6:c2:8e:cc:10:41:45: ee:5c:82:c1:e0:f7:06:97:6f:6b:c2:c5:51:ef:42:b8:98:dc: 70:ed:d7:3f:68:f3:7c:d9:ab:65:6c:9f:ee:36:31:66:b5:d1: b1:0d:04:05:99:c4:1a:88:20:60:b2:37:d2:99:d2:6d:48:67: a9:f6:de:d6:71:76:f0:0f:aa:fe:40:ae:fe:35:a1:e9:43:5a: 5b:f3:84:d0:cc:7f:50:88:0e:e5:cd:eb:77:b9:50:9a:8e:f4: 25:cf:81:3c:e4:71:37:04:c0:83:32:17:6d:ed:ec:ae:c2:8e: 73:6b:5a:d0:48:bb:87:8c:5f:94:ab:4e:9a:7a:2d:3a:71:ec: 9c:19:5c:e3:e2:45:d2:14:2d:3a:56:4c:65:81:94:dc:5d:5b: 73:1e:1d:42:95:6a:62:58:8b:6f:f1:79:a1:13:e4:99:6c:bc: e6:77:ff:58:be:d5:f0:23:09:19:5f:fd:10:1f:4d:ab:a2:2c: 90:bd:7a:72:97:c7:fd:a9:00:26:18:59:af:18:a0:b1:04:80: d1:ec:07:0d:03:d2:0a:0e:f3:60:06:c7:02:7d:db:b2:72:82: 8e:ff:45:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellGWURlptYwaZGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZjJlYmQ1MmEtZDQwOC00NTI5LTk4NGEtYzIxNTE3MjYwNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRIqpbGwIcnyUzpMMvMF8KpxZhEyKsUWXR9A zDaJe179G6Zs4pNkSw3GI59UujwELMRIG5nq9GPO5QS818sM1bNKdawQdUdwz5ns /52t7qzs93zaqxG/+uMEytXi8DkCKOYQTsd6t1xQ26o+gYJIrnRHWCVEIi5XlGEF 9LsjtgZBeVMyJxHfwdVZhhk+7kuOmhPYCtnKLmhsE5n59aETNJj/pP01vPgVBixE 5tPMhxEVrd+0TR/N/7yqlbjEde94O+CMoDSNspTHeVjJU28RoVIyCQtBhq4vEvPk hMjcLBhDVQtsVBYS7KEkAqTtLXJTuo0g7/Kgz2GQU6zXKrGkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqYk5XqZxyp2QnQjRhrwfE7uqUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDk2NmQ1MDMtNzg5My0z MDI5LWEzMWEtMmNhNDM5YmZjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERyzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNDlQPAk0NSHphem8SMt3EnYUmuO1dk504zvnXSpsKOzBBBRe5cgsHg 9waXb2vCxVHvQriY3HDt1z9o83zZq2Vsn+42MWa10bENBAWZxBqIIGCyN9KZ0m1I Z6n23tZxdvAPqv5Arv41oelDWlvzhNDMf1CIDuXN63e5UJqO9CXPgTzkcTcEwIMy F23t7K7CjnNrWtBIu4eMX5SrTpp6LTpx7JwZXOPiRdIULTpWTGWBlNxdW3MeHUKV amJYi2/xeaET5JlsvOZ3/1i+1fAjCRlf/RAfTauiLJC9enKXx/2pACYYWa8YoLEE gNHsBw0D0goO82AGxwJ927Jygo7/ReA= -----END CERTIFICATE-----Generated at Mon Aug 4 16:10:33 2025 by rpki-client