$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/844cd1fe-6ee6-3057-b8e3-2291d857a7d7.roa File: 844cd1fe-6ee6-3057-b8e3-2291d857a7d7.roa (raw, json) Hash identifier: uZ9zgGaHkTghmaDqhD4hCejwx+8iIhtpv9N4fkjf9wI= Subject key identifier: 81:FF:A1:E0:6D:E5:E1:E9:9B:59:01:69:59:87:C3:99:89:02:A6:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD8990284A9E41C70CA800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/844cd1fe-6ee6-3057-b8e3-2291d857a7d7.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 71.27.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:89:90:28:4a:9e:41:c7:0c:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=66d1fd1a-a969-40e6-b21c-6b7fee9a8631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:11:e9:71:80:a7:cb:aa:de:ed:60:38:b2: 19:e9:df:0d:6f:91:20:8d:47:f2:4e:0e:87:86:89: f9:ba:38:61:fd:09:ac:94:f5:79:81:e8:5e:4b:b7: a4:9c:db:8b:b1:40:0d:a1:17:1a:e1:c0:59:bc:88: 2d:29:4b:7b:63:18:38:ac:2a:33:e3:a1:cc:04:4b: 3e:9f:05:74:31:9b:ff:86:f2:0a:b8:99:58:fa:20: 72:e3:1c:5a:95:aa:a7:e3:2e:88:83:05:f9:25:c4: 9f:35:40:7c:04:be:5c:fc:ea:a8:06:93:8a:31:f5: c5:97:75:c8:5c:af:61:b0:c3:8f:5c:03:bc:ab:7c: 32:b3:ad:3e:b1:de:43:e2:de:4c:c2:03:fe:f5:e5: fc:b9:ce:be:b3:40:15:5b:ae:04:5c:27:3a:68:da: 36:10:b6:12:12:86:da:f3:92:8d:1a:e4:8e:29:51: 7f:cd:5a:44:50:b6:21:67:ee:a7:32:7b:77:90:a1: b3:4d:65:38:b9:65:66:74:77:82:0a:9b:e9:a6:07: 69:fc:9a:23:72:de:4c:f2:64:36:31:ab:5b:ed:1d: 20:64:5f:ae:85:37:2f:3b:87:de:fe:bb:f0:df:12: 02:6e:b2:7f:03:57:95:3a:4e:82:0a:ef:c0:f5:e9: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FF:A1:E0:6D:E5:E1:E9:9B:59:01:69:59:87:C3:99:89:02:A6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/844cd1fe-6ee6-3057-b8e3-2291d857a7d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.27.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:fe:03:e7:58:eb:dd:4e:15:1e:39:16:89:ec:02:77:c7:18: b5:8c:06:6c:97:04:30:6b:cd:fa:6c:7c:7d:cb:ec:7c:43:ab: f6:f3:7a:b3:5b:8e:bd:b8:1c:ce:3b:c6:f1:b4:8e:ce:65:b3: f0:dc:63:65:f5:08:91:1e:ab:d9:bf:e6:1a:55:72:0c:d4:a8: fa:b8:df:dc:03:13:0d:7e:2a:a3:aa:11:2e:d2:28:e9:96:e4: 6e:81:93:fb:d5:7d:76:07:1c:88:2f:2a:11:af:41:3a:f3:4c: a7:67:56:de:5c:f3:8b:2e:f7:de:56:f6:9c:4e:68:7a:0d:79: dd:e1:3a:af:cb:34:47:19:72:8c:46:ef:aa:4a:38:c3:a6:3c: 3b:a2:45:24:d6:bd:2f:d9:8f:48:a3:ee:b4:62:f9:7a:1c:86: d0:c3:f1:6c:cd:a5:19:42:d6:2f:2b:4c:95:47:14:d1:f1:ac: 48:35:d2:8c:d8:d3:c2:ad:df:19:ac:ff:22:f5:50:1d:60:30: be:23:35:f8:43:12:8c:45:cc:95:28:39:7f:64:84:22:9f:3b: 3c:3f:80:53:88:8e:59:44:6d:50:7f:29:05:c4:65:f7:16:38: 13:97:63:a6:f5:62:81:d4:75:76:c5:10:b9:c8:0b:57:d5:50: 65:ef:49:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/YmQKEqeQccMqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NjZkMWZkMWEtYTk2OS00MGU2LWIyMWMtNmI3ZmVlOWE4NjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA040R6XGAp8uq3u1gOLIZ6d8Nb5EgjUfyTg6H hon5ujhh/QmslPV5geheS7eknNuLsUANoRca4cBZvIgtKUt7Yxg4rCoz46HMBEs+ nwV0MZv/hvIKuJlY+iBy4xxalaqn4y6IgwX5JcSfNUB8BL5c/OqoBpOKMfXFl3XI XK9hsMOPXAO8q3wys60+sd5D4t5MwgP+9eX8uc6+s0AVW64EXCc6aNo2ELYSEoba 85KNGuSOKVF/zVpEULYhZ+6nMnt3kKGzTWU4uWVmdHeCCpvppgdp/Jojct5M8mQ2 Matb7R0gZF+uhTcvO4fe/rvw3xICbrJ/A1eVOk6CCu/A9ekkNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIH/oeBt5eHpm1kBaVmHw5mJAqboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQ0Y2QxZmUtNmVlNi0z MDU3LWI4ZTMtMjI5MWQ4NTdhN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRxsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3+A+dY691OFR45FonsAnfHGLWMBmyXBDBrzfpsfH3L7HxDq/bzerNb jr24HM47xvG0js5ls/DcY2X1CJEeq9m/5hpVcgzUqPq439wDEw1+KqOqES7SKOmW 5G6Bk/vVfXYHHIgvKhGvQTrzTKdnVt5c84su995W9pxOaHoNed3hOq/LNEcZcoxG 76pKOMOmPDuiRSTWvS/Zj0ij7rRi+XochtDD8WzNpRlC1i8rTJVHFNHxrEg10ozY 08Kt3xms/yL1UB1gML4jNfhDEoxFzJUoOX9khCKfOzw/gFOIjllEbVB/KQXEZfcW OBOXY6b1YoHUdXbFELnIC1fVUGXvSVM= -----END CERTIFICATE-----Generated at Sun Jul 20 17:41:07 2025 by rpki-client