$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a960d80-b25a-37e6-be11-1e76d52d193c.roa File: 8a960d80-b25a-37e6-be11-1e76d52d193c.roa (raw, json) Hash identifier: bdi32H3QD5wefmRtl3sWCa0vkV7GuR+PPF4ZxIePQOc= Subject key identifier: 7C:7F:EB:8D:0B:8E:51:BF:C2:5A:37:77:A5:AF:5C:87:C4:CA:B0:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD211458AEFC09C30D9640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a960d80-b25a-37e6-be11-1e76d52d193c.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33652 IP address blocks: 71.237.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:21:14:58:ae:fc:09:c3:0d:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b0accebd-4f6a-4b37-8fdf-52db6658ff09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:00:b0:44:6d:ec:09:33:4c:b1:38:1d:ef: 6c:27:f4:76:d9:dd:b0:c4:36:f6:86:dd:32:14:f6: 0f:b8:4c:81:8b:b9:be:d5:66:07:a8:c0:b1:49:18: 45:da:92:b3:fb:8e:87:f0:cd:6e:d0:85:6e:4f:be: 52:57:57:d2:c7:75:11:a9:46:ca:04:44:16:f1:b2: 3a:ab:37:ab:88:ca:66:f0:f9:c2:a9:8a:25:32:72: 81:da:04:d6:ac:08:95:b6:b9:48:3d:fa:9b:93:ac: 72:22:c2:f0:b6:f5:9b:13:5b:e0:a9:3b:cd:64:68: f5:e0:c5:da:b6:1d:47:46:71:76:63:b4:a8:15:fb: 40:da:36:20:fa:96:ee:29:c6:eb:b0:c3:34:45:86: 85:2c:7c:f2:27:74:11:5d:f1:09:fe:76:2c:69:09: a9:6c:ba:a9:54:b3:be:48:a0:08:0d:4f:2d:0b:29: e7:89:fa:da:56:1c:c0:96:04:81:c7:2c:29:bd:34: 59:c2:75:1e:48:bf:8a:48:35:89:20:5a:7b:ba:13: 7f:57:92:bc:0d:e0:66:7f:3c:89:e3:d8:29:e9:ac: 52:70:c3:81:58:ac:f3:51:44:09:c8:50:fa:50:ad: b1:07:b9:84:a7:78:f8:5a:10:49:6d:af:ae:91:53: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7F:EB:8D:0B:8E:51:BF:C2:5A:37:77:A5:AF:5C:87:C4:CA:B0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a960d80-b25a-37e6-be11-1e76d52d193c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3c:10:e9:5a:11:d9:4a:51:d5:f0:95:4a:76:25:92:4b:f3: 3e:4d:9c:80:6a:23:cb:11:8a:7f:80:f7:7f:42:7c:48:cb:ff: 7f:74:16:33:85:e8:95:ec:5b:b2:8b:cd:20:2e:08:02:3c:40: 14:54:f4:8e:71:bb:15:91:b7:b3:ca:a1:97:32:2b:d7:4a:a8: 8d:6d:9a:6b:9c:3d:ea:33:44:fb:d8:4d:67:01:e1:31:4c:af: e8:e5:18:d5:1b:16:de:85:8a:52:7b:f8:50:38:28:e1:d1:80: ce:48:4f:be:32:83:04:42:71:94:a8:70:f7:1e:46:58:cb:d8: 6f:b6:2c:84:45:7c:37:7f:b8:b2:44:a1:26:07:9d:7f:7b:d9: f0:df:92:d0:43:eb:c1:e7:d1:9c:bb:c5:d2:a2:8e:72:76:70: 35:b4:60:a3:06:dc:96:f7:92:dc:fa:0d:b1:34:34:2f:f0:ec: 94:71:17:91:84:6c:26:06:d6:0a:e0:bb:40:8c:bc:1b:e0:ad: f7:59:f0:46:bd:86:c6:23:4c:41:92:e7:ac:9e:35:bd:bd:b3: 6b:42:9e:2f:74:ff:e9:5f:ef:84:1d:02:25:4d:2f:27:3d:72: bb:d3:9f:1b:ca:8f:b6:1a:a9:19:a4:d2:4a:a3:e4:a5:77:e0: bc:51:d1:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/SEUWK78CcMNlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjBhY2NlYmQtNGY2YS00YjM3LThmZGYtNTJkYjY2NThmZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+sAsERt7AkzTLE4He9sJ/R22d2wxDb2ht0y FPYPuEyBi7m+1WYHqMCxSRhF2pKz+46H8M1u0IVuT75SV1fSx3URqUbKBEQW8bI6 qzeriMpm8PnCqYolMnKB2gTWrAiVtrlIPfqbk6xyIsLwtvWbE1vgqTvNZGj14MXa th1HRnF2Y7SoFftA2jYg+pbuKcbrsMM0RYaFLHzyJ3QRXfEJ/nYsaQmpbLqpVLO+ SKAIDU8tCynnifraVhzAlgSBxywpvTRZwnUeSL+KSDWJIFp7uhN/V5K8DeBmfzyJ 49gp6axScMOBWKzzUUQJyFD6UK2xB7mEp3j4WhBJba+ukVOM/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx/640LjlG/wlo3d6WvXIfEyrBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE5NjBkODAtYjI1YS0z N2U2LWJlMTEtMWU3NmQ1MmQxOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR+0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg8EOlaEdlKUdXwlUp2JZJL8z5NnIBqI8sRin+A939CfEjL/390FjOF 6JXsW7KLzSAuCAI8QBRU9I5xuxWRt7PKoZcyK9dKqI1tmmucPeozRPvYTWcB4TFM r+jlGNUbFt6FilJ7+FA4KOHRgM5IT74ygwRCcZSocPceRljL2G+2LIRFfDd/uLJE oSYHnX972fDfktBD68Hn0Zy7xdKijnJ2cDW0YKMG3Jb3ktz6DbE0NC/w7JRxF5GE bCYG1grgu0CMvBvgrfdZ8Ea9hsYjTEGS56yeNb29s2tCni90/+lf74QdAiVNLyc9 crvTnxvKj7YaqRmk0kqj5KV34LxR0Zk= -----END CERTIFICATE-----Generated at Sun Jul 20 17:30:04 2025 by rpki-client