$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa File: a11e2bc2-1e0e-354d-bd14-108c085092c8.roa (raw, json) Hash identifier: eQH3X+gmDSGXzhSrwSXK+uWGXi1707A09z0emk9rXpE= Subject key identifier: 40:6A:B4:0A:11:1D:0C:75:41:45:56:49:7B:7A:F6:7B:D3:00:1D:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCB3193ABDC8C6FB4C3568 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 71.228.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:b3:19:3a:bd:c8:c6:fb:4c:35:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=75c4e642-8113-499a-950d-72de3eb05603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:26:d0:17:74:b4:13:87:bf:6a:ed:84:aa: 7a:14:bf:b7:fb:42:5b:8e:6d:59:ad:dd:6a:6c:cb: d9:60:88:74:35:bb:20:fd:24:4c:75:49:bb:6e:53: e9:a2:78:24:01:d8:2e:75:88:53:94:43:6e:c2:62: 9e:b7:84:69:ca:9e:5d:fa:84:8a:04:b8:35:1c:42: 38:7f:d1:c7:b3:45:fa:6e:fc:99:7d:fd:9a:ac:58: 93:3f:b4:aa:6a:18:22:88:f8:4d:46:c6:56:c2:cb: 4b:59:6e:4e:9c:d3:91:29:ca:30:a5:4a:08:7b:72: 5b:7b:d8:81:03:c3:69:95:8d:a9:ec:3d:8d:58:4d: db:6b:7e:12:dd:f6:b7:9f:82:d1:86:14:24:ef:84: 9d:ae:87:b9:72:65:04:69:e2:ab:d6:6a:f9:41:85: c3:5d:f4:03:56:a8:84:02:c0:f8:19:ff:e4:08:a2: 0f:29:ca:b7:28:4f:c5:50:2b:5a:a2:2b:52:07:4e: fa:2d:66:00:59:81:95:29:b8:6f:e6:7e:ba:aa:e6: 99:b6:0a:43:a3:c5:58:5f:b1:4b:25:07:dd:ed:f2: d9:43:b0:94:9c:0e:b5:ef:35:d4:1e:03:aa:57:86: 46:a1:e5:b6:68:15:2c:da:f9:70:1f:91:8a:33:e7: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:B4:0A:11:1D:0C:75:41:45:56:49:7B:7A:F6:7B:D3:00:1D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a11e2bc2-1e0e-354d-bd14-108c085092c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2c:ce:23:21:50:f2:e3:63:d9:87:d7:50:6b:a2:1e:84:84: e1:84:e0:e0:53:ef:67:0c:11:2a:be:4b:0f:8b:f9:62:39:e0: a7:5f:ec:3e:17:11:09:ae:53:cf:ce:84:4f:01:eb:4b:9f:c9: 43:21:2d:eb:13:1b:75:ee:e8:51:d7:22:eb:b9:be:19:52:cb: 9d:20:dc:a7:ec:55:d1:db:a3:2d:ae:f1:d6:3e:20:b0:e7:ab: 71:8a:10:24:1f:a5:6c:9e:1d:dc:75:a4:90:93:d3:ea:dd:25: 58:65:3a:30:b2:61:ec:9d:66:49:22:93:2d:f7:71:05:4f:81: 53:96:80:f6:04:67:60:5e:a4:55:8c:07:0f:19:3e:5f:af:82: be:69:00:2d:07:1e:7b:23:a0:14:e3:52:f3:8c:66:e3:7e:01: 20:1b:59:6e:f9:e6:9e:4f:1a:1d:29:39:07:7e:b9:e8:19:41: 46:02:be:19:d2:bb:64:74:45:bb:23:e6:bb:2f:58:d4:0e:bf: 21:3c:db:c4:da:3f:ec:0f:7d:22:c8:b2:57:3a:3d:4c:7e:6d: 2f:2d:76:fa:04:ec:c5:7e:a9:50:b8:1b:3c:c7:0e:4f:6f:4d: 59:45:be:06:31:89:72:fa:9e:6f:4a:ea:a7:29:79:38:1c:1d: 1a:f6:50:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/LMZOr3IxvtMNWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NzVjNGU2NDItODExMy00OTlhLTk1MGQtNzJkZTNlYjA1NjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFcm0Bd0tBOHv2rthKp6FL+3+0Jbjm1Zrd1q bMvZYIh0Nbsg/SRMdUm7blPpongkAdgudYhTlENuwmKet4Rpyp5d+oSKBLg1HEI4 f9HHs0X6bvyZff2arFiTP7SqahgiiPhNRsZWwstLWW5OnNORKcowpUoIe3Jbe9iB A8NplY2p7D2NWE3ba34S3fa3n4LRhhQk74Sdroe5cmUEaeKr1mr5QYXDXfQDVqiE AsD4Gf/kCKIPKcq3KE/FUCtaoitSB076LWYAWYGVKbhv5n66quaZtgpDo8VYX7FL JQfd7fLZQ7CUnA617zXUHgOqV4ZGoeW2aBUs2vlwH5GKM+fhQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBqtAoRHQx1QUVWSXt69nvTAB2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTExZTJiYzItMWUwZS0z NTRkLWJkMTQtMTA4YzA4NTA5MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+T4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHosziMhUPLjY9mH11Broh6EhOGE4OBT72cMESq+Sw+L+WI54Kdf7D4X EQmuU8/OhE8B60ufyUMhLesTG3Xu6FHXIuu5vhlSy50g3KfsVdHboy2u8dY+ILDn q3GKECQfpWyeHdx1pJCT0+rdJVhlOjCyYeydZkkiky33cQVPgVOWgPYEZ2BepFWM Bw8ZPl+vgr5pAC0HHnsjoBTjUvOMZuN+ASAbWW755p5PGh0pOQd+uegZQUYCvhnS u2R0Rbsj5rsvWNQOvyE828TaP+wPfSLIslc6PUx+bS8tdvoE7MV+qVC4GzzHDk9v TVlFvgYxiXL6nm9K6qcpeTgcHRr2UIM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:07:13 2025 by rpki-client