$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af852dc1-3156-32ef-b8d3-aa99848c7c69.roa File: af852dc1-3156-32ef-b8d3-aa99848c7c69.roa (raw, json) Hash identifier: /dkH8cp4qnDZGMoKC+5UEjg5KhWPbk0GARUKjveM3DM= Subject key identifier: DD:FD:6E:EB:70:8D:34:09:D6:59:DD:CA:FF:60:E1:9E:55:8E:88:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBDBA1EB3C56C72001C340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af852dc1-3156-32ef-b8d3-aa99848c7c69.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33668 IP address blocks: 71.197.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:db:a1:eb:3c:56:c7:20:01:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=7965236d-be05-4896-8e58-c28b86780e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:37:72:2b:04:7a:a1:d2:f9:ca:ec:99:7e:12: 5c:59:3a:82:bc:a6:d3:a5:90:67:55:93:83:89:d5: df:0f:52:e0:ca:d8:07:02:c8:0c:ee:a8:3a:87:c5: 9a:0f:12:91:b6:9a:74:42:39:0d:ad:57:e0:c7:75: c8:16:89:49:50:c6:bc:de:1b:8c:2f:fc:9d:92:3b: 39:66:38:24:0c:b5:48:7c:8f:7d:47:73:86:57:b7: 82:6d:4e:58:0d:06:58:00:7a:31:0d:79:9b:00:1f: a6:1b:41:47:ce:b9:bc:ff:b7:42:a0:59:1a:41:66: c0:a6:00:d8:ef:96:34:02:c9:7d:45:56:60:6c:f0: 92:ba:ec:35:04:60:19:bf:ac:3e:23:60:5c:7a:e7: 05:c5:af:90:ca:e7:85:25:85:36:ea:32:9e:2b:c7: 9d:c7:1f:7f:cc:4d:05:95:18:06:ed:f8:b6:1c:7a: ae:e5:f5:81:ee:8a:e8:69:bf:6c:c6:f9:1d:60:dd: ef:0a:f9:a5:b6:15:80:08:59:b5:c8:90:9d:4a:62: bb:18:77:47:20:24:34:24:0f:91:3f:4c:2e:fd:9a: 89:61:41:8b:be:c6:a0:86:1c:8e:50:cf:7a:1f:1e: 5d:fc:b7:9e:dd:98:a4:0e:bb:f7:a2:f0:77:56:b5: f7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:6E:EB:70:8D:34:09:D6:59:DD:CA:FF:60:E1:9E:55:8E:88:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af852dc1-3156-32ef-b8d3-aa99848c7c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.197.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:35:9e:ac:41:b5:8d:bb:05:fb:5c:cb:d5:1b:83:42:20:2b: 19:26:87:e2:6c:56:41:ff:41:eb:9e:b4:f6:9b:d6:f3:ca:3a: 1f:a5:d5:3f:f6:c4:24:22:10:50:bb:5f:ef:15:dc:29:97:7b: e7:15:6a:27:16:33:91:dc:68:ce:27:29:1c:d9:d6:66:e1:98: 17:cf:36:95:37:53:58:5a:e7:c0:e1:58:03:49:5a:e7:1b:ce: 53:b3:a6:ff:89:a3:61:d2:8c:de:2b:cf:a2:a9:42:3a:00:eb: d1:ef:1c:f6:17:41:dc:67:5f:db:bd:ff:be:b6:f6:ca:a9:43: 34:18:9f:b9:26:7d:3f:c7:d8:b0:d0:e0:77:66:c2:8c:a9:93: f8:4a:6f:b6:64:f8:8e:88:50:99:24:9b:a7:9f:f9:6b:b6:eb: fd:e0:c3:59:2b:9d:f2:2c:8f:82:94:92:81:5f:19:ac:29:da: cb:48:05:0c:bc:84:9a:d2:1e:f0:31:fd:e1:71:05:0f:c2:7b: 5f:eb:af:2b:2d:55:31:ca:1c:db:73:e7:d3:69:a0:58:6c:52: 6c:b2:67:3c:d4:60:a2:9d:a8:f8:0f:a2:15:38:0c:f9:f7:9b: 62:7e:3d:3d:7a:1a:9d:6e:f8:c4:a7:79:d7:64:14:03:e8:a8: 44:cd:c4:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+9uh6zxWxyABw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Nzk2NTIzNmQtYmUwNS00ODk2LThlNTgtYzI4Yjg2NzgwZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TdyKwR6odL5yuyZfhJcWTqCvKbTpZBnVZOD idXfD1LgytgHAsgM7qg6h8WaDxKRtpp0QjkNrVfgx3XIFolJUMa83huML/ydkjs5 ZjgkDLVIfI99R3OGV7eCbU5YDQZYAHoxDXmbAB+mG0FHzrm8/7dCoFkaQWbApgDY 75Y0Asl9RVZgbPCSuuw1BGAZv6w+I2BceucFxa+QyueFJYU26jKeK8edxx9/zE0F lRgG7fi2HHqu5fWB7oroab9sxvkdYN3vCvmlthWACFm1yJCdSmK7GHdHICQ0JA+R P0wu/ZqJYUGLvsaghhyOUM96Hx5d/Lee3ZikDrv3ovB3VrX3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN39butwjTQJ1lndyv9g4Z5Vjoh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY4NTJkYzEtMzE1Ni0z MmVmLWI4ZDMtYWE5OTg0OGM3YzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER8UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANU1nqxBtY27Bftcy9Ubg0IgKxkmh+JsVkH/QeuetPab1vPKOh+l1T/2 xCQiEFC7X+8V3CmXe+cVaicWM5HcaM4nKRzZ1mbhmBfPNpU3U1ha58DhWANJWucb zlOzpv+Jo2HSjN4rz6KpQjoA69HvHPYXQdxnX9u9/7629sqpQzQYn7kmfT/H2LDQ 4Hdmwoypk/hKb7Zk+I6IUJkkm6ef+Wu26/3gw1krnfIsj4KUkoFfGawp2stIBQy8 hJrSHvAx/eFxBQ/Ce1/rrystVTHKHNtz59NpoFhsUmyyZzzUYKKdqPgPohU4DPn3 m2J+PT16Gp1u+MSneddkFAPoqETNxM4= -----END CERTIFICATE-----Generated at Sun Jul 20 17:34:37 2025 by rpki-client