$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc78405-3bee-3d52-9d92-294bfcd80b4a.roa File: dfc78405-3bee-3d52-9d92-294bfcd80b4a.roa (raw, json) Hash identifier: txGLnJQXw+jZ9Dx2ioPKvqz/Cdkpj6YU76AJIL2/3bA= Subject key identifier: DD:F1:19:C3:AD:D6:F4:8F:96:45:19:20:24:06:11:4B:16:CF:F1:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A6DBB4D6F07B44856B267C660 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc78405-3bee-3d52-9d92-294bfcd80b4a.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 33661 IP address blocks: 71.226.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:4d:6f:07:b4:48:56:b2:67:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=af2dfe53-31e1-404d-9124-c1ba20f37aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:fc:e8:d4:52:e0:46:26:e3:82:0b:0d:01: 24:c0:98:d9:cb:c4:53:b1:21:74:6a:67:9a:49:93: ba:71:c2:98:75:a6:52:8c:1a:76:e8:d0:4c:b8:2b: 41:0b:09:54:5d:2f:69:24:21:b4:b5:da:8b:77:d9: 74:02:00:d2:aa:ec:e2:19:91:22:69:18:ce:88:2d: 54:58:69:26:a9:5a:c6:d0:e6:e7:3a:bc:9c:b3:66: 66:90:ec:e7:87:7c:2a:42:1c:29:51:0c:4f:69:cc: 18:46:07:35:44:46:72:e0:24:8d:3d:ac:f0:c4:dc: b6:cd:05:75:9c:5e:7d:74:fc:b8:5c:da:54:1b:ed: 34:49:23:27:4d:48:94:99:0f:1b:67:6e:b6:4f:78: 2d:b4:f9:83:6f:0b:59:a1:85:30:d6:dd:74:43:39: b6:39:94:f5:ed:ba:ef:b2:ed:9a:b6:72:66:70:fe: 21:89:88:b8:ef:9e:84:bc:d9:1a:e9:d0:fd:60:34: 57:63:b5:53:4c:d4:80:d6:2c:cb:68:5d:f3:b6:51: b4:a9:77:e8:b8:b1:66:72:b8:19:a0:d1:69:51:b8: 56:85:95:fd:f5:29:4e:ef:50:a4:7b:5b:d5:33:a5: 01:8c:f6:93:e9:b2:18:59:ad:17:e5:76:4a:79:9e: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F1:19:C3:AD:D6:F4:8F:96:45:19:20:24:06:11:4B:16:CF:F1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc78405-3bee-3d52-9d92-294bfcd80b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.226.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:94:17:d2:e7:41:48:b1:0e:50:16:52:83:a2:f8:ef:08:b5: 7d:a7:45:7a:db:b1:ea:b7:e0:63:c2:01:f3:97:80:a3:6a:2c: 44:fc:88:18:8d:f4:91:92:d8:bd:e5:bb:36:c7:1b:df:e0:21: 08:fe:44:e1:5a:7f:05:e4:3f:a0:44:7b:a9:eb:05:78:d6:60: a8:94:49:12:57:54:11:34:7c:f2:84:55:e2:d9:0b:b2:7e:51: 7f:90:b7:59:79:19:ae:bb:7b:49:a9:ff:43:d8:e2:be:14:1d: c4:31:d7:b6:a9:be:51:05:f2:19:9b:40:b4:72:3b:16:3c:de: 70:ea:85:6d:05:e9:3b:58:31:db:ef:db:b9:08:df:d5:00:bc: c7:7f:7c:f4:fd:af:3b:d0:4b:74:b9:16:31:72:aa:0d:84:d1: 34:05:ad:df:65:e3:35:b8:32:6c:b4:cd:d2:8e:60:af:70:44: 4d:02:18:98:51:b1:8c:54:27:36:98:5b:0b:b2:65:4e:e7:86: 5f:3a:f2:e3:7a:13:71:dd:9d:e4:1e:a0:59:f9:dd:2c:02:33: 4b:8b:24:75:c2:dd:6a:d8:1f:2d:eb:da:0e:b4:2c:69:b8:cd: 02:73:8a:ea:ee:42:cb:c6:89:ef:bf:b6:d0:6d:0a:5d:04:d4: c6:56:df:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu01vB7RIVrJnxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk YWYyZGZlNTMtMzFlMS00MDRkLTkxMjQtYzFiYTIwZjM3YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTn86NRS4EYm44ILDQEkwJjZy8RTsSF0amea SZO6ccKYdaZSjBp26NBMuCtBCwlUXS9pJCG0tdqLd9l0AgDSquziGZEiaRjOiC1U WGkmqVrG0ObnOrycs2ZmkOznh3wqQhwpUQxPacwYRgc1REZy4CSNPazwxNy2zQV1 nF59dPy4XNpUG+00SSMnTUiUmQ8bZ262T3gttPmDbwtZoYUw1t10Qzm2OZT17brv su2atnJmcP4hiYi4756EvNka6dD9YDRXY7VTTNSA1izLaF3ztlG0qXfouLFmcrgZ oNFpUbhWhZX99SlO71Cke1vVM6UBjPaT6bIYWa0X5XZKeZ5uHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3xGcOt1vSPlkUZICQGEUsWz/G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZjNzg0MDUtM2JlZS0z ZDUyLTlkOTItMjk0YmZjZDgwYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER+IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6UF9LnQUixDlAWUoOi+O8ItX2nRXrbseq34GPCAfOXgKNqLET8iBiN 9JGS2L3luzbHG9/gIQj+ROFafwXkP6BEe6nrBXjWYKiUSRJXVBE0fPKEVeLZC7J+ UX+Qt1l5Ga67e0mp/0PY4r4UHcQx17apvlEF8hmbQLRyOxY83nDqhW0F6TtYMdvv 27kI39UAvMd/fPT9rzvQS3S5FjFyqg2E0TQFrd9l4zW4Mmy0zdKOYK9wRE0CGJhR sYxUJzaYWwuyZU7nhl868uN6E3HdneQeoFn53SwCM0uLJHXC3WrYHy3r2g60LGm4 zQJziuruQsvGie+/ttBtCl0E1MZW38Y= -----END CERTIFICATE-----Generated at Sun Jul 20 17:43:43 2025 by rpki-client