$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efa28b1a-e785-34f8-8fe9-e55ac094cc65.roa File: efa28b1a-e785-34f8-8fe9-e55ac094cc65.roa (raw, json) Hash identifier: CJBoSELMPgSJw56zvDu3dbQ9HK+XyS6XNrybCB6pNHU= Subject key identifier: BB:26:CD:69:47:67:95:24:FD:C2:A3:B9:DC:01:08:EC:D6:6B:63:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCB247FCD8707F8D6F2860 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efa28b1a-e785-34f8-8fe9-e55ac094cc65.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 71.228.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:b2:47:fc:d8:70:7f:8d:6f:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=8d5e8e37-511c-4a4e-a4f4-62fa65cd97c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:2b:7e:99:85:d1:cf:9e:67:36:8d:f5:2c: 84:76:ef:5e:36:7c:b5:2c:70:93:ed:ca:45:d5:f5: d4:17:69:c1:ec:47:d0:8b:98:ae:31:ab:f1:a3:9a: ba:21:56:22:48:be:4f:18:32:0b:a2:ff:ca:51:48: b6:f9:04:ba:91:90:6b:b9:90:51:a4:54:1c:06:6f: da:90:e9:09:97:cb:e1:bf:9a:91:77:22:12:26:d2: 86:b5:d6:f2:63:cd:43:66:2d:e5:0f:f4:eb:68:9c: 24:32:bb:68:ac:88:34:99:f2:9b:01:7f:47:1f:91: 0d:07:8a:59:69:9f:75:73:ad:6c:70:46:7d:e1:ee: 9b:db:ac:4d:c0:53:11:80:38:cb:54:cc:ab:f4:bd: a6:46:c4:f2:90:69:3b:13:63:ef:9f:04:1e:60:3d: b0:68:9e:cd:9e:c5:07:e9:f7:2b:55:d2:8d:7a:6e: ab:89:3c:ad:51:97:74:50:df:c0:0a:c6:e9:e2:fd: 62:ad:ff:03:a6:88:61:1b:9f:24:6d:61:58:57:e1: 9a:17:3c:f4:14:7e:57:02:ae:0d:6f:c2:73:ae:51: d2:fb:7b:4a:38:39:7e:71:f4:ba:7f:1d:82:b9:7d: 60:94:a5:9c:a8:d8:28:6a:db:77:fc:86:52:70:cf: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:26:CD:69:47:67:95:24:FD:C2:A3:B9:DC:01:08:EC:D6:6B:63:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efa28b1a-e785-34f8-8fe9-e55ac094cc65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fd:8c:ee:56:44:ba:4f:92:34:56:57:b2:70:f6:ef:ab:f5: 4f:80:2d:52:a1:08:ec:b9:a0:f3:e1:3c:63:2f:af:47:70:9c: 4b:c6:eb:9b:7c:f3:af:a3:25:68:81:c9:fb:f3:04:ba:ce:15: b0:a5:bd:e5:de:60:10:4a:0d:b2:db:2e:53:bd:5b:d8:0f:ec: 47:01:ae:67:9f:c7:11:19:3b:92:fb:13:f7:89:57:99:a0:dd: ab:85:ae:ac:05:00:e0:5f:bf:0a:7f:e7:21:fe:ec:e5:14:89: 5e:1c:3f:36:df:77:4f:9c:e2:66:30:98:2c:4f:48:8b:f2:0b: 9e:ef:01:86:a5:d0:88:1d:68:82:33:6b:35:43:dc:ed:4d:d5: 13:3d:41:c7:1b:d1:f1:6e:49:bb:26:0a:12:74:67:0d:53:9f: 5d:e7:81:81:68:9e:30:98:36:62:83:85:5a:6c:ec:31:0e:41: c7:a2:4b:0f:bc:87:fc:79:e7:a9:11:5c:4b:89:ae:d0:9c:af: 95:1d:ba:d8:fa:ce:1a:30:30:20:c3:f8:c4:e6:7c:b1:53:8e: 05:4c:51:73:8a:04:b6:c6:5f:37:45:ef:f2:5d:98:9d:c4:46: 15:ae:65:21:5c:45:77:ad:bf:35:ca:d6:e0:34:83:4b:ff:5b: 8b:69:01:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/LJH/Nhwf41vKGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OGQ1ZThlMzctNTExYy00YTRlLWE0ZjQtNjJmYTY1Y2Q5N2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJwrfpmF0c+eZzaN9SyEdu9eNny1LHCT7cpF 1fXUF2nB7EfQi5iuMavxo5q6IVYiSL5PGDILov/KUUi2+QS6kZBruZBRpFQcBm/a kOkJl8vhv5qRdyISJtKGtdbyY81DZi3lD/TraJwkMrtorIg0mfKbAX9HH5ENB4pZ aZ91c61scEZ94e6b26xNwFMRgDjLVMyr9L2mRsTykGk7E2PvnwQeYD2waJ7NnsUH 6fcrVdKNem6riTytUZd0UN/ACsbp4v1irf8DpohhG58kbWFYV+GaFzz0FH5XAq4N b8JzrlHS+3tKODl+cfS6fx2CuX1glKWcqNgoatt3/IZScM9t/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsmzWlHZ5Uk/cKjudwBCOzWa2MIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZhMjhiMWEtZTc4NS0z NGY4LThmZTktZTU1YWMwOTRjYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR+TAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb9jO5WRLpPkjRWV7Jw9u+r9U+ALVKhCOy5oPPhPGMvr0dwnEvG65t8 86+jJWiByfvzBLrOFbClveXeYBBKDbLbLlO9W9gP7EcBrmefxxEZO5L7E/eJV5mg 3auFrqwFAOBfvwp/5yH+7OUUiV4cPzbfd0+c4mYwmCxPSIvyC57vAYal0IgdaIIz azVD3O1N1RM9Qccb0fFuSbsmChJ0Zw1Tn13ngYFonjCYNmKDhVps7DEOQceiSw+8 h/x556kRXEuJrtCcr5Udutj6zhowMCDD+MTmfLFTjgVMUXOKBLbGXzdF7/JdmJ3E RhWuZSFcRXetvzXK1uA0g0v/W4tpATk= -----END CERTIFICATE-----Generated at Sun Jul 20 17:33:17 2025 by rpki-client