$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b28642-d2da-346d-ac88-83a2a2e3d368.roa File: 04b28642-d2da-346d-ac88-83a2a2e3d368.roa (raw, json) Hash identifier: NrrB/HmdSUBtgfGHSqz8kcJoyKBACuFMwpD6tPnrruw= Subject key identifier: FA:E1:C7:34:09:C1:1A:15:B6:A6:CE:38:17:92:27:B5:D6:5B:C4:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED052683EC98A94E9C5D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b28642-d2da-346d-ac88-83a2a2e3d368.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 73.232.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:05:26:83:ec:98:a9:4e:9c:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=6a82b2ee-c15f-400c-b821-79bcce336fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b9:9e:8d:97:f9:ff:36:14:2b:a5:87:1c:85: 75:b2:a2:01:d2:48:ea:d1:4c:80:6a:24:d5:8d:97: 36:e9:30:1b:cf:83:18:2d:9e:eb:f1:ac:3b:ce:25: cc:1c:8a:dc:57:cc:5a:14:3d:ec:af:19:95:0f:18: 27:15:83:15:c7:a4:15:dd:93:7a:68:6c:f0:73:cd: fd:19:1c:b4:37:ea:ba:fc:5d:f8:18:5d:8f:47:76: aa:46:67:bf:18:1a:5c:95:b4:0d:a8:55:66:58:d7: 14:42:5c:40:d3:6e:14:56:0c:99:be:4e:34:51:90: 6b:24:33:aa:45:09:1e:a6:cf:8f:05:ac:c0:1f:82: 5f:15:57:e4:8f:4a:2a:dd:43:ff:e7:d1:68:c2:74: 20:8a:6f:90:d7:bd:38:eb:ef:a6:40:01:ea:f7:57: 52:e1:60:4c:4e:76:4d:5e:37:00:64:6a:54:1b:51: d2:4c:7c:0e:a5:aa:f8:7e:96:5a:c9:b8:a3:1d:08: 09:e0:7c:49:fc:15:9e:53:c5:7c:f8:f9:96:c5:5d: 86:8f:e1:f7:20:a1:92:47:cf:8b:f7:b4:68:3c:6c: 1d:bd:71:dc:0f:d2:34:4b:3f:af:48:30:dd:1f:a5: 3f:b9:27:fa:26:60:ec:41:90:40:a8:3e:f1:33:01: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E1:C7:34:09:C1:1A:15:B6:A6:CE:38:17:92:27:B5:D6:5B:C4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04b28642-d2da-346d-ac88-83a2a2e3d368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.232.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a6:df:7a:a2:de:05:6c:50:b1:8a:a6:63:a3:6d:3d:2a:6b: 16:40:c6:b2:0e:c7:77:b5:6a:f3:63:b4:98:4f:68:a1:49:f5: 4a:0e:dc:bd:2e:5b:a9:db:75:c3:7b:a5:1b:91:3c:ce:de:5f: 44:a5:d6:52:66:b4:ee:66:64:b2:df:ad:7d:c3:ed:7f:cb:f6: dd:3c:8c:cb:da:94:b7:e4:0a:c8:4d:07:2c:13:38:24:54:d8: 70:d4:18:b8:35:3b:1e:e6:5b:71:40:bf:00:68:a8:d2:6b:40: 9b:0b:54:f5:eb:3d:63:ee:f9:54:68:53:e7:96:20:18:88:05: ff:07:d3:9f:9f:29:d3:18:43:f1:25:a4:77:d1:9f:de:8f:da: d2:ba:d2:e1:1f:37:b2:47:81:73:be:a0:89:48:d8:b9:47:03: b8:67:6a:f0:c4:7b:94:e5:22:d1:cc:08:1a:90:59:1f:3a:5c: 65:17:7c:0e:92:58:12:f1:5e:d3:82:20:95:48:92:e7:36:c7: 78:78:97:43:0f:3c:70:88:81:3b:99:f6:00:99:fc:61:d0:c0: 6c:ff:d6:c0:c4:32:ae:4d:d3:e6:56:06:37:bd:a4:2d:2b:92: 24:45:d2:99:e6:02:4d:43:6b:99:28:6c:14:fe:11:78:bf:30: ba:da:49:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07QUmg+yYqU6cXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NmE4MmIyZWUtYzE1Zi00MDBjLWI4MjEtNzliY2NlMzM2ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLmejZf5/zYUK6WHHIV1sqIB0kjq0UyAaiTV jZc26TAbz4MYLZ7r8aw7ziXMHIrcV8xaFD3srxmVDxgnFYMVx6QV3ZN6aGzwc839 GRy0N+q6/F34GF2PR3aqRme/GBpclbQNqFVmWNcUQlxA024UVgyZvk40UZBrJDOq RQkeps+PBazAH4JfFVfkj0oq3UP/59FownQgim+Q17046++mQAHq91dS4WBMTnZN XjcAZGpUG1HSTHwOpar4fpZaybijHQgJ4HxJ/BWeU8V8+PmWxV2Gj+H3IKGSR8+L 97RoPGwdvXHcD9I0Sz+vSDDdH6U/uSf6JmDsQZBAqD7xMwG1oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrhxzQJwRoVtqbOOBeSJ7XWW8RQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDRiMjg2NDItZDJkYS0z NDZkLWFjODgtODNhMmEyZTNkMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSejMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOm33qi3gVsULGKpmOjbT0qaxZAxrIOx3e1avNjtJhPaKFJ9UoO3L0u W6nbdcN7pRuRPM7eX0Sl1lJmtO5mZLLfrX3D7X/L9t08jMvalLfkCshNBywTOCRU 2HDUGLg1Ox7mW3FAvwBoqNJrQJsLVPXrPWPu+VRoU+eWIBiIBf8H05+fKdMYQ/El pHfRn96P2tK60uEfN7JHgXO+oIlI2LlHA7hnavDEe5TlItHMCBqQWR86XGUXfA6S WBLxXtOCIJVIkuc2x3h4l0MPPHCIgTuZ9gCZ/GHQwGz/1sDEMq5N0+ZWBje9pC0r kiRF0pnmAk1Da5kobBT+EXi/MLraSZs= -----END CERTIFICATE-----Generated at Sun Aug 24 01:34:29 2025 by rpki-client