$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a8faef1-ff39-3f29-91c6-df578fed1258.roa File: 0a8faef1-ff39-3f29-91c6-df578fed1258.roa (raw, json) Hash identifier: 592ECIAn+GftWjPFfjZCm9CFRCF5fx56liNr1pJja50= Subject key identifier: FB:AE:E1:2E:E9:0B:72:DE:2E:D7:6F:3F:63:8F:EB:94:0C:17:52:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1AD817D7E45B36C3BD048 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a8faef1-ff39-3f29-91c6-df578fed1258.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.197.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:ad:81:7d:7e:45:b3:6c:3b:d0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8aac2bea-f8e1-408d-b14c-ded6b2dd85a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:6b:d8:73:88:6c:5c:5a:fc:0f:d3:a6:41: 87:b3:d1:3d:94:00:a8:ee:65:28:04:e1:d9:1f:89: 5b:cb:37:02:e1:e9:cc:4d:86:17:98:37:fa:ab:77: 91:a2:79:13:8b:c6:6f:58:4f:16:4d:95:29:e6:fd: dc:b3:22:e6:97:30:3c:59:86:8b:e5:ff:79:db:39: 47:ad:f7:fb:5a:47:ae:61:1f:3d:ad:32:c5:2b:60: 76:9e:ac:7c:0b:06:80:ac:3c:de:5e:42:f9:2b:5d: 41:a0:82:f5:1f:6f:74:32:30:56:de:fd:e3:dd:ad: 77:18:17:77:86:66:a4:88:34:93:e8:46:66:99:cb: 40:f0:08:46:8b:14:a6:26:23:91:43:a4:28:c5:c7: 06:48:c4:9f:b8:ab:50:7a:cd:34:3f:8f:f7:9d:c8: c3:5d:0f:c7:8e:5a:55:8e:cd:f8:62:77:2f:0c:94: f0:db:1c:85:7d:2e:72:e9:3b:77:ac:5b:a2:8c:a5: d2:33:5c:88:6d:50:67:10:52:36:d7:26:17:66:f0: 78:60:15:da:74:4a:34:dc:61:5b:81:6c:1e:86:bd: a3:ae:f0:47:03:5d:2f:c3:b5:8c:74:9d:a5:90:84: 51:3e:1a:a9:67:74:10:b0:37:c4:4f:ce:55:3f:94: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AE:E1:2E:E9:0B:72:DE:2E:D7:6F:3F:63:8F:EB:94:0C:17:52:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a8faef1-ff39-3f29-91c6-df578fed1258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.197.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:47:f1:1c:40:d5:39:e9:7e:9c:0d:ea:8d:1c:c6:d3:6a:42: df:46:67:23:af:66:8c:8e:bb:a5:fa:ec:c2:06:76:e7:cd:1d: 96:3a:f2:a0:4c:a2:bc:bf:e1:70:47:57:3f:25:d6:53:6c:3c: 06:8d:09:1e:8a:c5:bb:f4:13:7f:d3:42:24:f0:fe:fd:b0:ff: c7:7a:2a:24:49:96:d3:0c:85:25:ba:d4:7d:5d:f0:a0:87:31: 20:7e:6e:05:d7:ed:8e:92:37:1d:5b:11:98:cf:80:54:59:b4: 65:df:54:51:79:1a:c5:97:fd:88:2b:27:5e:13:de:4a:2c:58: c0:5c:e0:08:a0:c2:51:3d:8d:53:79:01:a4:0c:dd:9e:56:a5: 47:08:0a:76:d7:f0:d6:80:8b:c5:c4:0e:bb:f3:e0:02:6b:37: 55:18:d1:6a:db:b5:a6:d1:93:4e:f5:5d:46:c4:5b:01:ea:8d: de:f2:46:aa:63:8c:13:26:c5:6d:22:87:3f:0f:60:35:db:8c: a1:e2:03:51:99:54:01:b3:33:bf:09:6d:40:77:2b:dc:51:91: 78:78:bf:85:63:98:f7:b3:ce:42:78:c8:c0:66:c3:76:8e:7d: 27:ef:e5:d3:5d:8f:2e:ea:0f:a1:dd:7f:6a:51:86:9b:1c:cf: 1e:87:7b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswa2BfX5Fs2w70EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGFhYzJiZWEtZjhlMS00MDhkLWIxNGMtZGVkNmIyZGQ4NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs1r2HOIbFxa/A/TpkGHs9E9lACo7mUoBOHZ H4lbyzcC4enMTYYXmDf6q3eRonkTi8ZvWE8WTZUp5v3csyLmlzA8WYaL5f952zlH rff7WkeuYR89rTLFK2B2nqx8CwaArDzeXkL5K11BoIL1H290MjBW3v3j3a13GBd3 hmakiDST6EZmmctA8AhGixSmJiORQ6QoxccGSMSfuKtQes00P4/3ncjDXQ/HjlpV js34YncvDJTw2xyFfS5y6Tt3rFuijKXSM1yIbVBnEFI21yYXZvB4YBXadEo03GFb gWwehr2jrvBHA10vw7WMdJ2lkIRRPhqpZ3QQsDfET85VP5SXkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuu4S7pC3LeLtdvP2OP65QMF1LnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGE4ZmFlZjEtZmYzOS0z ZjI5LTkxYzYtZGY1NzhmZWQxMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDScWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpH8RxA1TnpfpwN6o0cxtNqQt9GZyOvZoyOu6X67MIGdufNHZY68qBM ory/4XBHVz8l1lNsPAaNCR6Kxbv0E3/TQiTw/v2w/8d6KiRJltMMhSW61H1d8KCH MSB+bgXX7Y6SNx1bEZjPgFRZtGXfVFF5GsWX/YgrJ14T3kosWMBc4AigwlE9jVN5 AaQM3Z5WpUcICnbX8NaAi8XEDrvz4AJrN1UY0WrbtabRk071XUbEWwHqjd7yRqpj jBMmxW0ihz8PYDXbjKHiA1GZVAGzM78JbUB3K9xRkXh4v4VjmPezzkJ4yMBmw3aO fSfv5dNdjy7qD6Hdf2pRhpsczx6He+Y= -----END CERTIFICATE-----Generated at Sun Aug 24 05:36:05 2025 by rpki-client