$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bca7de3-a1d7-3ee1-aae0-2a208f31cf2b.roa File: 0bca7de3-a1d7-3ee1-aae0-2a208f31cf2b.roa (raw, json) Hash identifier: 7oEH1v9P4Uwc5pXSWlpCEFhqQ92j5E9pvs4iP9G67cM= Subject key identifier: 58:AE:3A:43:FD:AC:B8:CE:ED:06:47:32:51:38:3C:06:DB:8F:F8:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE031696B23DBF030D481D980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bca7de3-a1d7-3ee1-aae0-2a208f31cf2b.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 73.7.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:69:6b:23:db:f0:30:d4:81:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=68b03fdc-1ba2-4745-a84f-672a2ce44f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:ef:87:9e:f9:48:2b:bf:a3:8a:73:51:69: 55:fc:66:0a:68:a7:41:94:39:71:fd:e3:8d:dc:b2: 63:b0:4d:27:bf:4d:5c:ac:c4:4a:7b:d5:c8:d6:d5: b0:45:5b:86:e4:71:d7:82:15:4c:61:38:08:53:92: 82:95:a5:2e:89:9c:a5:3a:95:2d:6b:0f:16:42:d1: fd:bd:fc:5a:7e:db:e2:3f:13:9d:6d:89:d2:bc:6e: 51:fc:a7:64:c1:8a:61:5d:44:36:87:a3:d5:59:da: 13:27:7c:36:ec:28:39:cf:ef:ca:62:81:07:57:4d: 0f:bd:e1:fe:c0:e7:e3:fe:46:cd:59:46:d2:5c:25: 8b:ee:cc:b5:bf:ed:05:0e:d8:c6:87:35:03:08:35: b4:e3:30:cb:da:7b:f3:e8:d4:43:b5:2e:e2:d8:b2: 89:e4:ff:58:a2:23:60:8c:11:8f:bb:57:4c:96:26: 5a:cb:1b:01:69:d8:e3:da:d9:83:c3:fb:d8:4b:e3: 9b:03:37:1d:23:38:7d:7b:f3:60:28:f8:d9:1c:86: 35:27:cb:19:67:4f:e5:32:30:41:d3:83:fb:6d:1c: 04:1c:21:e6:bc:ea:26:02:31:a4:00:6c:87:3d:71: e9:4e:9b:e1:82:ad:30:92:40:e4:c7:d3:b6:10:62: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AE:3A:43:FD:AC:B8:CE:ED:06:47:32:51:38:3C:06:DB:8F:F8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bca7de3-a1d7-3ee1-aae0-2a208f31cf2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.7.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a3:d7:f7:c1:21:65:aa:ee:e1:3a:e9:6d:51:17:0c:2b:44: 52:2d:15:e2:70:71:e4:0d:aa:71:6c:04:30:9d:1d:ed:52:e8: 7d:cd:6e:62:9c:42:c3:4f:d2:8f:ab:bd:b1:18:a9:35:8d:d3: 1e:ed:aa:11:f9:4d:53:e8:f7:43:f8:8b:89:f6:e5:e2:7d:11: b1:81:b3:1c:56:bb:38:29:ca:e2:5b:f1:1d:61:77:5f:ce:88: 17:95:e9:87:d5:65:d3:c5:53:71:4d:c0:ac:da:62:b2:98:04: 52:2c:7e:12:d0:b7:e0:19:43:f5:34:59:10:11:14:fd:05:b3: 2e:05:0f:63:7c:3f:0a:ab:78:9e:9a:b0:cf:15:34:da:e1:5e: 46:5b:41:0b:5d:8c:1a:11:2f:b7:32:81:ac:3e:58:eb:e7:3e: 0b:09:7b:79:e5:2e:c9:29:ea:5b:b8:a5:26:a4:ba:d5:d8:d6: de:cf:17:fb:ee:83:8a:69:2c:e4:5b:70:91:3a:b1:c6:1e:bd: 8c:f7:ab:9c:e4:45:6a:fd:b2:47:c6:cc:38:bc:e0:28:60:a5: 76:c3:1b:8c:d5:2f:7e:67:a7:9a:d7:a7:5f:33:58:01:fa:16: 53:e0:7e:b3:81:d9:33:b4:40:e8:1d:81:2a:af:64:07:a4:0a: 7f:8c:42:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMWlrI9vwMNSB2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NjhiMDNmZGMtMWJhMi00NzQ1LWE4NGYtNjcyYTJjZTQ0ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB3vh575SCu/o4pzUWlV/GYKaKdBlDlx/eON 3LJjsE0nv01crMRKe9XI1tWwRVuG5HHXghVMYTgIU5KClaUuiZylOpUtaw8WQtH9 vfxaftviPxOdbYnSvG5R/KdkwYphXUQ2h6PVWdoTJ3w27Cg5z+/KYoEHV00PveH+ wOfj/kbNWUbSXCWL7sy1v+0FDtjGhzUDCDW04zDL2nvz6NRDtS7i2LKJ5P9YoiNg jBGPu1dMliZayxsBadjj2tmDw/vYS+ObAzcdIzh9e/NgKPjZHIY1J8sZZ0/lMjBB 04P7bRwEHCHmvOomAjGkAGyHPXHpTpvhgq0wkkDkx9O2EGJQRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiuOkP9rLjO7QZHMlE4PAbbj/h1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGJjYTdkZTMtYTFkNy0z ZWUxLWFhZTAtMmEyMDhmMzFjZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGj1/fBIWWq7uE66W1RFwwrRFItFeJwceQNqnFsBDCdHe1S6H3NbmKc QsNP0o+rvbEYqTWN0x7tqhH5TVPo90P4i4n25eJ9EbGBsxxWuzgpyuJb8R1hd1/O iBeV6YfVZdPFU3FNwKzaYrKYBFIsfhLQt+AZQ/U0WRARFP0Fsy4FD2N8PwqreJ6a sM8VNNrhXkZbQQtdjBoRL7cygaw+WOvnPgsJe3nlLskp6lu4pSakutXY1t7PF/vu g4ppLORbcJE6scYevYz3q5zkRWr9skfGzDi84ChgpXbDG4zVL35np5rXp18zWAH6 FlPgfrOB2TO0QOgdgSqvZAekCn+MQmY= -----END CERTIFICATE-----Generated at Sat Aug 23 22:55:46 2025 by rpki-client