$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff84b3c-bd15-30af-a5b1-100f3c40fd3d.roa File: 0ff84b3c-bd15-30af-a5b1-100f3c40fd3d.roa (raw, json) Hash identifier: 0CHcQMg4YblM/uAJdhux0/8hp6VKiYVIh1b7dOE/E6U= Subject key identifier: E3:CD:2A:AB:3C:E6:07:58:42:CC:C3:24:46:4E:4D:8B:C0:63:24:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC39FFF60F39E3E24F39B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff84b3c-bd15-30af-a5b1-100f3c40fd3d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.195.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:9f:ff:60:f3:9e:3e:24:f3:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ff5f315e-684b-40f2-9be3-a73c33b865ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:15:4b:57:91:d3:03:38:7a:1d:0e:fa:2b:15: 3d:b8:5b:49:22:47:d3:33:b4:ef:e0:c1:eb:82:5c: ac:78:b7:4e:ec:56:2e:d2:35:50:a4:8a:ff:e5:42: bc:69:a4:93:aa:bf:1e:10:28:30:0b:72:2e:94:b6: 39:70:40:fe:32:f4:fc:6f:dd:34:9e:a2:d9:6a:68: 44:79:92:bb:f5:5a:de:c3:e3:ea:7c:24:5b:4e:85: e5:a8:30:50:1d:8d:39:41:5e:c7:5d:7e:fa:cc:81: 1c:5d:a3:23:e4:bd:79:dc:25:f2:5c:fa:bf:63:68: ea:85:ec:e3:a6:b3:07:95:80:31:fc:36:0b:d7:dd: a5:3d:65:e3:8b:80:6b:21:b1:ed:ce:9c:1d:2e:9a: 2d:1b:4a:bb:4a:1a:ca:c7:bf:3e:6f:d5:2f:7e:0d: d1:05:a3:d0:9c:e8:cd:22:b2:52:61:cd:7a:ab:e1: 86:1d:28:00:79:84:42:a0:32:5b:51:05:19:0d:cf: fa:89:37:08:9f:57:77:5a:14:f7:4f:9a:6e:91:ec: 8c:97:eb:25:76:68:42:d9:8d:cb:53:4d:69:d8:2f: 26:6f:e0:69:78:60:96:e6:02:c4:64:ce:71:42:60: e6:30:9a:de:93:b7:38:24:f6:30:0d:65:5e:09:68: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CD:2A:AB:3C:E6:07:58:42:CC:C3:24:46:4E:4D:8B:C0:63:24:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff84b3c-bd15-30af-a5b1-100f3c40fd3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.195.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d6:cb:ae:29:c8:b9:09:6a:3a:fb:a4:24:43:43:d2:a9:05: 48:0c:67:82:67:80:8d:50:fc:7f:1b:13:30:d4:63:b1:1b:09: fd:2b:04:68:95:b3:e8:96:54:10:a6:ef:01:29:f5:a1:74:e1: 81:52:c2:b3:c6:d5:c6:7b:b9:29:db:46:65:95:0e:53:ef:5a: a4:22:31:29:a1:24:18:ad:a8:e2:a0:40:70:e6:81:f0:0d:ea: 11:b9:8c:66:f0:55:a6:05:ab:d5:54:c0:d5:04:5d:49:af:28: 62:14:6c:4c:b0:77:f5:c5:dd:91:f3:cc:42:52:e5:c9:1b:b3: 58:9d:f0:6f:21:5b:37:0e:23:31:c0:d9:cc:37:7b:c4:43:c3: 96:ac:35:9b:2c:4b:87:ea:85:73:00:8f:da:d7:a9:e3:28:51: ed:1d:e4:e7:2a:6e:cf:db:57:5a:23:0a:24:f0:f1:6e:11:92: 76:1c:95:78:6f:e2:b4:05:9d:34:ac:84:e7:08:fa:0a:a9:55: bc:60:6d:36:4c:3e:73:c0:22:7d:5e:15:41:48:5b:99:ce:15: 03:a3:94:53:f1:46:e3:ff:69:5f:dc:56:b4:b9:3f:ce:0e:0c: 85:f3:7c:48:29:3a:0f:c6:02:b8:c5:f9:eb:3c:ad:a8:e3:b2: 4f:18:1b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw5//YPOePiTzm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmY1ZjMxNWUtNjg0Yi00MGYyLTliZTMtYTczYzMzYjg2NWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxVLV5HTAzh6HQ76KxU9uFtJIkfTM7Tv4MHr glyseLdO7FYu0jVQpIr/5UK8aaSTqr8eECgwC3IulLY5cED+MvT8b900nqLZamhE eZK79Vrew+PqfCRbToXlqDBQHY05QV7HXX76zIEcXaMj5L153CXyXPq/Y2jqhezj prMHlYAx/DYL192lPWXji4BrIbHtzpwdLpotG0q7ShrKx78+b9Uvfg3RBaPQnOjN IrJSYc16q+GGHSgAeYRCoDJbUQUZDc/6iTcIn1d3WhT3T5pukeyMl+sldmhC2Y3L U01p2C8mb+BpeGCW5gLEZM5xQmDmMJrek7c4JPYwDWVeCWhpgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPNKqs85gdYQszDJEZOTYvAYyRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZmODRiM2MtYmQxNS0z MGFmLWE1YjEtMTAwZjNjNDBmZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAScOtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPWy64pyLkJajr7pCRDQ9KpBUgMZ4JngI1Q/H8bEzDUY7EbCf0rBGiV s+iWVBCm7wEp9aF04YFSwrPG1cZ7uSnbRmWVDlPvWqQiMSmhJBitqOKgQHDmgfAN 6hG5jGbwVaYFq9VUwNUEXUmvKGIUbEywd/XF3ZHzzEJS5ckbs1id8G8hWzcOIzHA 2cw3e8RDw5asNZssS4fqhXMAj9rXqeMoUe0d5Ocqbs/bV1ojCiTw8W4RknYclXhv 4rQFnTSshOcI+gqpVbxgbTZMPnPAIn1eFUFIW5nOFQOjlFPxRuP/aV/cVrS5P84O DIXzfEgpOg/GArjF+es8rajjsk8YG0k= -----END CERTIFICATE-----Generated at Sat Aug 23 23:08:41 2025 by rpki-client