$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10008cd3-1be1-3bfa-b659-cf5c79016be4.roa File: 10008cd3-1be1-3bfa-b659-cf5c79016be4.roa (raw, json) Hash identifier: Xk381d8gCATTgK3fuuVUAYuoyNoUijbcPQo8FpbNd98= Subject key identifier: 96:A1:12:95:7F:08:C2:F8:95:03:17:A8:D1:4F:85:58:99:5C:C7:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3AD04BB1FA2DC8BD09A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10008cd3-1be1-3bfa-b659-cf5c79016be4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.199.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:ad:04:bb:1f:a2:dc:8b:d0:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8af2969b-1c6d-46e6-8d57-88fe5ccfe3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:85:ad:06:16:ce:9d:41:54:4b:dd:2a:b6: 8a:d2:3c:60:4a:b1:63:e9:d5:58:4a:2e:55:bb:84: f7:8e:b7:c3:91:17:c5:4d:75:d0:13:9a:6f:c3:62: 8f:05:97:32:49:63:bf:f5:ec:41:4c:2d:7e:01:3d: 68:7b:30:97:ca:06:8e:14:9b:d9:9f:28:71:29:ce: d1:df:04:29:bd:58:08:1d:c1:cb:b5:f1:8f:8b:95: 17:55:ef:5c:a4:f5:e8:4a:7f:5f:e5:14:49:72:a9: f5:49:a0:f3:b2:3b:ea:e7:00:88:30:21:8f:c4:43: 2c:9e:8a:89:33:a8:ce:ce:7c:67:1c:f7:10:01:07: f1:c3:5e:05:97:c2:25:e6:33:6f:53:01:c0:c7:f4: 1f:5d:a9:7b:e8:b1:41:b4:43:d3:b2:b7:82:b0:b8: 84:57:95:c7:8e:a7:dd:f1:e9:57:21:a5:9c:98:38: 41:b2:f9:85:6b:84:b7:46:cd:da:ab:e4:c9:86:65: f9:5f:45:95:1b:fd:17:f4:38:51:99:bb:61:0c:22: 14:3a:14:80:37:85:b5:9e:b0:00:3a:41:99:be:15: 75:67:a6:14:6f:ba:bf:8a:43:0f:90:9f:8e:15:32: 9e:83:da:da:41:87:7b:8f:23:68:d0:c3:ac:88:fc: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:12:95:7F:08:C2:F8:95:03:17:A8:D1:4F:85:58:99:5C:C7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10008cd3-1be1-3bfa-b659-cf5c79016be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.199.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:85:fc:d4:51:8c:e3:a7:c3:7e:ce:85:df:fe:66:65:aa:5f: 76:42:ac:e1:59:5e:e9:ee:0e:14:41:7a:e8:92:b4:d0:c3:1c: 53:c9:7a:67:4e:23:70:86:48:6f:ca:46:0b:79:f7:44:14:eb: 09:1f:9c:6e:b0:4d:8e:26:b2:e6:4c:69:13:c9:54:a7:68:20: 3a:e9:b8:18:9c:7a:84:9b:8b:30:c3:e4:c5:95:96:03:5c:e5: be:1d:05:ed:4a:68:4d:05:9b:b8:e7:7a:33:f6:ea:67:63:4d: 9f:62:83:ed:50:b7:5f:09:17:95:7d:0c:e5:0f:80:e5:5a:b1: 14:4c:88:99:f3:c2:85:5a:38:ef:32:4d:aa:92:6e:fe:11:a6: b8:76:a5:57:40:12:99:28:2a:58:2e:bf:cb:b5:6f:dd:61:66: fc:0c:81:db:43:9a:f3:06:31:30:f6:92:50:bd:0b:87:48:e0: 4b:1f:a5:34:a8:67:ac:34:80:ca:fe:2f:55:e6:f7:a4:02:4a: b0:65:ff:04:89:f0:8c:a3:9a:28:9e:8b:cd:f8:e3:a0:1f:bb: 6d:45:f3:c3:f4:0e:e3:18:60:a5:3c:ae:24:bf:84:b6:83:09: 64:e2:12:70:7b:97:9d:73:95:8f:68:e0:7a:e9:cd:ab:d5:0d: c7:0c:c8:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw60Eux+i3IvQmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGFmMjk2OWItMWM2ZC00NmU2LThkNTctODhmZTVjY2ZlM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4qFrQYWzp1BVEvdKraK0jxgSrFj6dVYSi5V u4T3jrfDkRfFTXXQE5pvw2KPBZcySWO/9exBTC1+AT1oezCXygaOFJvZnyhxKc7R 3wQpvVgIHcHLtfGPi5UXVe9cpPXoSn9f5RRJcqn1SaDzsjvq5wCIMCGPxEMsnoqJ M6jOznxnHPcQAQfxw14Fl8Il5jNvUwHAx/QfXal76LFBtEPTsreCsLiEV5XHjqfd 8elXIaWcmDhBsvmFa4S3Rs3aq+TJhmX5X0WVG/0X9DhRmbthDCIUOhSAN4W1nrAA OkGZvhV1Z6YUb7q/ikMPkJ+OFTKeg9raQYd7jyNo0MOsiPx2wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJahEpV/CML4lQMXqNFPhViZXMdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTAwMDhjZDMtMWJlMS0z YmZhLWI2NTktY2Y1Yzc5MDE2YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyF/NRRjOOnw37Ohd/+ZmWqX3ZCrOFZXunuDhRBeuiStNDDHFPJemdO I3CGSG/KRgt590QU6wkfnG6wTY4msuZMaRPJVKdoIDrpuBiceoSbizDD5MWVlgNc 5b4dBe1KaE0Fm7jnejP26mdjTZ9ig+1Qt18JF5V9DOUPgOVasRRMiJnzwoVaOO8y TaqSbv4Rprh2pVdAEpkoKlguv8u1b91hZvwMgdtDmvMGMTD2klC9C4dI4EsfpTSo Z6w0gMr+L1Xm96QCSrBl/wSJ8Iyjmiiei83446Afu21F88P0DuMYYKU8riS/hLaD CWTiEnB7l51zlY9o4HrpzavVDccMyI0= -----END CERTIFICATE-----Generated at Sun Aug 24 09:33:56 2025 by rpki-client