$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa File: 1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa (raw, json) Hash identifier: rl6vX5HQ8GyohnnmswxpYQHsUnN36cT2FYaizasfh9w= Subject key identifier: 6B:03:D1:9C:4B:C5:7B:88:B2:34:87:E7:FC:BC:6B:5A:F1:A8:55:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC26AE340E233B8EE530080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.209.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:6a:e3:40:e2:33:b8:ee:53:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b7098012-7082-48cb-bb1f-43975e958cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:3f:b1:44:1a:42:46:fd:8e:4d:51:e2:b9: 77:3c:1f:51:d5:16:23:11:ec:73:8e:1f:cb:fa:22: ee:f2:64:2a:0e:e3:d9:4f:7e:16:b0:51:ca:e5:7b: fc:0f:58:ea:7d:66:2b:fb:8d:58:1d:2a:ff:0b:71: 5f:b3:46:1b:f8:ae:bd:cd:3c:7a:d2:a5:fd:df:eb: e1:19:ce:20:fa:4c:8f:21:52:5e:df:58:8b:e0:44: e8:65:9b:0f:19:00:8c:db:1e:ea:6c:3f:67:77:36: c9:d0:ba:e0:69:ec:85:ed:ee:a5:b0:b0:65:5c:e3: f8:d2:c3:dc:bb:f4:31:f1:0f:3a:f6:47:9c:9b:8a: ba:af:1c:d8:c5:61:1e:0c:4f:7b:46:a6:c1:b4:47: eb:10:cb:d4:2b:db:b8:7c:ee:3d:d8:07:ca:84:f9: 39:96:81:cc:ce:a2:39:6b:93:08:b2:61:4f:28:2c: b3:13:e7:c9:31:9e:98:de:7d:9d:fb:69:a0:ce:d7: c9:59:7d:3b:e8:36:5e:cf:d5:8e:c1:6b:8b:90:92: 69:90:9a:0c:e2:ce:da:aa:2c:e2:f5:43:b9:94:c5: 9c:e6:6c:b5:6f:72:18:3a:8f:d0:8a:c8:60:05:a2: ce:6e:5e:f0:c4:9a:e9:2b:bd:7f:5d:f7:62:53:56: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:03:D1:9C:4B:C5:7B:88:B2:34:87:E7:FC:BC:6B:5A:F1:A8:55:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1296e9fc-5f84-32da-9b7f-82cfa2a9a1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:64:d6:ee:c7:e3:fb:47:cf:c1:a7:f3:0d:b1:c6:d6:e0:61: bc:1b:c1:70:f8:9b:b8:5e:7a:74:46:85:bb:b3:28:1d:c7:ee: 6f:b6:7a:fa:e7:e1:a3:fb:3a:2d:21:8f:39:45:35:0b:f6:ed: 84:03:e7:59:ca:1e:0e:f0:47:d5:cc:4f:3c:c1:38:ff:82:c9: f1:6c:65:39:e6:a5:f6:8c:bc:2b:b3:8d:db:be:b4:3a:f4:39: d7:b6:f0:ca:88:b2:0d:d1:5b:4b:78:70:8e:b0:28:49:5e:1c: d5:c8:9b:64:57:3c:7a:0f:04:28:b1:d8:5c:53:db:30:39:36: ad:41:a4:02:c6:90:f9:e0:ec:43:5a:f0:b7:c1:29:14:49:92: 82:e5:03:f0:78:07:27:17:2c:59:ab:54:f5:55:19:47:cc:cf: 1a:75:4d:59:7b:ad:f5:af:3a:b2:f0:a0:e4:00:34:42:4e:46: 02:05:db:d6:00:89:f9:f0:f3:22:aa:59:4a:36:53:01:7c:2b: 59:c3:84:01:ac:ee:93:ab:08:30:90:8d:89:c0:ab:7e:8a:00: 69:85:a6:94:2a:c9:c8:91:7c:c0:cf:2d:42:8a:45:9f:7d:aa: 42:28:f4:e6:d1:33:9d:b9:c4:ae:e5:dc:fe:ed:80:f1:76:11: c9:7c:b9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswmrjQOIzuO5TAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjcwOTgwMTItNzA4Mi00OGNiLWJiMWYtNDM5NzVlOTU4Y2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl84/sUQaQkb9jk1R4rl3PB9R1RYjEexzjh/L +iLu8mQqDuPZT34WsFHK5Xv8D1jqfWYr+41YHSr/C3Ffs0Yb+K69zTx60qX93+vh Gc4g+kyPIVJe31iL4EToZZsPGQCM2x7qbD9ndzbJ0LrgaeyF7e6lsLBlXOP40sPc u/Qx8Q869kecm4q6rxzYxWEeDE97RqbBtEfrEMvUK9u4fO492AfKhPk5loHMzqI5 a5MIsmFPKCyzE+fJMZ6Y3n2d+2mgztfJWX076DZez9WOwWuLkJJpkJoM4s7aqizi 9UO5lMWc5my1b3IYOo/QishgBaLObl7wxJrpK71/XfdiU1YJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsD0ZxLxXuIsjSH5/y8a1rxqFXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTI5NmU5ZmMtNWY4NC0z MmRhLTliN2YtODJjZmEyYTlhMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdHmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtk1u7H4/tHz8Gn8w2xxtbgYbwbwXD4m7heenRGhbuzKB3H7m+2evrn 4aP7Oi0hjzlFNQv27YQD51nKHg7wR9XMTzzBOP+CyfFsZTnmpfaMvCuzjdu+tDr0 Ode28MqIsg3RW0t4cI6wKEleHNXIm2RXPHoPBCix2FxT2zA5Nq1BpALGkPng7ENa 8LfBKRRJkoLlA/B4BycXLFmrVPVVGUfMzxp1TVl7rfWvOrLwoOQANEJORgIF29YA ifnw8yKqWUo2UwF8K1nDhAGs7pOrCDCQjYnAq36KAGmFppQqyciRfMDPLUKKRZ99 qkIo9ObRM525xK7l3P7tgPF2Ecl8ucA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:03:16 2025 by rpki-client