$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a7e07b1-f5cd-3d4d-aaf8-377950f33959.roa File: 1a7e07b1-f5cd-3d4d-aaf8-377950f33959.roa (raw, json) Hash identifier: Ae3I9cLwhuoQBSuh/orncBQoB5dfn7ceV0lv87TT8EA= Subject key identifier: 64:5D:CB:B2:A7:E3:0B:B0:69:E7:36:67:97:48:D0:FA:77:D2:B5:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5252F903FA0967693C7E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a7e07b1-f5cd-3d4d-aaf8-377950f33959.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.170.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:25:2f:90:3f:a0:96:76:93:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=13cb4fc6-25a6-4f6d-bfb1-fdc85c4def03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:63:bd:94:b6:e8:bc:8c:c0:0b:dc:09:f0: ff:9b:74:b5:9d:39:53:3b:22:ca:a3:89:f2:97:9f: 1e:3f:86:26:fb:af:67:f0:b0:cb:c4:33:a0:f4:7b: 34:e5:8a:95:ec:6c:ed:05:65:ff:f0:01:c8:0e:b3: 5f:84:91:29:e9:8e:03:92:8b:9e:69:7e:ba:a7:d0: 78:5b:a9:df:48:74:76:fb:db:36:61:ad:5d:b8:2f: d1:23:cf:fc:f9:b4:3b:ce:a8:e4:46:53:63:b6:c0: c6:01:db:c6:02:38:b5:4a:f9:61:71:59:5d:35:16: be:d5:5b:9d:2e:72:ad:96:3b:de:e8:59:ce:85:a8: 56:71:4a:22:27:71:5a:61:98:2f:c6:a7:f6:d5:b2: 36:e7:dc:f8:a1:6c:24:7f:02:bc:de:86:c0:92:67: f3:c4:35:a1:aa:25:24:a0:24:79:eb:7a:ce:f9:82: 5a:10:8e:c8:5b:95:4f:a0:39:4a:a3:54:fe:a9:74: 31:a2:2a:bf:19:3e:1a:32:0b:b8:0d:42:b2:7b:3b: aa:77:36:b6:c0:34:9e:47:f5:7c:77:ca:48:ed:44: 36:ff:4d:59:06:7f:27:37:46:a8:05:34:9b:e0:b7: c1:4a:16:2d:17:df:67:ff:03:4d:bf:bc:ec:ba:9c: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:CB:B2:A7:E3:0B:B0:69:E7:36:67:97:48:D0:FA:77:D2:B5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a7e07b1-f5cd-3d4d-aaf8-377950f33959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:32:9b:86:d3:04:7a:4c:b2:9a:ba:0a:08:92:52:b3:f5:6f: 0b:b4:1c:d5:f3:87:1d:70:c9:e9:ef:bc:b3:dd:89:fa:b2:2e: f7:84:96:75:2d:dc:53:c9:f6:17:c5:d5:be:ca:d7:9b:fa:3e: ba:47:a6:bf:24:ab:f8:e0:88:16:b5:f3:69:12:6a:36:cc:d7: a3:23:e6:d0:00:f3:3e:58:62:25:ca:b5:a4:ab:33:1a:30:52: 0a:0b:09:ed:56:9b:66:05:19:fb:08:5e:5c:95:c1:bb:b6:65: fa:a7:b8:28:2b:9a:38:e8:33:42:27:f0:13:35:31:07:8a:89: 25:76:bd:a7:f6:eb:80:78:99:07:c0:e1:f5:66:77:e5:a2:55: d9:ab:17:05:55:d6:7e:ec:36:df:e5:8a:59:7e:1c:16:ae:4a: 41:13:cc:a9:ec:f0:3a:9a:7c:d3:82:2e:00:9b:a9:f0:cc:11: 4a:bb:24:9b:52:cb:e4:ef:fb:eb:fa:0f:d3:7d:f8:82:1e:b6: da:a3:f7:c6:35:21:d2:56:6c:fc:e3:00:2f:81:76:56:5a:80: 66:a9:0a:6f:03:e3:6c:63:a3:c2:bd:3e:3b:e2:2f:0c:a1:b6: 6d:1c:34:d7:77:df:9a:23:fa:65:78:ee:c3:c3:79:25:c1:2b: f8:e3:25:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxSUvkD+glnaTx+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTNjYjRmYzYtMjVhNi00ZjZkLWJmYjEtZmRjODVjNGRlZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4VjvZS26LyMwAvcCfD/m3S1nTlTOyLKo4ny l58eP4Ym+69n8LDLxDOg9Hs05YqV7GztBWX/8AHIDrNfhJEp6Y4DkoueaX66p9B4 W6nfSHR2+9s2Ya1duC/RI8/8+bQ7zqjkRlNjtsDGAdvGAji1SvlhcVldNRa+1Vud LnKtljve6FnOhahWcUoiJ3FaYZgvxqf21bI259z4oWwkfwK83obAkmfzxDWhqiUk oCR563rO+YJaEI7IW5VPoDlKo1T+qXQxoiq/GT4aMgu4DUKyezuqdza2wDSeR/V8 d8pI7UQ2/01ZBn8nN0aoBTSb4LfBShYtF99n/wNNv7zsupxN3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRdy7Kn4wuwaec2Z5dI0Pp30rVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE3ZTA3YjEtZjVjZC0z ZDRkLWFhZjgtMzc3OTUwZjMzOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSarOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYym4bTBHpMspq6CgiSUrP1bwu0HNXzhx1wyenvvLPdifqyLveElnUt 3FPJ9hfF1b7K15v6PrpHpr8kq/jgiBa182kSajbM16Mj5tAA8z5YYiXKtaSrMxow UgoLCe1Wm2YFGfsIXlyVwbu2ZfqnuCgrmjjoM0In8BM1MQeKiSV2vaf264B4mQfA 4fVmd+WiVdmrFwVV1n7sNt/lill+HBauSkETzKns8DqafNOCLgCbqfDMEUq7JJtS y+Tv++v6D9N9+IIettqj98Y1IdJWbPzjAC+BdlZagGapCm8D42xjo8K9PjviLwyh tm0cNNd335oj+mV47sPDeSXBK/jjJUM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:07:00 2025 by rpki-client