$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d602e04-ff01-309f-b0b5-130bdcc06b8d.roa File: 1d602e04-ff01-309f-b0b5-130bdcc06b8d.roa (raw, json) Hash identifier: pdxLyURQ0BhwRyw05OT+2FU39eCALeuE/BRZ2YoTx3k= Subject key identifier: F7:9B:3C:D9:27:73:E3:86:0B:28:E6:36:EA:5F:D4:60:D4:35:DF:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC25E68A6DB2FAD762F8380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d602e04-ff01-309f-b0b5-130bdcc06b8d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.168.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:5e:68:a6:db:2f:ad:76:2f:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=52c61135-48a2-4d37-b0e1-122b3184b59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:67:ef:a1:8f:19:14:86:1b:c2:06:7a:60:53: e0:d3:4c:5e:61:bc:5a:56:af:fd:5c:79:8f:be:62: 10:c7:65:7d:95:7c:77:29:4c:0e:58:ca:3b:99:ac: d8:d1:49:fe:55:32:b7:2a:27:2d:7b:dd:71:8b:16: 29:cb:1b:6d:c0:88:9f:8f:0d:58:f4:f4:33:11:b6: 00:6f:54:6d:c8:f3:b4:5e:9d:c8:c8:f9:67:e8:71: dd:b9:32:17:28:4e:6c:49:1d:22:21:39:b5:64:c4: 73:9b:a9:1b:de:72:d0:fb:ab:b0:f4:0a:c8:3e:7d: 20:2f:48:8e:1c:8c:00:8e:fe:27:bd:5e:58:d4:26: 5b:01:af:14:55:64:4d:c0:bc:86:48:5d:ad:be:0a: 07:46:47:d8:e2:2d:df:73:d5:1e:a0:6b:c0:aa:ed: 9e:d0:d0:0b:20:69:09:f1:3c:78:9f:3a:5a:83:c1: 54:54:6e:26:08:82:e2:4b:a5:20:19:8d:12:76:a7: 86:9e:6d:cf:86:bd:96:ab:19:33:6d:99:f4:a4:6c: b2:34:7d:fc:ba:9f:7c:09:32:a8:5a:4d:55:49:7f: c3:7b:d3:b9:cd:e4:52:c0:c2:1f:fb:74:18:c3:16: 4e:fa:97:ba:f6:78:7d:d8:00:e8:19:64:c4:0d:45: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9B:3C:D9:27:73:E3:86:0B:28:E6:36:EA:5F:D4:60:D4:35:DF:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d602e04-ff01-309f-b0b5-130bdcc06b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.168.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:17:a5:de:4b:be:58:1c:5b:90:d5:bd:59:2c:ea:d5:47:05: ad:2b:93:c7:d3:c9:f9:14:2b:28:b8:69:ad:36:bc:9d:a9:dd: ca:db:0a:36:77:88:49:d5:4f:1d:20:fc:d8:5d:19:49:1d:ae: 9d:fc:03:b7:38:b6:95:9d:de:64:a3:85:5d:64:66:d0:dc:ae: 38:1f:4b:88:03:56:9e:71:07:e7:92:0b:cd:02:00:c6:6d:37: 2d:2f:79:e2:6d:97:04:90:b6:73:b1:eb:43:0d:ca:58:c4:5b: c2:df:cd:bc:1f:63:39:8c:d1:5e:f4:1e:59:d0:8a:81:99:f0: e5:d3:f0:95:55:68:bd:ca:45:b5:c0:6a:ee:94:f8:ec:da:9e: 85:2c:0e:b6:e3:df:5d:4e:0d:91:c8:31:d8:24:ab:82:8b:13: e1:3d:e2:07:69:65:c9:7f:89:81:40:8d:d7:43:53:36:3f:99: 32:89:87:05:f3:a2:1b:01:50:4c:56:48:fe:b3:aa:ee:34:80: a1:e7:82:f3:3e:a3:d5:f0:44:00:a4:d6:9d:b0:bb:dc:77:a6: 88:f0:f3:80:f4:dd:ea:ea:6f:74:a0:2c:70:e0:6a:50:8c:6b: a5:c9:f2:ff:82:3a:a0:a4:d6:d9:08:af:33:6a:22:cf:7d:25: e1:4b:df:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswl5optsvrXYvg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTJjNjExMzUtNDhhMi00ZDM3LWIwZTEtMTIyYjMxODRiNTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmfvoY8ZFIYbwgZ6YFPg00xeYbxaVq/9XHmP vmIQx2V9lXx3KUwOWMo7mazY0Un+VTK3Kicte91xixYpyxttwIifjw1Y9PQzEbYA b1RtyPO0Xp3IyPln6HHduTIXKE5sSR0iITm1ZMRzm6kb3nLQ+6uw9ArIPn0gL0iO HIwAjv4nvV5Y1CZbAa8UVWRNwLyGSF2tvgoHRkfY4i3fc9UeoGvAqu2e0NALIGkJ 8Tx4nzpag8FUVG4mCILiS6UgGY0SdqeGnm3Phr2WqxkzbZn0pGyyNH38up98CTKo Wk1VSX/De9O5zeRSwMIf+3QYwxZO+pe69nh92ADoGWTEDUX1nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPebPNknc+OGCyjmNupf1GDUNd80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQ2MDJlMDQtZmYwMS0z MDlmLWIwYjUtMTMwYmRjYzA2YjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSajcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8Xpd5LvlgcW5DVvVks6tVHBa0rk8fTyfkUKyi4aa02vJ2p3crbCjZ3 iEnVTx0g/NhdGUkdrp38A7c4tpWd3mSjhV1kZtDcrjgfS4gDVp5xB+eSC80CAMZt Ny0veeJtlwSQtnOx60MNyljEW8LfzbwfYzmM0V70HlnQioGZ8OXT8JVVaL3KRbXA au6U+OzanoUsDrbj311ODZHIMdgkq4KLE+E94gdpZcl/iYFAjddDUzY/mTKJhwXz ohsBUExWSP6zqu40gKHngvM+o9XwRACk1p2wu9x3pojw84D03erqb3SgLHDgalCM a6XJ8v+COqCk1tkIrzNqIs99JeFL37A= -----END CERTIFICATE-----Generated at Sun Aug 24 05:38:20 2025 by rpki-client