$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f361c61-7aa3-3a3b-9117-304844b49893.roa File: 1f361c61-7aa3-3a3b-9117-304844b49893.roa (raw, json) Hash identifier: 1adXkbXxhbpr1qbRASKpfSiONBJvgYRz3ZrKpbeoCJ0= Subject key identifier: 3A:68:88:49:F3:B9:13:CE:55:82:C2:2F:C3:1A:41:CF:A3:51:05:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC30F2AE68492022E9A6900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f361c61-7aa3-3a3b-9117-304844b49893.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.222.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:0f:2a:e6:84:92:02:2e:9a:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=71f05f87-cfc6-4611-8079-fdcccb3986ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:41:5c:79:8e:08:2e:99:5b:07:73:7c:19:ad: 3e:11:7e:7d:04:fc:eb:e6:07:3c:54:67:34:bc:10: 07:72:71:e1:27:a3:d6:7f:67:8a:43:44:80:eb:ec: ec:55:e0:8b:f5:40:84:f4:2a:37:89:a9:b5:79:44: 77:c9:4a:fa:5e:81:17:9f:62:22:b1:b7:94:c2:4f: 1f:b5:e9:fa:c8:02:1c:fb:35:96:07:b0:f2:85:3e: f9:65:06:bc:43:17:5e:87:dd:c3:ae:4e:c5:99:a7: 5c:18:1d:31:e9:c0:e7:1d:b5:5b:e8:1e:6a:42:e1: 99:e5:de:aa:8b:71:ad:be:6d:2b:7b:cf:01:12:85: ec:dd:70:fa:df:f2:f5:ce:78:5c:bc:1d:a0:ac:bf: 72:e5:09:b9:c3:82:52:54:2b:d2:47:62:93:f9:ca: 3c:fd:34:a9:be:1e:95:60:28:d0:3a:0b:79:d2:7f: fe:9a:e1:ae:8d:fd:0e:37:bb:96:d8:d1:3d:6e:27: 41:f1:b2:80:68:39:8e:59:5f:38:a4:ec:a0:b2:ba: b4:58:85:88:82:4d:28:1a:a3:84:3f:e0:50:dc:92: 84:3b:c8:f5:7e:ef:4a:ca:a1:dd:4b:e1:38:a9:aa: 72:15:3e:3e:3e:67:e5:7f:68:d1:b9:ae:8b:28:be: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:68:88:49:F3:B9:13:CE:55:82:C2:2F:C3:1A:41:CF:A3:51:05:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f361c61-7aa3-3a3b-9117-304844b49893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.222.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:4b:1f:b9:eb:66:f6:48:56:b5:59:9b:0e:f6:83:30:ab:4e: 9b:72:53:c6:8a:2d:60:ab:53:05:8d:36:10:96:65:aa:ff:92: 7d:51:a6:51:f2:22:48:cc:d7:21:f4:ca:64:c9:fa:35:a0:72: b6:7a:d0:e8:ea:22:11:f4:40:2f:a8:c1:55:a2:44:aa:4f:8c: 4b:0e:f5:77:3e:61:d3:d4:a3:a5:96:30:c6:b0:d4:95:74:86: e7:43:10:a6:5b:e0:a2:ed:73:ec:3c:b4:91:69:3d:42:70:56: 44:ed:69:08:02:2b:d4:09:49:4e:52:5f:e0:2d:85:5f:fc:b5: 2c:ad:b2:1f:15:ac:2f:c0:48:64:0a:88:f1:84:26:12:2f:e1: f5:ca:86:f8:55:6a:9d:03:b1:99:47:bb:a3:6c:93:33:95:39: 4a:31:ac:70:db:62:07:c3:0c:73:9b:4a:16:a9:9d:4f:ea:51: 1e:91:d4:b8:0b:11:78:4c:5e:0f:f0:98:24:bd:72:1b:31:64: 27:3d:a8:04:46:ed:9c:39:19:20:f7:d4:20:a8:a3:34:62:b1: 44:41:69:4b:f9:67:98:1e:7b:a2:6d:27:13:71:8c:a5:3a:d4: ea:27:80:c0:39:1b:a2:88:ba:49:49:46:d5:ca:55:c5:bd:b7: ef:f3:bf:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsww8q5oSSAi6aaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzFmMDVmODctY2ZjNi00NjExLTgwNzktZmRjY2NiMzk4NmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEFceY4ILplbB3N8Ga0+EX59BPzr5gc8VGc0 vBAHcnHhJ6PWf2eKQ0SA6+zsVeCL9UCE9Co3iam1eUR3yUr6XoEXn2IisbeUwk8f ten6yAIc+zWWB7DyhT75ZQa8Qxdeh93Drk7FmadcGB0x6cDnHbVb6B5qQuGZ5d6q i3Gtvm0re88BEoXs3XD63/L1znhcvB2grL9y5Qm5w4JSVCvSR2KT+co8/TSpvh6V YCjQOgt50n/+muGujf0ON7uW2NE9bidB8bKAaDmOWV84pOygsrq0WIWIgk0oGqOE P+BQ3JKEO8j1fu9KyqHdS+E4qapyFT4+Pmflf2jRua6LKL7L9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpoiEnzuRPOVYLCL8MaQc+jUQXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWYzNjFjNjEtN2FhMy0z YTNiLTkxMTctMzA0ODQ0YjQ5ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASd5qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1LH7nrZvZIVrVZmw72gzCrTptyU8aKLWCrUwWNNhCWZar/kn1RplHy IkjM1yH0ymTJ+jWgcrZ60OjqIhH0QC+owVWiRKpPjEsO9Xc+YdPUo6WWMMaw1JV0 hudDEKZb4KLtc+w8tJFpPUJwVkTtaQgCK9QJSU5SX+AthV/8tSytsh8VrC/ASGQK iPGEJhIv4fXKhvhVap0DsZlHu6NskzOVOUoxrHDbYgfDDHObShapnU/qUR6R1LgL EXhMXg/wmCS9chsxZCc9qARG7Zw5GSD31CCoozRisURBaUv5Z5gee6JtJxNxjKU6 1OongMA5G6KIuklJRtXKVcW9t+/zv2A= -----END CERTIFICATE-----Generated at Sun Aug 24 06:06:30 2025 by rpki-client