$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f39aa78-5f97-3067-842b-5e97b44e1562.roa File: 1f39aa78-5f97-3067-842b-5e97b44e1562.roa (raw, json) Hash identifier: GnsLWwWd+C3TMqd4EbvLurGcUfgxkJ10iccH969bdMk= Subject key identifier: 6F:1F:77:7B:56:BD:50:D1:9E:06:AC:D4:74:4B:63:8C:A6:92:83:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3A7FC2E313839581A0E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f39aa78-5f97-3067-842b-5e97b44e1562.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.198.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:a7:fc:2e:31:38:39:58:1a:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2e029f68-0b18-421f-aaf7-7745afda25d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:9f:8e:a3:86:75:c8:75:5e:1b:a7:3f:e0: 4a:ae:63:c1:0e:c2:21:de:0c:01:a4:48:5b:af:29: 83:74:f8:78:51:1f:1f:4d:54:dd:00:2d:dc:67:71: bf:82:1b:0a:ca:6d:47:67:ac:8f:ad:25:ee:c6:14: 2d:19:d9:65:be:c6:2a:49:3e:d1:47:49:d1:86:7b: 32:79:ba:20:e2:0b:7e:65:9c:2d:b1:f6:3a:3c:f9: c8:13:77:2a:f5:6f:df:4e:36:a7:60:b0:38:2a:bd: 9b:60:d4:77:a2:f7:c4:d0:de:b7:6a:64:28:75:7e: 51:1a:ee:90:9d:2b:b7:c4:2f:e9:63:b5:3a:84:63: 5b:25:40:50:d0:76:8c:07:3f:18:dc:7e:b8:3f:3f: 07:97:7e:cb:d5:87:7e:fe:b1:86:21:5d:ef:4f:43: 1c:ce:76:d4:61:99:56:76:35:3d:4e:53:f9:20:0d: 6e:31:90:d4:76:63:74:ad:fd:92:1f:e1:a0:0d:3c: ac:63:2a:53:67:f1:6d:18:64:fb:cb:01:66:77:00: 22:94:d0:c5:ce:7a:3f:9e:0b:be:99:27:30:34:e7: d5:48:73:28:96:ea:32:e9:fe:3b:46:9c:00:c2:33: f2:79:82:94:0e:d1:3d:0c:93:0a:3f:36:73:27:e4: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1F:77:7B:56:BD:50:D1:9E:06:AC:D4:74:4B:63:8C:A6:92:83:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f39aa78-5f97-3067-842b-5e97b44e1562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.198.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a5:51:2e:04:6e:e3:f0:c3:99:a8:e5:1a:6c:7c:22:38:2d: ec:da:0c:aa:22:1a:5c:4a:c6:ae:3d:51:6c:f2:e0:61:8f:ff: e8:a5:f2:cd:82:dc:fa:ee:52:70:1a:ef:69:ff:7e:2e:74:ef: 84:fa:d3:8c:f9:64:d2:72:30:8d:e2:22:16:3e:25:da:23:07: be:39:38:e5:a5:72:e9:92:99:6d:3a:4e:f7:d1:01:c1:38:13: b5:73:7b:4b:a2:12:de:76:80:c8:81:b6:05:50:5c:a4:6a:ad: a6:51:bc:34:ff:d1:14:8c:01:02:ba:cc:19:d1:bc:1c:26:1f: b0:0e:b3:32:95:1c:a4:e9:64:c8:75:9b:09:8c:92:5e:a7:3b: b8:ef:42:91:57:19:b4:a6:85:0b:90:f3:90:22:37:48:71:10: 6f:8a:96:5c:83:22:32:a3:20:51:43:d5:d8:c7:0b:24:49:f9: 30:bb:c7:38:e9:b6:7d:9d:ac:8c:fe:bd:cc:89:18:d0:da:36: 27:05:4a:3c:14:93:d9:62:c6:62:92:33:2d:1e:af:e6:21:43: 3b:8f:d7:10:5b:04:d1:05:ca:68:58:fb:41:06:aa:57:11:c8: a8:72:f9:a8:be:be:72:6b:5f:8f:4d:dd:12:75:be:04:80:e0: e2:c6:44:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw6f8LjE4OVgaDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmUwMjlmNjgtMGIxOC00MjFmLWFhZjctNzc0NWFmZGEyNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbmfjqOGdch1XhunP+BKrmPBDsIh3gwBpEhb rymDdPh4UR8fTVTdAC3cZ3G/ghsKym1HZ6yPrSXuxhQtGdllvsYqST7RR0nRhnsy ebog4gt+ZZwtsfY6PPnIE3cq9W/fTjanYLA4Kr2bYNR3ovfE0N63amQodX5RGu6Q nSu3xC/pY7U6hGNbJUBQ0HaMBz8Y3H64Pz8Hl37L1Yd+/rGGIV3vT0McznbUYZlW djU9TlP5IA1uMZDUdmN0rf2SH+GgDTysYypTZ/FtGGT7ywFmdwAilNDFzno/ngu+ mScwNOfVSHMoluoy6f47RpwAwjPyeYKUDtE9DJMKPzZzJ+SA4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8fd3tWvVDRngas1HRLY4ymkoPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWYzOWFhNzgtNWY5Ny0z MDY3LTg0MmItNWU5N2I0NGUxNTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOlUS4EbuPww5mo5RpsfCI4LezaDKoiGlxKxq49UWzy4GGP/+il8s2C 3PruUnAa72n/fi5074T604z5ZNJyMI3iIhY+JdojB745OOWlcumSmW06TvfRAcE4 E7Vze0uiEt52gMiBtgVQXKRqraZRvDT/0RSMAQK6zBnRvBwmH7AOszKVHKTpZMh1 mwmMkl6nO7jvQpFXGbSmhQuQ85AiN0hxEG+KllyDIjKjIFFD1djHCyRJ+TC7xzjp tn2drIz+vcyJGNDaNicFSjwUk9lixmKSMy0er+YhQzuP1xBbBNEFymhY+0EGqlcR yKhy+ai+vnJrX49N3RJ1vgSA4OLGRHc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:25:07 2025 by rpki-client