$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22651b28-2b4a-3ab4-8bd0-f63eaa17bbd4.roa File: 22651b28-2b4a-3ab4-8bd0-f63eaa17bbd4.roa (raw, json) Hash identifier: DgDzj96vV0zuB7pVu7uePG6OXfyPwGSBW+Xd+5JY6Lc= Subject key identifier: 22:22:3A:82:C6:88:43:E8:92:AD:0D:4C:A3:C5:22:90:FB:46:61:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC28EB2B60DB6F3865E6700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22651b28-2b4a-3ab4-8bd0-f63eaa17bbd4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.72.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:8e:b2:b6:0d:b6:f3:86:5e:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=499837ea-40f5-4e58-a6d6-8107c2006684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:63:10:50:84:72:0c:58:0d:04:f9:6b:8a: 8c:6f:40:27:6f:b1:e1:ab:5d:41:97:18:76:c0:a9: bd:bd:67:59:f0:e2:39:66:b2:ed:cf:df:5e:20:ad: 1f:db:f0:dc:96:58:93:31:6f:7e:25:93:50:04:8c: 94:df:7b:94:65:3e:b9:81:b8:74:ec:13:f0:90:e6: a0:ee:7b:e5:d6:14:6b:46:2e:4e:7b:4f:4d:8b:2a: 25:da:13:fe:44:c9:6d:da:1c:d3:e7:46:26:ba:6b: 86:3c:c1:89:d0:39:16:4c:bf:af:5c:e6:15:7c:1c: e9:b2:ac:30:2d:e1:26:8a:cf:e3:0e:b1:c8:1c:ff: 47:c9:80:a5:d3:75:95:b9:6e:5a:3c:17:ee:6c:5c: 7e:10:b6:90:a0:61:32:f4:a2:c9:a1:0e:41:3d:88: 58:45:61:a7:09:dc:e2:63:2b:ed:54:35:cb:7a:19: 9a:5e:ae:f3:e0:d5:bd:de:62:27:3b:81:b5:d9:43: 48:1f:4b:f7:f6:58:e9:59:7e:95:7a:c0:4f:0a:b6: dd:20:49:95:75:b2:73:7d:93:27:1a:0a:84:56:0c: b8:5e:1e:73:cc:14:8d:19:80:df:ea:d0:65:b5:ff: 61:a6:04:a9:2b:b8:35:a8:49:01:81:38:4c:5d:99: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:22:3A:82:C6:88:43:E8:92:AD:0D:4C:A3:C5:22:90:FB:46:61:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22651b28-2b4a-3ab4-8bd0-f63eaa17bbd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.72.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:51:c3:66:47:8f:20:d7:22:f8:8e:e8:e7:c5:62:68:54:b7: c8:07:1c:3c:29:3f:11:c2:9f:6a:da:61:22:35:46:80:99:4b: 0b:2d:15:35:e7:12:b5:3a:70:76:85:76:7d:b7:72:4a:47:26: b9:8b:c8:e1:f6:84:22:38:fa:47:5a:e2:52:5b:24:46:7c:e9: d4:bd:18:b9:04:4b:fe:de:04:35:0a:6d:e4:98:c7:81:ba:7d: ba:fd:4c:8d:b5:75:49:86:6b:cf:7f:f1:c9:bf:1a:ff:7e:aa: 64:12:37:1d:cb:3e:08:f6:0c:e6:a7:ac:28:29:d5:9e:4b:2a: 9f:d7:3c:59:eb:aa:b5:2f:71:8b:b7:51:9d:16:eb:5b:e0:b0: d0:55:48:09:bb:e8:39:18:43:ce:fa:92:e7:33:9e:69:d9:9f: cf:41:78:62:65:9e:f2:46:f1:f8:68:34:cb:50:41:b8:ab:5e: 74:80:46:d9:77:37:0b:b0:96:58:de:91:31:a0:c0:fc:33:dd: 61:16:85:9b:a4:3c:fa:ec:d8:37:64:6d:df:64:f4:73:a2:ff: 2e:f9:00:08:d0:26:b2:c1:3a:1c:aa:30:25:08:4f:37:d1:13: 32:0a:88:4f:95:80:58:ed:ad:cb:f1:24:05:cc:58:97:e3:76: 7d:3c:fc:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswo6ytg2284ZeZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDk5ODM3ZWEtNDBmNS00ZTU4LWE2ZDYtODEwN2MyMDA2Njg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd5jEFCEcgxYDQT5a4qMb0Anb7Hhq11Blxh2 wKm9vWdZ8OI5ZrLtz99eIK0f2/DclliTMW9+JZNQBIyU33uUZT65gbh07BPwkOag 7nvl1hRrRi5Oe09Niyol2hP+RMlt2hzT50YmumuGPMGJ0DkWTL+vXOYVfBzpsqww LeEmis/jDrHIHP9HyYCl03WVuW5aPBfubFx+ELaQoGEy9KLJoQ5BPYhYRWGnCdzi YyvtVDXLehmaXq7z4NW93mInO4G12UNIH0v39ljpWX6VesBPCrbdIEmVdbJzfZMn GgqEVgy4Xh5zzBSNGYDf6tBltf9hpgSpK7g1qEkBgThMXZmBmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIiOoLGiEPokq0NTKPFIpD7RmHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI2NTFiMjgtMmI0YS0z YWI0LThiZDAtZjYzZWFhMTdiYmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUiCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdRw2ZHjyDXIviO6OfFYmhUt8gHHDwpPxHCn2raYSI1RoCZSwstFTXn ErU6cHaFdn23ckpHJrmLyOH2hCI4+kda4lJbJEZ86dS9GLkES/7eBDUKbeSYx4G6 fbr9TI21dUmGa89/8cm/Gv9+qmQSNx3LPgj2DOanrCgp1Z5LKp/XPFnrqrUvcYu3 UZ0W61vgsNBVSAm76DkYQ876kucznmnZn89BeGJlnvJG8fhoNMtQQbirXnSARtl3 NwuwlljekTGgwPwz3WEWhZukPPrs2Ddkbd9k9HOi/y75AAjQJrLBOhyqMCUITzfR EzIKiE+VgFjtrcvxJAXMWJfjdn08/Js= -----END CERTIFICATE-----Generated at Sun Aug 24 01:23:09 2025 by rpki-client