$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25607423-d6fc-3f33-9094-42dfdadb9f22.roa File: 25607423-d6fc-3f33-9094-42dfdadb9f22.roa (raw, json) Hash identifier: xQ0xLLW5Vix5cPA7GUd1S0V4WC42ZugMQuq8VVMFXDM= Subject key identifier: 4D:CC:FC:9C:2F:56:02:A7:78:5C:93:DC:89:89:B3:7E:BF:D4:71:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC483949EA27C2177A50280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25607423-d6fc-3f33-9094-42dfdadb9f22.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.22.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:83:94:9e:a2:7c:21:77:a5:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8fcffd6a-4cc3-44f2-bef9-cb771fac392e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:b9:fb:75:b5:13:41:65:e9:62:9c:fa:a9: 52:b0:e4:cd:ec:98:8f:33:bb:0a:4c:f1:1c:67:68: 86:26:8f:5b:e9:98:64:38:3f:90:13:0a:97:83:e9: 09:e9:1a:8c:10:66:ac:bd:57:bd:12:2f:70:c3:5d: 70:60:52:db:16:c7:70:37:06:ac:01:0c:ba:59:ba: 34:b1:21:7b:b7:4d:a7:1c:82:5a:06:5b:99:c9:39: 65:58:48:c1:7e:54:27:5e:1c:eb:4c:ce:31:97:e9: 3d:26:6a:bb:ed:5b:e2:e2:8f:c6:77:d4:c8:a8:e8: 2a:7c:f6:14:36:85:86:a3:98:39:b5:f7:b1:71:ed: f6:c8:c7:df:9a:e8:aa:37:d8:1a:34:cd:67:13:c6: 08:0b:82:b2:3d:89:39:30:3f:c4:11:dd:30:e0:73: eb:17:61:e6:f9:25:5e:c9:26:1a:46:05:24:8f:aa: d6:1b:19:8c:13:8e:d4:8a:2b:b4:d0:ce:17:d3:ee: c2:ef:02:89:a9:fc:fa:bc:e2:73:00:a2:27:55:eb: 17:f6:22:eb:74:1c:b7:44:93:46:85:48:07:a3:2a: 85:9a:f4:14:dd:09:df:40:be:3a:45:8d:cd:58:03: 3a:d0:31:fa:8f:45:74:a4:29:1a:c0:e7:71:dd:b1: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CC:FC:9C:2F:56:02:A7:78:5C:93:DC:89:89:B3:7E:BF:D4:71:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25607423-d6fc-3f33-9094-42dfdadb9f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.22.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ae:86:17:68:e5:54:95:f2:0f:f7:f6:09:fc:a7:e3:2b:a7: 1c:37:dc:58:09:97:ec:64:5c:35:8a:2e:a1:6f:97:0f:7c:f8: d4:8e:29:b4:b5:7a:16:ec:e2:e9:71:1c:c7:a1:fd:63:3d:19: c1:0d:c5:66:b4:cd:e5:c0:e9:5c:d2:39:65:f0:e0:64:17:09: ed:54:79:85:68:b6:14:d3:90:3d:a3:a7:5e:dc:b6:de:6b:47: 31:d8:bb:3c:7d:47:8f:bd:e1:57:a0:7a:3d:49:fb:e7:00:ae: d8:13:01:bb:82:a2:ee:7e:22:df:8d:7b:50:15:2f:32:d5:4e: 93:21:a1:80:7c:55:2d:8b:74:ea:93:fa:bd:07:85:e0:38:ba: 0b:fc:ea:1f:d7:9e:36:41:28:88:e3:42:0b:db:71:89:cf:92: b3:bf:37:75:2f:5c:52:e4:7f:03:a0:ae:6c:f9:0f:5c:cf:29: 05:f9:62:b8:47:e5:eb:e2:53:87:44:2c:f6:15:f9:f7:f5:ea: 22:bf:75:a0:7f:9d:68:f1:e5:e0:32:4e:de:7d:7e:79:e8:6e: 04:1e:f5:89:8a:15:76:c5:1e:23:0c:ba:02:c2:4c:ab:d1:66: 6a:89:4b:b7:f5:dc:60:d5:1f:40:3a:6c:50:a6:30:74:68:c8: 18:bc:ed:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxIOUnqJ8IXelAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGZjZmZkNmEtNGNjMy00NGYyLWJlZjktY2I3NzFmYWMzOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj25+3W1E0Fl6WKc+qlSsOTN7JiPM7sKTPEc Z2iGJo9b6ZhkOD+QEwqXg+kJ6RqMEGasvVe9Ei9ww11wYFLbFsdwNwasAQy6Wbo0 sSF7t02nHIJaBluZyTllWEjBflQnXhzrTM4xl+k9Jmq77Vvi4o/Gd9TIqOgqfPYU NoWGo5g5tfexce32yMffmuiqN9gaNM1nE8YIC4KyPYk5MD/EEd0w4HPrF2Hm+SVe ySYaRgUkj6rWGxmME47Uiiu00M4X0+7C7wKJqfz6vOJzAKInVesX9iLrdBy3RJNG hUgHoyqFmvQU3QnfQL46RY3NWAM60DH6j0V0pCkawOdx3bG/LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3M/JwvVgKneFyT3ImJs36/1HFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjU2MDc0MjMtZDZmYy0z ZjMzLTkwOTQtNDJkZmRhZGI5ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuuhhdo5VSV8g/39gn8p+Mrpxw33FgJl+xkXDWKLqFvlw98+NSOKbS1 ehbs4ulxHMeh/WM9GcENxWa0zeXA6VzSOWXw4GQXCe1UeYVothTTkD2jp17ctt5r RzHYuzx9R4+94Vegej1J++cArtgTAbuCou5+It+Ne1AVLzLVTpMhoYB8VS2LdOqT +r0HheA4ugv86h/XnjZBKIjjQgvbcYnPkrO/N3UvXFLkfwOgrmz5D1zPKQX5YrhH 5eviU4dELPYV+ff16iK/daB/nWjx5eAyTt59fnnobgQe9YmKFXbFHiMMugLCTKvR ZmqJS7f13GDVH0A6bFCmMHRoyBi87ZE= -----END CERTIFICATE-----Generated at Sun Aug 24 01:24:55 2025 by rpki-client