$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2599acb3-bfd6-3eff-b119-cbb7794d6088.roa File: 2599acb3-bfd6-3eff-b119-cbb7794d6088.roa (raw, json) Hash identifier: YqciFkaavDLM3u+1DvOzoOz7RE8U13+KMLfb/zZXvLk= Subject key identifier: 9F:91:BD:FE:B9:8F:A2:2D:3E:7F:86:E8:7C:55:23:DC:1A:C0:74:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC313B49AE8123CBDA0F0E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2599acb3-bfd6-3eff-b119-cbb7794d6088.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.223.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:13:b4:9a:e8:12:3c:bd:a0:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b9706455-ba26-4b8d-9f68-c9581f4ebfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:74:29:18:64:7c:13:1f:54:43:04:33:b7: 1c:95:f4:0b:a4:12:05:12:6c:51:16:9b:4f:1e:a5: 0f:7a:7c:d3:16:84:bd:91:e3:ee:27:00:d6:6d:7f: 9d:62:8a:18:47:69:62:f5:84:53:1d:b0:b8:74:2c: f9:84:b8:06:57:8a:24:a4:73:bb:7a:e8:5f:ab:a5: 6c:23:88:d6:13:f6:b4:01:9b:76:4e:48:9c:38:e8: af:3d:6e:95:b9:71:31:99:04:61:48:2b:bb:dc:95: 7e:74:32:78:f0:81:0d:f3:51:fd:38:d1:c2:91:a2: 42:57:80:71:fe:22:26:6e:48:f6:b9:95:c2:b7:fe: 91:96:13:d0:43:97:b9:68:da:b9:48:41:65:00:68: 28:62:c7:32:1a:15:c3:1d:7e:27:a8:d3:06:d4:bf: cf:39:88:5f:8d:1e:74:75:65:17:a7:bf:04:55:d6: 3d:d0:e3:55:be:23:86:d8:76:30:ce:13:15:46:ca: f7:0a:fe:b5:af:a7:50:07:f9:4f:91:cd:c3:57:9c: ce:51:c2:28:a4:b1:d9:e1:2a:0b:1f:c4:21:14:cb: 3f:3d:ee:35:ff:14:60:0c:31:e1:8c:25:cf:3c:aa: e0:54:99:ad:7d:b4:a1:57:92:c7:c0:df:c3:e2:c4: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:91:BD:FE:B9:8F:A2:2D:3E:7F:86:E8:7C:55:23:DC:1A:C0:74:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2599acb3-bfd6-3eff-b119-cbb7794d6088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:66:aa:d9:3a:68:9d:85:ec:e6:9c:26:30:4d:b2:95:46:a5: 30:17:10:80:05:d2:17:07:30:9f:e9:c9:92:b1:8c:9f:e7:89: 1d:1f:dd:0f:86:f3:88:5b:0b:65:5c:e3:39:d6:6b:1e:50:08: ec:be:3c:67:b0:04:de:fb:c3:a3:32:eb:b7:75:69:2a:a3:82: 64:8d:7c:de:45:a4:80:92:e9:37:ab:85:2d:50:35:9e:3d:2e: f2:f6:bb:30:2b:2e:1e:05:cb:28:12:1e:3c:90:86:5d:f3:01: 93:ac:cd:b0:92:79:35:8a:0f:63:28:7d:04:30:d8:ee:27:72: f9:ee:08:be:e2:30:e2:6e:cb:4e:74:22:11:32:cd:2a:fa:50: 11:50:a0:e8:41:56:6b:b2:db:4a:92:83:98:3f:5d:71:fb:f1: d5:0e:0b:e5:b7:9b:07:77:cc:49:7a:46:73:2a:79:81:61:cc: 4f:6b:4c:1a:52:6b:96:db:b5:b0:0d:d7:12:4e:6e:10:4f:bb: 58:2c:70:d4:71:50:94:af:60:40:0e:fa:18:bd:2f:38:37:9b: c9:44:c0:b7:39:1c:66:05:b1:22:0c:5a:ce:b0:60:3c:cc:03: 51:79:6c:b9:8f:dd:46:cb:6a:d9:52:bd:d0:fa:34:fd:b7:9c: 03:3b:ee:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswxO0mugSPL2g8OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Yjk3MDY0NTUtYmEyNi00YjhkLTlmNjgtYzk1ODFmNGViZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAh0KRhkfBMfVEMEM7cclfQLpBIFEmxRFptP HqUPenzTFoS9kePuJwDWbX+dYooYR2li9YRTHbC4dCz5hLgGV4okpHO7euhfq6Vs I4jWE/a0AZt2TkicOOivPW6VuXExmQRhSCu73JV+dDJ48IEN81H9ONHCkaJCV4Bx /iImbkj2uZXCt/6RlhPQQ5e5aNq5SEFlAGgoYscyGhXDHX4nqNMG1L/POYhfjR50 dWUXp78EVdY90ONVviOG2HYwzhMVRsr3Cv61r6dQB/lPkc3DV5zOUcIopLHZ4SoL H8QhFMs/Pe41/xRgDDHhjCXPPKrgVJmtfbShV5LHwN/D4sRPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+Rvf65j6ItPn+G6HxVI9wawHREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjU5OWFjYjMtYmZkNi0z ZWZmLWIxMTktY2JiNzc5NGQ2MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSd+8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMxmqtk6aJ2F7OacJjBNspVGpTAXEIAF0hcHMJ/pyZKxjJ/niR0f3Q+G 84hbC2Vc4znWax5QCOy+PGewBN77w6My67d1aSqjgmSNfN5FpICS6TerhS1QNZ49 LvL2uzArLh4FyygSHjyQhl3zAZOszbCSeTWKD2MofQQw2O4ncvnuCL7iMOJuy050 IhEyzSr6UBFQoOhBVmuy20qSg5g/XXH78dUOC+W3mwd3zEl6RnMqeYFhzE9rTBpS a5bbtbAN1xJObhBPu1gscNRxUJSvYEAO+hi9Lzg3m8lEwLc5HGYFsSIMWs6wYDzM A1F5bLmP3UbLatlSvdD6NP23nAM77lw= -----END CERTIFICATE-----Generated at Sun Aug 24 04:29:09 2025 by rpki-client