$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2baccbe0-49fb-3a72-a48a-25ca93e448cc.roa File: 2baccbe0-49fb-3a72-a48a-25ca93e448cc.roa (raw, json) Hash identifier: X45l/YXCxK5tL79BMcDQ0gTMKKlfYj+s3Vycs0rfNEE= Subject key identifier: 1C:30:FB:28:78:A4:27:AB:26:0E:88:1B:67:50:98:2B:20:C6:86:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC305DABBA828D68DC8A380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2baccbe0-49fb-3a72-a48a-25ca93e448cc.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.170.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:05:da:bb:a8:28:d6:8d:c8:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7ad0ceed-cee5-42e5-a42c-cf5f4f1a8003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2e:32:03:82:84:89:81:c0:12:b5:9b:f1:76: ae:4c:97:da:ea:59:00:14:58:fa:20:c6:58:6f:ba: 18:d6:ea:c6:bc:dd:11:4e:98:e4:b4:95:d2:1b:99: 44:ff:e3:32:b1:9f:a2:c5:3f:49:7c:6a:49:58:17: 0a:04:6e:cd:50:a4:9e:cb:f4:98:87:e3:06:45:d5: e5:c1:af:22:01:6b:82:3c:c2:c6:60:1b:3e:d0:43: 38:66:6c:c2:95:ee:f4:df:a7:65:83:6d:61:8f:15: 93:9d:07:d3:37:c4:08:76:1f:78:fe:76:89:9c:9c: 2c:eb:b1:da:aa:2b:ca:cc:64:7e:12:10:ca:5b:0c: d7:a5:12:0c:3b:ee:ae:e6:b4:ae:b3:de:78:29:9b: ea:b4:e3:3b:9e:90:9a:37:1c:9b:1f:a9:f6:79:45: 37:4a:5c:88:c1:1d:3a:e2:d4:b4:43:db:6d:a6:a8: d5:3e:c9:22:6a:f0:bb:37:1f:5f:99:fe:38:a3:02: fd:2f:ed:ea:b5:d6:6a:4e:86:9f:68:75:8c:6f:b4: ba:f2:4a:a1:4a:e3:4e:61:96:4c:ec:04:8b:0c:58: 01:a5:17:4c:c8:10:5c:73:40:9f:9f:ae:33:5e:71: c4:31:ef:97:f3:ef:7a:ce:c8:0c:1e:2e:de:b7:bd: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:30:FB:28:78:A4:27:AB:26:0E:88:1B:67:50:98:2B:20:C6:86:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2baccbe0-49fb-3a72-a48a-25ca93e448cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:29:40:98:50:9e:21:18:a4:ed:48:1f:ab:e5:0a:e1:c0:d5: 4d:c6:0a:5e:09:e0:15:1c:bb:92:25:41:fe:37:c7:98:e0:95: 05:5d:0a:03:11:13:f1:db:38:47:fd:ca:06:64:d1:9e:45:1a: cf:a2:1b:eb:71:95:15:8b:ea:cf:41:ec:d5:1b:05:7d:1c:ad: ea:4e:f8:08:86:b6:3a:4e:c0:16:6e:9a:e1:70:86:99:db:48: e9:2e:ae:4a:19:8d:11:68:f9:85:1b:5d:30:2f:cf:15:e8:14: 48:54:cb:7c:bb:42:31:a8:1c:7b:04:bb:3e:c4:79:43:db:26: b9:3c:08:26:8b:46:36:b1:eb:00:e2:9e:90:17:9d:ce:98:a2: b2:da:4b:22:aa:e7:bc:07:b8:49:67:13:e0:8d:0a:5a:de:58: 74:fd:fb:86:ee:d5:3e:c1:48:9e:65:c5:02:fd:a4:71:e4:f1: d0:f9:0b:52:9a:4a:31:06:06:66:4e:07:d0:68:3c:31:58:b4: 2e:8a:9c:61:35:8d:57:51:72:32:07:28:eb:76:a7:d1:e3:3e: 78:77:4f:ed:cd:b6:0e:dd:b8:5e:1f:08:b4:86:48:6b:a2:79: 89:cb:a1:23:69:ba:c2:89:f9:6a:eb:ac:59:ec:78:75:0e:82: 65:87:d8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswwXau6go1o3Io4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2FkMGNlZWQtY2VlNS00MmU1LWE0MmMtY2Y1ZjRmMWE4MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS4yA4KEiYHAErWb8XauTJfa6lkAFFj6IMZY b7oY1urGvN0RTpjktJXSG5lE/+MysZ+ixT9JfGpJWBcKBG7NUKSey/SYh+MGRdXl wa8iAWuCPMLGYBs+0EM4ZmzCle7036dlg21hjxWTnQfTN8QIdh94/naJnJws67Ha qivKzGR+EhDKWwzXpRIMO+6u5rSus954KZvqtOM7npCaNxybH6n2eUU3SlyIwR06 4tS0Q9ttpqjVPskiavC7Nx9fmf44owL9L+3qtdZqToafaHWMb7S68kqhSuNOYZZM 7ASLDFgBpRdMyBBcc0Cfn64zXnHEMe+X8+96zsgMHi7et71YwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBww+yh4pCerJg6IG2dQmCsgxob6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmJhY2NiZTAtNDlmYi0z YTcyLWE0OGEtMjVjYTkzZTQ0OGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSarAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMspQJhQniEYpO1IH6vlCuHA1U3GCl4J4BUcu5IlQf43x5jglQVdCgMR E/HbOEf9ygZk0Z5FGs+iG+txlRWL6s9B7NUbBX0crepO+AiGtjpOwBZumuFwhpnb SOkurkoZjRFo+YUbXTAvzxXoFEhUy3y7QjGoHHsEuz7EeUPbJrk8CCaLRjax6wDi npAXnc6YorLaSyKq57wHuElnE+CNClreWHT9+4bu1T7BSJ5lxQL9pHHk8dD5C1Ka SjEGBmZOB9BoPDFYtC6KnGE1jVdRcjIHKOt2p9HjPnh3T+3Ntg7duF4fCLSGSGui eYnLoSNpusKJ+WrrrFnseHUOgmWH2PE= -----END CERTIFICATE-----Generated at Sun Aug 24 07:11:08 2025 by rpki-client