$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bf2837f-4260-30dd-921a-ba60e168321a.roa File: 2bf2837f-4260-30dd-921a-ba60e168321a.roa (raw, json) Hash identifier: oYdbgYe6aol8k4HjxTwy2b9nBIrjgK8+RDnYMxBkYd0= Subject key identifier: B9:27:94:68:44:D1:B6:7A:0F:2B:70:17:48:ED:36:3B:88:D6:C2:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC27B51F0C36B841423E5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bf2837f-4260-30dd-921a-ba60e168321a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.247.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:7b:51:f0:c3:6b:84:14:23:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2034af5f-afd2-44f2-9e3c-bacd81084e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:eb:55:9e:a0:c9:aa:36:06:c9:6b:aa:49: 65:b9:f3:dd:8d:dc:f9:98:2c:f5:0c:08:cc:af:2f: 8f:db:72:e7:d9:fc:8c:95:1d:b9:f4:bf:0a:d4:a9: e3:aa:01:75:8e:bc:f4:c1:0d:4f:f9:68:94:64:0d: 57:8d:8a:09:64:2f:72:3d:b4:59:58:53:d3:17:26: 79:78:b8:4f:72:82:0c:d5:f0:84:fb:51:24:a7:8d: d4:e9:ff:cd:c0:f5:17:dd:8f:24:9f:24:11:12:ec: 66:27:bf:5f:44:c0:5a:c7:5c:03:47:b6:fb:13:57: 37:43:b9:d8:11:a1:33:72:36:17:cd:e7:27:40:a3: aa:73:d1:2b:35:12:9f:35:34:0c:ca:93:38:c2:38: 35:01:57:ab:dc:05:c3:e8:b4:7e:30:18:5e:8b:8e: d8:5c:ee:72:ca:0d:8d:4c:86:19:9c:14:6f:ef:57: 11:9a:8f:10:15:b5:d3:fc:b1:d6:3e:00:c2:21:63: 5f:bf:05:8f:1c:f2:f0:a6:57:1f:03:5b:14:75:98: e3:56:a5:a0:98:a3:e1:d5:49:25:ae:39:ab:6b:1e: 23:88:7c:22:54:41:c3:b2:4a:52:5a:57:d0:4b:22: 9e:35:f0:85:48:38:34:10:f4:46:9b:b1:48:97:92: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:27:94:68:44:D1:B6:7A:0F:2B:70:17:48:ED:36:3B:88:D6:C2:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bf2837f-4260-30dd-921a-ba60e168321a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.247.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:13:86:a3:c1:09:18:30:ad:90:2e:f3:d1:23:34:56:63:a3: 71:ee:52:49:fe:8c:8c:c6:fc:28:d1:3b:66:71:37:1e:81:b2: 22:ab:15:e8:cb:b0:a6:e9:38:21:0e:c5:ce:10:d4:14:c2:e4: b2:8d:a6:ca:2d:78:78:9c:38:4c:0c:98:17:75:37:0f:b0:3d: bd:6e:6b:e5:3e:18:ec:e2:f5:50:28:ba:a6:96:47:94:04:79: 76:77:1e:79:89:49:af:09:fc:90:b4:fa:35:a1:7c:86:55:98: 93:b3:ea:3f:dd:be:1c:0f:c5:e3:0c:cb:3b:ad:ac:7c:0f:ed: 41:0b:e8:7b:99:c9:0a:14:7e:d8:80:6e:3d:12:19:8f:39:54: 81:b9:dc:8e:da:d2:e4:67:1b:ba:03:ff:7b:ac:13:16:f9:7e: 07:35:7f:d3:c5:73:7b:57:27:3c:e0:9b:f7:02:ec:d9:b9:03: 0e:67:96:e4:32:28:b8:82:17:70:84:72:c5:a0:a4:01:31:55: 3b:66:ae:74:8d:a2:5f:b5:54:53:73:9b:41:5e:2f:7a:cb:da: 43:7b:35:05:a7:a2:27:35:ef:11:2e:2c:44:a4:bf:90:28:5f: 38:15:e9:f1:f9:54:e9:bc:73:31:d1:e6:b6:c9:ac:0e:7c:e2: 20:24:3f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswntR8MNrhBQj5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjAzNGFmNWYtYWZkMi00NGYyLTllM2MtYmFjZDgxMDg0ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopzrVZ6gyao2BslrqkllufPdjdz5mCz1DAjM ry+P23Ln2fyMlR259L8K1KnjqgF1jrz0wQ1P+WiUZA1XjYoJZC9yPbRZWFPTFyZ5 eLhPcoIM1fCE+1Ekp43U6f/NwPUX3Y8knyQREuxmJ79fRMBax1wDR7b7E1c3Q7nY EaEzcjYXzecnQKOqc9ErNRKfNTQMypM4wjg1AVer3AXD6LR+MBhei47YXO5yyg2N TIYZnBRv71cRmo8QFbXT/LHWPgDCIWNfvwWPHPLwplcfA1sUdZjjVqWgmKPh1Ukl rjmrax4jiHwiVEHDskpSWlfQSyKeNfCFSDg0EPRGm7FIl5J9IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLknlGhE0bZ6DytwF0jtNjuI1sLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmJmMjgzN2YtNDI2MC0z MGRkLTkyMWEtYmE2MGUxNjgzMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIThqPBCRgwrZAu89EjNFZjo3HuUkn+jIzG/CjRO2ZxNx6BsiKrFejL sKbpOCEOxc4Q1BTC5LKNpsoteHicOEwMmBd1Nw+wPb1ua+U+GOzi9VAouqaWR5QE eXZ3HnmJSa8J/JC0+jWhfIZVmJOz6j/dvhwPxeMMyzutrHwP7UEL6HuZyQoUftiA bj0SGY85VIG53I7a0uRnG7oD/3usExb5fgc1f9PFc3tXJzzgm/cC7Nm5Aw5nluQy KLiCF3CEcsWgpAExVTtmrnSNol+1VFNzm0FeL3rL2kN7NQWnoic17xEuLESkv5Ao XzgV6fH5VOm8czHR5rbJrA584iAkP3M= -----END CERTIFICATE-----Generated at Sun Aug 24 06:08:25 2025 by rpki-client