$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf174a6-c1d9-3f5c-a1fc-7b661771963d.roa File: 2cf174a6-c1d9-3f5c-a1fc-7b661771963d.roa (raw, json) Hash identifier: +glSp6gCHv6OqUYRVOGZDVcTozKJB4sVHzlbikooaF4= Subject key identifier: D7:A9:6A:BA:E9:48:92:53:4D:42:90:D8:DF:5E:F6:B3:97:13:9B:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC38A2D066982C01DC5D980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf174a6-c1d9-3f5c-a1fc-7b661771963d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.29.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:8a:2d:06:69:82:c0:1d:c5:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f6097988-75c8-40dd-b7d8-e3c1860c7f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:1c:d8:d2:73:4c:c5:d7:7e:b4:88:fb:30: 49:01:76:73:8c:75:f6:23:30:93:82:13:7c:34:3d: b1:da:a0:8b:45:32:a1:aa:82:ea:4e:46:57:65:5f: b7:ce:60:15:2e:bc:73:d0:d7:d4:90:0c:12:ff:d5: 75:08:92:3e:ed:a9:a7:4b:82:cb:80:f2:b4:2c:43: 0e:8c:97:99:db:48:c3:14:21:8f:42:df:8f:56:26: 93:39:9f:63:ec:0c:95:28:eb:44:13:c3:c1:44:1f: 2b:17:19:d3:05:55:01:c6:dd:46:e0:b1:bb:f9:ec: c1:b5:15:42:b9:aa:4f:5d:5f:5e:13:ab:1b:1c:b2: da:6a:2f:c6:92:3d:24:7c:b5:67:ae:04:d0:ac:85: 63:e9:dc:b0:cc:1a:83:04:d2:13:a3:02:e6:67:68: 8c:67:e0:d6:23:21:9c:66:ca:8b:28:63:ca:a8:3c: 44:9c:d1:40:e3:85:4a:9b:07:95:85:2a:53:51:1e: ea:c5:20:74:e7:2e:f1:d1:60:a6:a5:aa:0d:d3:e1: 2d:98:7b:22:ee:43:8f:9c:f3:21:ba:14:71:c7:b6: 54:e1:db:6d:99:97:db:d2:70:4c:e4:2a:18:d8:ba: b6:64:f6:1c:2b:ce:0b:68:a6:5f:28:f6:73:84:cd: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A9:6A:BA:E9:48:92:53:4D:42:90:D8:DF:5E:F6:B3:97:13:9B:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf174a6-c1d9-3f5c-a1fc-7b661771963d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:74:f5:7c:11:07:15:96:c1:bb:fe:5c:3c:d6:b3:8f:b6:8e: 55:e4:7a:7c:82:86:f5:80:bf:12:4f:26:be:72:bf:b2:76:e4: 0a:40:c9:39:0c:38:67:96:4e:2f:ba:e8:5d:f6:bf:78:52:52: 00:61:94:4b:5f:b5:6c:3a:26:d8:8e:56:83:32:47:8c:24:ee: 5c:41:7f:bb:c3:87:6f:58:53:e3:ac:6c:67:ee:f7:ff:88:d2: 98:79:fa:7c:2b:28:ba:71:de:1c:b8:51:ac:07:67:32:b1:2f: c6:af:cf:7f:08:6d:6e:79:b1:2b:cf:65:80:26:a8:53:fd:c9: c1:70:b1:49:a1:61:dc:36:01:e2:e2:84:53:df:3a:d0:c3:f1: e6:a3:24:df:e6:98:08:ba:9b:98:24:c2:25:19:cd:ff:05:44: 4d:71:88:10:3f:41:77:91:e7:77:e3:6a:5c:21:d1:9c:1a:d6: 6e:0d:6d:c0:ef:ab:f4:19:6b:d8:d5:8e:34:d2:bd:60:51:38: 27:33:8a:59:7a:b5:8c:86:ef:01:f5:ec:e5:f4:2c:63:72:57: 57:71:fa:df:d7:2d:f8:9d:f0:64:95:24:6b:2f:34:5e:06:fb: bf:ea:b2:23:56:c8:aa:36:34:1e:54:41:65:29:05:8d:5f:ef: 49:fe:60:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw4otBmmCwB3F2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjYwOTc5ODgtNzVjOC00MGRkLWI3ZDgtZTNjMTg2MGM3ZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArocc2NJzTMXXfrSI+zBJAXZzjHX2IzCTghN8 ND2x2qCLRTKhqoLqTkZXZV+3zmAVLrxz0NfUkAwS/9V1CJI+7amnS4LLgPK0LEMO jJeZ20jDFCGPQt+PViaTOZ9j7AyVKOtEE8PBRB8rFxnTBVUBxt1G4LG7+ezBtRVC uapPXV9eE6sbHLLaai/Gkj0kfLVnrgTQrIVj6dywzBqDBNITowLmZ2iMZ+DWIyGc ZsqLKGPKqDxEnNFA44VKmweVhSpTUR7qxSB05y7x0WCmpaoN0+EtmHsi7kOPnPMh uhRxx7ZU4dttmZfb0nBM5CoY2Lq2ZPYcK84LaKZfKPZzhM0zhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeparrpSJJTTUKQ2N9e9rOXE5uRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNmMTc0YTYtYzFkOS0z ZjVjLWExZmMtN2I2NjE3NzE5NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSR2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx09XwRBxWWwbv+XDzWs4+2jlXkenyChvWAvxJPJr5yv7J25ApAyTkM OGeWTi+66F32v3hSUgBhlEtftWw6JtiOVoMyR4wk7lxBf7vDh29YU+OsbGfu9/+I 0ph5+nwrKLpx3hy4UawHZzKxL8avz38IbW55sSvPZYAmqFP9ycFwsUmhYdw2AeLi hFPfOtDD8eajJN/mmAi6m5gkwiUZzf8FRE1xiBA/QXeR53fjalwh0Zwa1m4NbcDv q/QZa9jVjjTSvWBROCczill6tYyG7wH17OX0LGNyV1dx+t/XLfid8GSVJGsvNF4G +7/qsiNWyKo2NB5UQWUpBY1f70n+YDE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:53:07 2025 by rpki-client