$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa2e3ac-19e1-37e3-939f-3e96485ca16a.roa File: 2fa2e3ac-19e1-37e3-939f-3e96485ca16a.roa (raw, json) Hash identifier: zxCo/fXPYih1rHdzVVzsHqcANKnwYZ6FAv1BKC7DSyg= Subject key identifier: C1:F4:54:2E:24:CA:46:B2:60:41:9B:C3:A5:6D:69:A6:F1:EE:CA:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC398ACCC3EF75EC3A5A400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa2e3ac-19e1-37e3-939f-3e96485ca16a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.178.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:98:ac:cc:3e:f7:5e:c3:a5:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6c7f0552-d20f-42d6-af25-d06d34e630b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ed:dc:57:4c:81:a0:99:b5:3d:86:13:a2:08: 29:dc:e0:c4:69:7e:9e:c6:1d:3b:ed:f2:dd:0a:60: 1b:c3:05:d6:8e:35:9a:85:42:99:eb:62:40:f2:be: 4a:a6:b4:a7:b9:66:65:13:bc:ed:8f:71:1c:53:63: 68:ce:ee:06:10:57:d0:20:d4:52:8e:c3:b4:0d:79: b8:ac:88:6c:1a:bb:d7:71:fb:ed:66:ca:a9:a0:57: 3e:a8:95:25:04:fe:c5:d1:f1:48:09:80:58:51:45: d3:e3:af:2a:8c:40:95:73:70:17:ae:98:f9:04:d4: 0d:4a:74:ac:11:a3:33:a7:c7:45:bc:2f:04:57:38: 0c:14:d0:3e:66:18:c5:a0:76:ac:41:48:30:7f:fe: c1:fd:0a:a8:aa:8a:32:f7:fd:2e:52:bd:db:c3:2b: 73:36:95:0e:5d:ad:fa:81:62:7d:76:45:dd:36:75: 4b:b8:2b:70:b0:c1:80:b4:6b:66:d0:90:01:66:f2: 6b:28:76:b3:51:b7:1e:c5:79:de:8f:6f:72:be:00: f1:ad:29:41:57:d6:9a:70:ab:a5:a2:46:10:04:57: 01:60:0d:9f:20:f9:98:a7:40:67:6f:bd:1a:1e:39: a2:99:22:6f:f7:76:28:23:a5:88:6d:3e:df:a6:32: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F4:54:2E:24:CA:46:B2:60:41:9B:C3:A5:6D:69:A6:F1:EE:CA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa2e3ac-19e1-37e3-939f-3e96485ca16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.178.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:43:c3:ed:fc:63:fe:f8:81:07:71:3b:47:aa:56:de:da:49: 5c:7e:98:83:d4:3f:ba:a8:55:56:70:ac:56:6e:81:16:80:1c: cd:55:f7:a3:6b:91:f0:da:7d:c5:68:43:5f:b2:5a:cb:16:d8: 63:62:b6:2a:c6:fa:ad:61:e5:e6:22:27:15:f2:7e:d6:76:1a: 89:be:80:02:0b:ac:29:a0:1a:08:0e:26:1d:39:d9:46:c1:8b: 75:2e:85:69:19:04:f9:f5:ac:0c:a7:f3:4a:5c:7c:fb:92:2d: 70:40:23:a1:77:7b:d9:b9:ff:ac:b6:49:05:ab:b4:50:56:24: e4:0d:ae:7b:0d:39:b4:93:a2:8d:20:8d:27:8a:68:71:68:aa: e1:b1:31:75:4f:07:26:8c:95:23:c5:24:1c:69:ac:d2:47:c2: 06:c7:2f:e0:97:ae:0b:7e:c8:ee:51:08:a4:db:52:ee:a1:a7: e8:31:16:ec:3a:08:93:24:ce:da:ed:46:48:45:0d:f7:86:0a: e7:69:32:0a:01:ce:7b:21:90:66:ba:b3:86:b0:5f:58:e1:2d: 2d:9b:9d:8c:b4:13:07:0e:49:31:55:a4:8c:75:3f:23:fd:8d: c3:67:15:94:2f:97:e9:3b:c1:ae:94:e0:fc:b3:26:42:d0:d5: da:59:26:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw5iszD73XsOlpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmM3ZjA1NTItZDIwZi00MmQ2LWFmMjUtZDA2ZDM0ZTYzMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu3cV0yBoJm1PYYToggp3ODEaX6exh077fLd CmAbwwXWjjWahUKZ62JA8r5KprSnuWZlE7ztj3EcU2Nozu4GEFfQINRSjsO0DXm4 rIhsGrvXcfvtZsqpoFc+qJUlBP7F0fFICYBYUUXT468qjECVc3AXrpj5BNQNSnSs EaMzp8dFvC8EVzgMFNA+ZhjFoHasQUgwf/7B/Qqoqooy9/0uUr3bwytzNpUOXa36 gWJ9dkXdNnVLuCtwsMGAtGtm0JABZvJrKHazUbcexXnej29yvgDxrSlBV9aacKul okYQBFcBYA2fIPmYp0Bnb70aHjmimSJv93YoI6WIbT7fpjI0iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH0VC4kykayYEGbw6Vtaabx7spfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZhMmUzYWMtMTllMS0z N2UzLTkzOWYtM2U5NjQ4NWNhMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNDw+38Y/74gQdxO0eqVt7aSVx+mIPUP7qoVVZwrFZugRaAHM1V96Nr kfDafcVoQ1+yWssW2GNitirG+q1h5eYiJxXyftZ2Gom+gAILrCmgGggOJh052UbB i3UuhWkZBPn1rAyn80pcfPuSLXBAI6F3e9m5/6y2SQWrtFBWJOQNrnsNObSToo0g jSeKaHFoquGxMXVPByaMlSPFJBxprNJHwgbHL+CXrgt+yO5RCKTbUu6hp+gxFuw6 CJMkztrtRkhFDfeGCudpMgoBznshkGa6s4awX1jhLS2bnYy0EwcOSTFVpIx1PyP9 jcNnFZQvl+k7wa6U4PyzJkLQ1dpZJmc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:06:02 2025 by rpki-client