$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/300912b7-c1cd-31e3-bfa3-eac36304266a.roa File: 300912b7-c1cd-31e3-bfa3-eac36304266a.roa (raw, json) Hash identifier: KvCuk0o4lw4+6WUsQTrxDB1Zp2VkFxTf30sf7rmsJj0= Subject key identifier: B4:FF:A0:10:92:3F:3F:F1:66:3B:E6:72:66:AF:14:6C:A2:1D:CF:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4940B72FD5EC86FCA4700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/300912b7-c1cd-31e3-bfa3-eac36304266a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.44.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:94:0b:72:fd:5e:c8:6f:ca:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=10f3c1fa-279d-4ab1-b50d-762769b6b580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:86:a0:6d:ce:07:ca:fa:33:ad:62:df:98: 4b:c7:70:20:db:d0:bf:6c:19:ca:1d:50:0b:a2:41: 22:71:9b:54:4a:95:a9:5e:62:2d:22:64:0a:00:67: 6f:bf:ec:36:7d:a8:e9:91:2c:a8:8e:50:b7:e1:ad: 38:b4:d7:e7:5b:9c:bd:f2:c2:22:86:07:00:b9:d1: 35:30:84:9c:2e:32:00:83:95:d2:6a:fc:90:66:d2: 28:28:78:8f:c9:ec:f1:6c:a0:07:be:0b:61:4d:54: d6:15:35:db:44:20:1f:b2:10:e1:06:99:f8:b0:cf: 75:2c:ee:c4:5b:fa:4e:75:d3:20:3e:64:a1:94:0c: 47:52:12:69:47:b6:f4:06:dd:af:4c:16:c5:a2:38: 48:5a:60:2d:86:35:e2:cc:93:f1:0b:71:34:ff:f6: 12:5a:21:83:b0:27:73:5a:42:38:e1:3e:d6:b3:e5: 36:ff:1f:f0:2f:43:ea:49:1e:92:a7:de:e2:9e:e6: 97:3e:27:df:36:61:34:5b:ce:ce:f8:3c:5e:70:47: 04:ea:58:44:42:56:a6:b1:56:3a:2a:92:07:37:5f: 0b:d7:1b:45:13:4c:09:b0:b4:f0:0e:d2:69:ab:c1: 28:09:1f:3c:cf:8c:0a:02:ff:2d:f6:05:ae:c4:23: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FF:A0:10:92:3F:3F:F1:66:3B:E6:72:66:AF:14:6C:A2:1D:CF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/300912b7-c1cd-31e3-bfa3-eac36304266a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.44.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c8:76:fc:55:cd:5e:6e:19:27:6d:ce:91:ce:c4:c6:3f:d7: d1:9e:d9:9b:a7:3d:cc:0a:9b:49:dd:dd:54:2f:a5:77:4d:32: 43:08:f5:e6:cd:83:51:c0:8a:55:85:ac:05:8e:83:91:f7:96: 15:00:a4:e8:55:e4:f8:16:e1:e8:9a:54:a9:45:1f:bf:dd:a0: 36:f8:bc:0a:87:ec:7c:57:90:cb:2b:82:77:a4:9d:65:90:5c: 93:32:a3:5c:ca:af:d5:4f:63:5d:f2:bd:ee:5a:b3:18:b6:28: 66:b1:af:1e:63:fd:23:6c:02:40:cc:2a:d9:87:b3:37:00:14: 89:45:e1:37:4e:3e:05:a9:c5:4d:a3:92:79:69:69:b0:99:a8: 9b:5c:c6:76:2a:49:06:e9:05:d0:7d:01:56:75:b2:47:ce:50: 29:5a:54:97:d4:fc:65:3a:1e:78:63:4f:64:ab:6f:24:77:47: 69:e8:e9:1b:90:79:ef:4f:b0:ff:c2:c9:7e:6c:0e:69:e4:60: 0d:d6:86:c0:1a:ed:8a:56:ac:99:17:06:55:6f:ba:e0:18:66: 76:f3:0c:94:4a:b6:d0:ce:55:c7:52:6a:a6:57:cc:57:46:bf: 6b:da:a8:dc:31:cc:aa:c1:e5:c9:48:ca:3a:ea:da:6f:d8:11: ce:8a:ab:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxJQLcv1eyG/KRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTBmM2MxZmEtMjc5ZC00YWIxLWI1MGQtNzYyNzY5YjZiNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGyGoG3OB8r6M61i35hLx3Ag29C/bBnKHVAL okEicZtUSpWpXmItImQKAGdvv+w2fajpkSyojlC34a04tNfnW5y98sIihgcAudE1 MIScLjIAg5XSavyQZtIoKHiPyezxbKAHvgthTVTWFTXbRCAfshDhBpn4sM91LO7E W/pOddMgPmShlAxHUhJpR7b0Bt2vTBbFojhIWmAthjXizJPxC3E0//YSWiGDsCdz WkI44T7Ws+U2/x/wL0PqSR6Sp97inuaXPiffNmE0W87O+DxecEcE6lhEQlamsVY6 KpIHN18L1xtFE0wJsLTwDtJpq8EoCR88z4wKAv8t9gWuxCPFuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLT/oBCSPz/xZjvmcmavFGyiHc8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzAwOTEyYjctYzFjZC0z MWUzLWJmYTMtZWFjMzYzMDQyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSzCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDIdvxVzV5uGSdtzpHOxMY/19Ge2ZunPcwKm0nd3VQvpXdNMkMI9ebN g1HAilWFrAWOg5H3lhUApOhV5PgW4eiaVKlFH7/doDb4vAqH7HxXkMsrgneknWWQ XJMyo1zKr9VPY13yve5asxi2KGaxrx5j/SNsAkDMKtmHszcAFIlF4TdOPgWpxU2j knlpabCZqJtcxnYqSQbpBdB9AVZ1skfOUClaVJfU/GU6HnhjT2SrbyR3R2no6RuQ ee9PsP/CyX5sDmnkYA3WhsAa7YpWrJkXBlVvuuAYZnbzDJRKttDOVcdSaqZXzFdG v2vaqNwxzKrB5clIyjrq2m/YEc6Kq/4= -----END CERTIFICATE-----Generated at Sun Aug 24 06:21:24 2025 by rpki-client