$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3288ac43-542a-3465-8c99-36738709a7bb.roa File: 3288ac43-542a-3465-8c99-36738709a7bb.roa (raw, json) Hash identifier: jKN0EaWGv/L0Creg0M5Gm4Ym1fjwS94MPaf1PIYlS5Y= Subject key identifier: F6:A9:EA:C9:7F:DF:AE:6D:A8:13:9A:91:6A:B7:1C:15:67:E3:B9:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1A2EDB3CC05FC4E8425A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3288ac43-542a-3465-8c99-36738709a7bb.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.194.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:a2:ed:b3:cc:05:fc:4e:84:25:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7b824b9b-f4d8-43c0-adbd-b80e9c8a9e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6c:d6:02:25:81:ea:7c:4c:e1:7d:70:c8:b3: df:d7:ab:38:5a:f2:f8:f0:ed:52:9b:df:c5:9d:c7: d2:e9:1f:04:7c:3f:60:45:37:de:7a:81:b4:76:ac: ca:85:c7:6c:3d:db:07:2e:e5:21:cb:02:95:99:18: e2:24:b2:6e:06:e1:33:e8:85:68:21:b5:6a:bc:3b: cb:e3:14:2b:86:78:8e:8c:bf:05:cf:db:dd:a1:7d: e3:c7:9b:16:13:1b:0f:a3:b5:6f:5a:2e:19:bf:48: 04:e9:7b:cb:a9:fe:7c:18:e2:70:37:84:63:72:2c: 9e:67:29:bc:5a:a8:51:f2:c7:b8:cd:91:f4:a5:2e: ca:76:95:c0:a3:88:35:f4:d4:2e:99:bf:78:57:8a: c9:a3:eb:81:dd:09:ce:08:89:d6:8a:0f:20:97:a4: 21:b0:55:b1:5e:71:03:fb:86:1d:8b:57:58:5b:21: 46:24:bb:7f:29:51:08:a6:f7:e6:db:53:26:4b:09: 90:8b:7e:a8:e6:84:74:89:57:9a:3f:d6:ca:4d:e3: c8:ff:3f:43:b8:16:73:3d:bb:19:58:85:45:a7:e4: d7:e2:a2:5b:f5:8e:b1:1d:02:ab:3c:f7:56:9f:5c: 90:20:e0:f8:43:34:0c:dd:90:86:6a:af:a4:9d:4c: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A9:EA:C9:7F:DF:AE:6D:A8:13:9A:91:6A:B7:1C:15:67:E3:B9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3288ac43-542a-3465-8c99-36738709a7bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.194.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fb:f8:6b:de:00:0f:1b:f1:cf:b4:88:4a:0a:71:5a:a3:24: e0:40:f1:3a:80:52:08:f7:0b:a3:93:57:eb:54:71:52:b2:49: 4d:c1:32:c4:1c:ad:1e:0a:5c:62:c5:58:98:02:33:18:00:c8: 58:de:04:a5:37:1a:18:7a:a3:32:eb:98:c9:73:5e:ca:98:4b: 6d:6a:72:e7:13:b8:51:d6:a4:94:02:d9:17:19:44:0c:ea:09: 86:0f:50:d2:bd:5f:eb:6c:8e:f4:d1:19:fa:02:4a:08:24:ed: 96:2e:82:58:89:02:72:4f:a8:4e:20:b7:5a:3a:1f:93:e5:5f: 82:b7:c6:f3:e4:c3:8e:60:e0:e4:a5:3a:0f:67:ae:19:33:89: 6a:b9:c0:e9:48:de:7b:2e:34:06:50:76:a4:23:ca:c0:a6:2f: c5:39:9d:62:52:68:b6:5a:ab:91:15:70:fb:0b:16:2e:2a:c2: 1d:a8:06:3b:08:c9:f2:f0:c8:7b:fe:f3:8e:4a:92:de:81:7e: 6e:31:0d:00:15:19:1e:48:1c:ae:21:39:d3:f4:b3:14:6c:c6: ee:6b:f7:87:21:a9:5c:52:bd:5d:75:31:85:0d:91:de:e8:c1: 62:df:11:d7:c3:ed:68:b5:24:c5:e8:c7:f1:6f:d6:05:2a:8f: cd:c2:8c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswaLts8wF/E6EJaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2I4MjRiOWItZjRkOC00M2MwLWFkYmQtYjgwZTljOGE5ZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2zWAiWB6nxM4X1wyLPf16s4WvL48O1Sm9/F ncfS6R8EfD9gRTfeeoG0dqzKhcdsPdsHLuUhywKVmRjiJLJuBuEz6IVoIbVqvDvL 4xQrhniOjL8Fz9vdoX3jx5sWExsPo7VvWi4Zv0gE6XvLqf58GOJwN4RjciyeZym8 WqhR8se4zZH0pS7KdpXAo4g19NQumb94V4rJo+uB3QnOCInWig8gl6QhsFWxXnED +4Ydi1dYWyFGJLt/KVEIpvfm21MmSwmQi36o5oR0iVeaP9bKTePI/z9DuBZzPbsZ WIVFp+TX4qJb9Y6xHQKrPPdWn1yQIOD4QzQM3ZCGaq+knUyOmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPap6sl/365tqBOakWq3HBVn47kKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI4OGFjNDMtNTQyYS0z NDY1LThjOTktMzY3Mzg3MDlhN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDScKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz7+GveAA8b8c+0iEoKcVqjJOBA8TqAUgj3C6OTV+tUcVKySU3BMsQc rR4KXGLFWJgCMxgAyFjeBKU3Ghh6ozLrmMlzXsqYS21qcucTuFHWpJQC2RcZRAzq CYYPUNK9X+tsjvTRGfoCSggk7ZYugliJAnJPqE4gt1o6H5PlX4K3xvPkw45g4OSl Og9nrhkziWq5wOlI3nsuNAZQdqQjysCmL8U5nWJSaLZaq5EVcPsLFi4qwh2oBjsI yfLwyHv+845Kkt6Bfm4xDQAVGR5IHK4hOdP0sxRsxu5r94chqVxSvV11MYUNkd7o wWLfEdfD7Wi1JMXox/Fv1gUqj83CjBw= -----END CERTIFICATE-----Generated at Sun Aug 24 04:34:25 2025 by rpki-client