$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32a744f7-28da-370f-91e8-51f6fd8d29d2.roa File: 32a744f7-28da-370f-91e8-51f6fd8d29d2.roa (raw, json) Hash identifier: CwVtlAIwzoUs8KDo5MFCqh1ZPew2lAlNESFivOSFC0g= Subject key identifier: CF:72:D6:73:C0:74:CB:AC:3B:0B:4D:66:74:B8:2D:E6:9B:55:01:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC27AFCD2A210C0B5097900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32a744f7-28da-370f-91e8-51f6fd8d29d2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.247.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:7a:fc:d2:a2:10:c0:b5:09:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=63a3aea6-0b03-4226-8abc-a356430a1c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7f:d9:71:7f:2f:5f:fb:65:ff:15:d6:dd:4f: 9a:d4:fc:48:83:ac:ac:32:a4:a1:ad:65:3f:5c:c1: ae:bb:fd:ec:2e:1d:81:08:1c:1a:15:29:d9:08:ca: f7:2d:bc:fe:45:bd:2d:d5:6f:6b:13:fe:1e:5c:60: 2b:2f:49:fe:07:2e:18:0d:76:d4:41:b4:b1:9d:a9: 2a:ad:2b:78:f2:19:9e:5b:fe:3c:48:b3:c2:cd:93: dd:de:23:ed:bd:fb:9f:3a:61:18:3f:d6:53:8b:7e: e8:30:ff:f3:db:45:78:b9:7b:88:be:af:8b:a4:83: 0e:2f:33:dc:3d:2f:df:da:3c:78:67:3a:77:22:f4: 97:57:83:d5:1d:2b:fa:c8:a7:74:7f:31:40:b8:bf: 18:15:3e:94:15:49:f9:fc:dc:ff:06:0e:dc:88:ee: 89:3a:f1:ad:18:1d:be:85:90:dd:e5:3b:df:5d:57: 3f:06:f9:f7:15:36:fa:c0:b3:c9:a6:f9:f2:e1:19: 9b:96:2b:de:48:37:69:54:96:2b:55:49:54:d7:b4: 52:72:56:11:2a:e9:30:01:f1:2e:6b:5b:aa:4c:6a: 57:77:63:62:40:59:1a:81:dd:ff:b4:6c:c0:4b:d0: aa:da:7d:80:56:aa:97:d5:c8:17:d8:0e:40:e0:ec: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:72:D6:73:C0:74:CB:AC:3B:0B:4D:66:74:B8:2D:E6:9B:55:01:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32a744f7-28da-370f-91e8-51f6fd8d29d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.247.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b8:c3:55:44:46:1f:38:99:3c:2c:2d:7c:c1:de:e5:10:e2: 65:00:52:d8:9f:fd:84:90:99:fe:06:80:77:e7:fa:2b:0c:d1: ec:f9:a2:17:7c:c5:56:d9:97:f4:83:59:55:5a:ce:0f:26:21: a6:50:c4:0e:24:52:02:a1:d7:d8:9a:b9:84:2e:d2:be:e6:4e: fe:6e:98:af:9a:4c:54:d4:13:ec:e8:93:89:0a:cf:65:bb:40: cc:6e:5a:ba:49:e0:c7:3e:01:47:74:b8:04:2f:a8:12:6d:48: 3d:18:0e:d2:a7:54:f4:e6:15:fa:75:e1:0a:13:1c:27:4f:59: 30:31:74:02:a0:c8:23:62:b4:bd:50:7c:da:bd:64:28:1a:ba: 6e:6f:21:8e:ef:06:74:43:2b:83:6e:db:fe:3b:8b:ab:e1:c1: 26:67:e2:87:8b:fc:c4:6a:d2:79:c8:8a:f4:31:07:71:a5:a6: a8:59:9e:0a:5e:05:42:c9:13:87:7c:85:45:6f:ff:87:8a:50: 59:27:c0:3a:4f:6d:ed:8c:a8:9e:d4:71:9f:e5:b3:01:d9:9a: 6a:49:f1:f9:c0:f7:d5:ed:5d:50:a7:5b:c3:fc:b5:e9:5b:52: 4b:1b:8e:b4:e7:fa:75:8d:22:50:47:72:7f:db:4f:3c:2d:c9: 8d:17:1d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswnr80qIQwLUJeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjNhM2FlYTYtMGIwMy00MjI2LThhYmMtYTM1NjQzMGExYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X/ZcX8vX/tl/xXW3U+a1PxIg6ysMqShrWU/ XMGuu/3sLh2BCBwaFSnZCMr3Lbz+Rb0t1W9rE/4eXGArL0n+By4YDXbUQbSxnakq rSt48hmeW/48SLPCzZPd3iPtvfufOmEYP9ZTi37oMP/z20V4uXuIvq+LpIMOLzPc PS/f2jx4Zzp3IvSXV4PVHSv6yKd0fzFAuL8YFT6UFUn5/Nz/Bg7ciO6JOvGtGB2+ hZDd5TvfXVc/Bvn3FTb6wLPJpvny4RmbliveSDdpVJYrVUlU17RSclYRKukwAfEu a1uqTGpXd2NiQFkagd3/tGzAS9Cq2n2AVqqX1cgX2A5A4OyQCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9y1nPAdMusOwtNZnS4LeabVQF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJhNzQ0ZjctMjhkYS0z NzBmLTkxZTgtNTFmNmZkOGQyOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi4w1VERh84mTwsLXzB3uUQ4mUAUtif/YSQmf4GgHfn+isM0ez5ohd8 xVbZl/SDWVVazg8mIaZQxA4kUgKh19iauYQu0r7mTv5umK+aTFTUE+zok4kKz2W7 QMxuWrpJ4Mc+AUd0uAQvqBJtSD0YDtKnVPTmFfp14QoTHCdPWTAxdAKgyCNitL1Q fNq9ZCgaum5vIY7vBnRDK4Nu2/47i6vhwSZn4oeL/MRq0nnIivQxB3GlpqhZngpe BULJE4d8hUVv/4eKUFknwDpPbe2MqJ7UcZ/lswHZmmpJ8fnA99XtXVCnW8P8telb UksbjrTn+nWNIlBHcn/bTzwtyY0XHWo= -----END CERTIFICATE-----Generated at Sun Aug 24 03:55:39 2025 by rpki-client