$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3425c5ac-d6ee-35b0-9fa0-a476b7778472.roa File: 3425c5ac-d6ee-35b0-9fa0-a476b7778472.roa (raw, json) Hash identifier: tdHJgYT3YVc2X4xuYhpN/MVIUUVuMpJcpTTPChgt3EQ= Subject key identifier: 4C:45:A9:9C:27:52:82:A2:BB:A3:EC:A5:48:92:FA:AD:C1:4C:15:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC19FF97728532D41C8BE50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3425c5ac-d6ee-35b0-9fa0-a476b7778472.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.193.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:9f:f9:77:28:53:2d:41:c8:be:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=72bb4135-0dc1-4016-9ae7-36a54e86f739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:f5:46:4b:83:af:c5:45:60:e3:41:37:22: 56:50:fe:92:ed:4b:fe:aa:c0:34:3f:62:86:94:5b: 26:fd:36:f4:b6:90:20:55:63:4b:ff:d7:b6:0a:ce: 77:85:af:dd:7f:b8:29:dc:0f:5c:25:f0:9a:f9:e7: aa:a8:c0:ce:d2:02:9c:45:68:5e:2f:d4:75:e2:4e: ae:bb:60:c4:99:04:17:ad:02:2d:7f:34:6f:61:f7: 64:b3:19:cd:1d:eb:34:b8:9e:20:ea:cb:cb:f2:5d: cb:7e:1d:05:54:17:71:f4:b7:46:65:b1:8c:fc:a4: db:79:58:da:5c:ae:ea:5a:32:0f:ce:13:28:11:40: fb:e9:2f:f0:11:98:ba:d9:6f:58:9c:1f:0f:5b:e4: 58:54:55:60:ee:ce:98:08:f3:a4:13:a9:0e:45:6e: e1:93:c5:74:a2:cd:36:55:57:54:71:5d:a8:6b:2d: a9:f5:fa:90:5c:98:9c:56:d4:bf:23:8c:58:51:de: 35:15:f5:8b:fa:a8:c6:bb:bf:9b:a6:75:0b:b8:62: 49:11:4f:78:50:48:bb:f4:cf:67:d2:e0:20:8a:f9: 44:36:0f:95:57:61:5e:6c:81:75:1d:30:5d:7b:88: 0c:49:17:af:6f:55:fd:5d:7c:27:17:b5:60:a9:81: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:45:A9:9C:27:52:82:A2:BB:A3:EC:A5:48:92:FA:AD:C1:4C:15:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3425c5ac-d6ee-35b0-9fa0-a476b7778472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.193.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6e:ec:f9:0e:97:d7:bb:21:01:e2:ac:16:74:39:83:9d:f0: 9f:3b:99:a0:46:d3:64:fd:c1:83:85:60:80:e8:7d:d7:37:41: 3a:38:09:38:ea:c4:12:cb:74:28:c1:f5:46:91:ae:2a:21:74: c1:dc:32:c5:39:30:68:83:ab:73:cf:b6:44:5b:f7:ce:20:80: 7a:93:b7:62:c1:b0:5c:e3:68:ec:23:36:07:45:d5:99:82:ef: d8:21:f4:ec:25:cc:e9:4c:73:bf:eb:d2:d7:e8:18:a3:5f:a4: e1:6b:90:21:6b:70:79:5a:7c:fb:55:7e:c2:36:14:dd:de:28: 9a:ee:90:70:73:84:ad:f1:3c:84:a7:46:58:fa:e4:c5:d3:b3: f2:db:bb:b2:4e:23:ac:b7:62:b2:f4:a7:bc:9f:3b:ce:17:23: c4:69:40:6f:98:1a:4b:22:71:c4:91:13:23:eb:84:f1:42:9f: 06:26:91:fe:0f:5d:e2:7f:34:8a:a0:8e:39:4b:c9:e6:54:aa: 31:b4:95:eb:63:bd:ab:a9:f6:d0:5b:7f:2f:96:93:63:39:57: 46:79:a1:43:ec:17:32:2e:a5:8e:3f:94:b3:f5:b5:d2:48:bf: 0a:fa:f1:12:24:d0:ef:7e:28:20:8f:f8:9c:d1:d7:56:09:ad: 3d:9c:e5:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswZ/5dyhTLUHIvlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzJiYjQxMzUtMGRjMS00MDE2LTlhZTctMzZhNTRlODZmNzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ir1RkuDr8VFYONBNyJWUP6S7Uv+qsA0P2KG lFsm/Tb0tpAgVWNL/9e2Cs53ha/df7gp3A9cJfCa+eeqqMDO0gKcRWheL9R14k6u u2DEmQQXrQItfzRvYfdksxnNHes0uJ4g6svL8l3Lfh0FVBdx9LdGZbGM/KTbeVja XK7qWjIPzhMoEUD76S/wEZi62W9YnB8PW+RYVFVg7s6YCPOkE6kORW7hk8V0os02 VVdUcV2oay2p9fqQXJicVtS/I4xYUd41FfWL+qjGu7+bpnULuGJJEU94UEi79M9n 0uAgivlENg+VV2FebIF1HTBde4gMSRevb1X9XXwnF7VgqYEpWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExFqZwnUoKiu6PspUiS+q3BTBU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQyNWM1YWMtZDZlZS0z NWIwLTlmYTAtYTQ3NmI3Nzc4NDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpu7PkOl9e7IQHirBZ0OYOd8J87maBG02T9wYOFYIDofdc3QTo4CTjq xBLLdCjB9UaRriohdMHcMsU5MGiDq3PPtkRb984ggHqTt2LBsFzjaOwjNgdF1ZmC 79gh9OwlzOlMc7/r0tfoGKNfpOFrkCFrcHlafPtVfsI2FN3eKJrukHBzhK3xPISn Rlj65MXTs/Lbu7JOI6y3YrL0p7yfO84XI8RpQG+YGksiccSREyPrhPFCnwYmkf4P XeJ/NIqgjjlLyeZUqjG0letjvaup9tBbfy+Wk2M5V0Z5oUPsFzIupY4/lLP1tdJI vwr68RIk0O9+KCCP+JzR11YJrT2c5Xg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:35:45 2025 by rpki-client