$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3506f792-d8bc-36e0-81dc-6e91ef8c93fa.roa File: 3506f792-d8bc-36e0-81dc-6e91ef8c93fa.roa (raw, json) Hash identifier: NQmfgZyRW5DLTSVH7H65YqVpqJ5G332xU6flqwNJsBI= Subject key identifier: F9:5D:7E:35:5E:0F:1A:90:33:39:9F:52:8E:D1:A0:6A:8F:81:7C:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5354AC95DB252FE6F1040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3506f792-d8bc-36e0-81dc-6e91ef8c93fa.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.222.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:35:4a:c9:5d:b2:52:fe:6f:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ddb9c8ec-bce5-4c8e-8024-22e2d737f2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:3d:48:2a:35:8d:ac:64:94:87:74:33:f6: c9:93:ac:52:70:52:7f:59:17:34:d5:85:36:09:79: 05:f1:65:c0:08:64:69:a4:15:9c:08:10:ee:1a:84: 5b:02:a6:52:9a:b9:1f:16:ec:c9:3e:48:c1:5c:8f: 52:0a:02:5a:2a:40:da:28:14:0a:20:ef:fe:8a:33: ba:e2:7d:f7:62:2d:0a:99:7c:77:36:e2:0c:c0:ba: c8:39:7b:fe:ee:50:9d:7d:f2:03:fa:82:46:b8:ec: 2a:ee:21:ad:29:fd:24:3f:eb:7a:aa:5a:48:87:97: bf:64:a7:67:40:4a:f9:79:dd:0a:44:2a:08:cd:ba: 93:dc:92:e2:35:de:a3:7b:3c:79:5c:9e:94:bf:d3: 06:66:9c:60:b0:e4:90:c6:2c:10:95:6c:52:64:c3: ed:89:6b:1e:c7:9d:a6:c5:29:92:58:e8:a8:06:27: f5:ed:3b:49:42:89:00:fd:92:0d:6c:a6:68:e8:50: 53:56:26:4b:2e:4e:28:6f:ac:78:70:d0:8e:06:c0: d0:9f:37:8d:e7:ee:75:86:c4:ad:12:51:fe:6f:03: 8f:52:b4:d9:e1:49:c3:49:dd:b5:40:56:37:22:c9: 82:04:0e:7f:32:4f:07:db:a2:a0:3d:e2:5b:5a:7f: c5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5D:7E:35:5E:0F:1A:90:33:39:9F:52:8E:D1:A0:6A:8F:81:7C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3506f792-d8bc-36e0-81dc-6e91ef8c93fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.222.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:94:d2:2b:96:18:0f:80:71:74:af:ea:a1:a1:99:15:b9:3f: 7f:1b:b5:3e:d9:16:62:e1:55:cf:ef:9b:76:30:7e:67:9e:f7: 61:52:58:b3:3e:c8:5c:25:f1:18:d4:6d:d0:a6:bb:c6:55:df: 5d:57:a3:6b:9d:18:b9:de:d8:5d:9b:d1:2a:bb:d5:5f:46:5a: af:7b:94:4c:a1:db:47:f7:c4:93:fe:7f:4e:ac:1d:61:f4:7b: b1:e9:b6:15:c3:ed:e5:31:9d:82:2c:b0:76:c3:77:91:75:24: 7b:68:ac:f9:bd:cc:e8:ae:e0:09:00:b2:49:da:0f:59:da:64: e5:35:66:67:9b:c7:18:ee:f5:72:03:de:89:56:f4:e2:bd:ad: 06:fb:16:60:51:8b:bc:72:ec:8b:d2:ee:a4:d9:6f:f5:52:8c: cf:bb:bf:d9:fb:16:67:a6:5b:86:f8:62:2c:bd:70:d2:6b:b9: 86:a4:55:00:ce:26:0f:00:f5:6e:63:8d:6e:df:2f:22:9c:8d: 81:95:64:bf:7c:1b:ed:5e:fb:35:9a:88:4b:fc:42:21:ab:62: 0a:50:15:26:1f:fc:91:23:58:2c:f8:1f:0d:9b:f5:88:82:ca: 90:6c:bf:b4:56:fa:de:ed:4b:e0:4f:24:6a:d1:0f:10:26:d1: 34:22:31:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxTVKyV2yUv5vEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGRiOWM4ZWMtYmNlNS00YzhlLTgwMjQtMjJlMmQ3MzdmMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V49SCo1jaxklId0M/bJk6xScFJ/WRc01YU2 CXkF8WXACGRppBWcCBDuGoRbAqZSmrkfFuzJPkjBXI9SCgJaKkDaKBQKIO/+ijO6 4n33Yi0KmXx3NuIMwLrIOXv+7lCdffID+oJGuOwq7iGtKf0kP+t6qlpIh5e/ZKdn QEr5ed0KRCoIzbqT3JLiNd6jezx5XJ6Uv9MGZpxgsOSQxiwQlWxSZMPtiWsex52m xSmSWOioBif17TtJQokA/ZINbKZo6FBTViZLLk4ob6x4cNCOBsDQnzeN5+51hsSt ElH+bwOPUrTZ4UnDSd21QFY3IsmCBA5/Mk8H26KgPeJbWn/FIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPldfjVeDxqQMzmfUo7RoGqPgXzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUwNmY3OTItZDhiYy0z NmUwLTgxZGMtNmU5MWVmOGM5M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASd5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaU0iuWGA+AcXSv6qGhmRW5P38btT7ZFmLhVc/vm3Ywfmee92FSWLM+ yFwl8RjUbdCmu8ZV311Xo2udGLne2F2b0Sq71V9GWq97lEyh20f3xJP+f06sHWH0 e7HpthXD7eUxnYIssHbDd5F1JHtorPm9zOiu4AkAsknaD1naZOU1Zmebxxju9XID 3olW9OK9rQb7FmBRi7xy7IvS7qTZb/VSjM+7v9n7FmemW4b4Yiy9cNJruYakVQDO Jg8A9W5jjW7fLyKcjYGVZL98G+1e+zWaiEv8QiGrYgpQFSYf/JEjWCz4Hw2b9YiC ypBsv7RW+t7tS+BPJGrRDxAm0TQiMQ4= -----END CERTIFICATE-----Generated at Sun Aug 24 08:22:39 2025 by rpki-client