$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35128ea1-dab8-3c25-906e-2e74f4824865.roa File: 35128ea1-dab8-3c25-906e-2e74f4824865.roa (raw, json) Hash identifier: pq5s9Xg8e1bt84jf3wUf90uzKvj05BUUFuYgNZHg3es= Subject key identifier: 59:AC:BA:1F:C8:B1:EC:36:D5:28:69:74:0E:22:3C:BE:17:65:EB:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC187A54FCA914A101C9080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35128ea1-dab8-3c25-906e-2e74f4824865.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.29.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:87:a5:4f:ca:91:4a:10:1c:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4f1290da-8be2-469e-8bae-946ecd9badcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:12:f4:53:4b:df:a8:9c:99:77:2d:b3:81:2a: 38:0e:99:3e:e0:6a:31:32:26:b2:9b:78:25:1a:74: 61:e7:8a:90:0e:b3:8f:51:0d:f1:ad:94:27:3f:7a: 49:51:43:6e:d9:19:82:39:ba:d2:eb:49:bd:55:e1: 5b:a0:f6:89:0e:fc:5a:65:67:6a:24:a7:5c:e4:5c: e4:0c:5b:e1:98:f3:f0:31:22:7e:08:bb:46:d9:72: 4b:e9:0d:25:41:60:58:7a:d7:8f:05:d6:96:3a:cf: 7d:a7:01:fc:97:c5:8f:2a:cd:0c:e2:99:6c:37:46: a6:e7:77:2c:dd:92:c5:f2:2f:e6:04:93:e3:93:ca: 20:40:e8:87:f3:c2:c5:5f:03:30:26:7e:db:30:19: ff:6e:b4:87:47:f0:18:0e:11:ad:1d:74:82:92:21: 3e:49:d7:e1:08:c2:5f:a9:77:3d:67:c7:73:56:0d: 87:b9:9d:ac:52:fe:49:b5:a5:da:f4:53:85:66:9b: 59:16:c3:40:dc:f6:d2:af:4d:a6:a8:da:ad:b4:e4: 3e:6d:47:41:4b:60:38:a9:89:83:4f:af:5d:d6:65: c9:7d:7e:47:c4:b7:74:86:29:04:be:d1:8c:a7:52: ed:d4:eb:f5:90:a6:4e:f1:47:bf:50:cc:02:e8:47: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AC:BA:1F:C8:B1:EC:36:D5:28:69:74:0E:22:3C:BE:17:65:EB:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35128ea1-dab8-3c25-906e-2e74f4824865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:84:16:35:bd:92:47:87:31:e8:60:be:7d:8c:bb:79:7c:40: 4e:15:4d:67:1c:9a:0f:aa:56:cc:8e:f0:c8:6d:c3:3e:f2:b5: b8:fa:f4:eb:75:90:f6:4a:2a:a9:7c:7c:90:32:eb:1e:4d:d4: ac:9b:ad:ff:15:59:85:57:85:c5:83:7e:bc:12:28:ea:ec:66: f9:4c:00:42:06:bb:3f:8f:7e:9e:d1:6f:fc:c5:9f:a3:33:f6: 86:98:d2:41:60:b3:8b:39:91:21:69:82:d3:7e:6d:c9:d2:d0: ad:7d:c5:a4:60:aa:34:1d:44:e4:5a:26:6f:6a:a4:dc:46:f0: 7e:0e:66:30:99:34:a3:1f:e4:b6:c9:60:53:7d:26:f3:df:4a: 2a:12:e6:c1:2a:4a:48:9d:b3:9f:75:c7:35:fa:97:ab:f7:26: 69:6c:cf:ef:2b:47:a0:89:8f:71:de:21:dd:53:f4:af:05:e5: db:2e:54:58:48:30:e3:b0:16:e0:85:3d:38:9b:52:ad:0f:8f: 5e:de:f2:f1:7c:26:97:c0:94:5f:2e:e0:74:3d:12:20:4a:8b: ac:88:d0:e5:7d:b8:eb:d2:9c:9a:81:72:75:c8:6d:16:08:bf: 83:72:d1:85:2a:21:78:05:71:2d:92:ee:65:57:9e:e9:b1:06: 53:bf:08:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswYelT8qRShAckIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGYxMjkwZGEtOGJlMi00NjllLThiYWUtOTQ2ZWNkOWJhZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBL0U0vfqJyZdy2zgSo4Dpk+4GoxMiaym3gl GnRh54qQDrOPUQ3xrZQnP3pJUUNu2RmCObrS60m9VeFboPaJDvxaZWdqJKdc5Fzk DFvhmPPwMSJ+CLtG2XJL6Q0lQWBYetePBdaWOs99pwH8l8WPKs0M4plsN0am53cs 3ZLF8i/mBJPjk8ogQOiH88LFXwMwJn7bMBn/brSHR/AYDhGtHXSCkiE+SdfhCMJf qXc9Z8dzVg2HuZ2sUv5JtaXa9FOFZptZFsNA3PbSr02mqNqttOQ+bUdBS2A4qYmD T69d1mXJfX5HxLd0hikEvtGMp1Lt1Ov1kKZO8Ue/UMwC6EevuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmsuh/Isew21ShpdA4iPL4XZeuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUxMjhlYTEtZGFiOC0z YzI1LTkwNmUtMmU3NGY0ODI0ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSR0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaEFjW9kkeHMehgvn2Mu3l8QE4VTWccmg+qVsyO8Mhtwz7ytbj69Ot1 kPZKKql8fJAy6x5N1Kybrf8VWYVXhcWDfrwSKOrsZvlMAEIGuz+Pfp7Rb/zFn6Mz 9oaY0kFgs4s5kSFpgtN+bcnS0K19xaRgqjQdRORaJm9qpNxG8H4OZjCZNKMf5LbJ YFN9JvPfSioS5sEqSkids591xzX6l6v3Jmlsz+8rR6CJj3HeId1T9K8F5dsuVFhI MOOwFuCFPTibUq0Pj17e8vF8JpfAlF8u4HQ9EiBKi6yI0OV9uOvSnJqBcnXIbRYI v4Ny0YUqIXgFcS2S7mVXnumxBlO/CKI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:23:44 2025 by rpki-client