$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd60924-807b-3952-aa8a-823e55249e90.roa File: 3bd60924-807b-3952-aa8a-823e55249e90.roa (raw, json) Hash identifier: IxxZ4JuQnczXKuxeCm8CaaZ0sWYxKCsGabyqg/sKw/E= Subject key identifier: DF:06:69:10:14:B9:E3:58:70:43:8B:A2:76:E5:46:82:0B:C1:2E:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1BC43F1C6BDE011CDC000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd60924-807b-3952-aa8a-823e55249e90.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.248.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:bc:43:f1:c6:bd:e0:11:cd:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=695ea61d-ae88-41c0-9ad5-c1d2bb3bfaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:12:cf:f0:31:01:6d:dc:d0:4b:4c:7c:90: 1f:8f:db:7f:41:c1:f4:46:7c:9e:4c:21:1d:54:d2: cf:a6:0d:57:92:61:47:d7:b2:37:99:0c:c4:55:15: 3c:1c:14:87:eb:b8:18:06:5d:13:dd:1d:85:6e:3b: 0d:86:b8:74:90:31:56:95:84:a4:84:ce:32:14:46: 25:dc:04:f7:19:e5:1e:40:a8:4e:69:35:0f:ff:36: 01:44:7e:cf:10:00:44:a6:ba:37:83:c5:2e:6e:98: 18:56:5e:f2:23:0c:47:1d:02:4d:b0:af:5a:7c:d7: d5:5e:17:49:2d:f6:67:7e:5c:a0:db:39:2c:36:8c: 96:6d:ee:5e:df:c8:24:c3:c6:1c:a6:e4:bf:1c:de: 1c:3f:2d:78:55:b0:74:7e:38:1f:9a:64:61:0a:83: e6:db:fd:16:03:45:d0:1a:fa:29:47:e8:b0:e5:6d: c9:7a:ca:e0:84:2d:ac:76:8a:7b:a4:5c:19:d2:41: 52:e3:e8:81:e1:d1:f8:d0:34:51:f8:21:e9:89:09: f8:b7:9f:32:51:8b:ad:9e:bf:bb:99:e7:c4:c1:27: da:ab:e7:98:ba:15:ae:c4:da:af:92:e8:4e:05:52: 6c:5b:56:b1:ad:c2:ee:fe:7f:52:9f:7e:fd:4d:19: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:06:69:10:14:B9:E3:58:70:43:8B:A2:76:E5:46:82:0B:C1:2E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bd60924-807b-3952-aa8a-823e55249e90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:04:9a:6e:3d:1e:9b:80:c7:da:0f:ac:b0:52:56:94:5e:e1: 6c:ba:86:08:11:24:40:05:70:d7:77:48:07:e6:90:78:d7:d1: 93:43:7c:af:80:75:a0:c0:0c:2c:05:99:4d:69:e0:4b:1c:31: 26:00:f3:8b:74:af:a6:f6:4a:cd:86:ef:67:08:d8:30:70:05: 7c:3e:96:45:a7:79:35:d9:33:94:0b:59:64:2a:0f:14:02:9d: c5:66:3e:2b:42:5c:4f:b0:bf:3b:f2:c3:4c:41:78:14:1e:51: 73:03:34:2b:bd:0d:9b:7d:b4:62:fd:14:22:5a:20:f5:dd:db: 4a:9e:ad:70:7e:1e:6b:71:c9:36:60:e1:2e:b2:9b:3b:8c:c9: ee:36:f1:5f:4a:6a:f6:05:2f:8d:fd:77:1f:b7:3a:6a:91:69: 38:bc:8e:17:ef:26:74:74:2e:67:c6:59:06:b3:55:d1:d4:5b: 00:d8:f2:7e:2d:78:4a:74:df:55:79:49:0c:a1:89:c3:85:fe: d7:ed:1d:0f:e9:aa:6e:ed:23:6c:c5:19:ec:dd:6c:64:60:0a: 32:5a:35:0d:fd:3b:0a:f8:bb:a3:39:72:07:b3:80:0b:48:61: 26:28:1a:eb:fd:73:9c:59:c4:f6:c2:eb:2a:44:e3:86:09:91: 58:88:93:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswbxD8ca94BHNwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Njk1ZWE2MWQtYWU4OC00MWMwLTlhZDUtYzFkMmJiM2JmYWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XASz/AxAW3c0EtMfJAfj9t/QcH0RnyeTCEd VNLPpg1XkmFH17I3mQzEVRU8HBSH67gYBl0T3R2FbjsNhrh0kDFWlYSkhM4yFEYl 3AT3GeUeQKhOaTUP/zYBRH7PEABEpro3g8UubpgYVl7yIwxHHQJNsK9afNfVXhdJ LfZnflyg2zksNoyWbe5e38gkw8YcpuS/HN4cPy14VbB0fjgfmmRhCoPm2/0WA0XQ GvopR+iw5W3JesrghC2sdop7pFwZ0kFS4+iB4dH40DRR+CHpiQn4t58yUYutnr+7 mefEwSfaq+eYuhWuxNqvkuhOBVJsW1axrcLu/n9Sn379TRkWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8GaRAUueNYcEOLonblRoILwS4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JkNjA5MjQtODA3Yi0z OTUyLWFhOGEtODIzZTU1MjQ5ZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSfiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQEmm49HpuAx9oPrLBSVpRe4Wy6hggRJEAFcNd3SAfmkHjX0ZNDfK+A daDADCwFmU1p4EscMSYA84t0r6b2Ss2G72cI2DBwBXw+lkWneTXZM5QLWWQqDxQC ncVmPitCXE+wvzvyw0xBeBQeUXMDNCu9DZt9tGL9FCJaIPXd20qerXB+HmtxyTZg 4S6ymzuMye428V9KavYFL439dx+3OmqRaTi8jhfvJnR0LmfGWQazVdHUWwDY8n4t eEp031V5SQyhicOF/tftHQ/pqm7tI2zFGezdbGRgCjJaNQ39Owr4u6M5cgezgAtI YSYoGuv9c5xZxPbC6ypE44YJkViIk94= -----END CERTIFICATE-----Generated at Sun Aug 24 04:24:53 2025 by rpki-client