$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e158bf8-f36f-32da-8bd2-0c4a73473ea6.roa File: 3e158bf8-f36f-32da-8bd2-0c4a73473ea6.roa (raw, json) Hash identifier: dQtFpZyW9qbZYHrHAwvH1AX1YXdnjR7Hk9Za2jT9g7g= Subject key identifier: 31:54:8A:B6:C5:F1:3D:C8:4E:B8:35:42:D6:31:2E:EB:E9:68:4C:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3FD0C62B6E3596B99F280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e158bf8-f36f-32da-8bd2-0c4a73473ea6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 73.188.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:fd:0c:62:b6:e3:59:6b:99:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3a0db828-d59c-497a-aab8-4074d009afaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:a6:34:e4:1c:97:f1:12:0d:f6:aa:43:30: c5:0a:5e:d3:99:27:fc:f9:57:e9:fa:eb:c5:0e:73: 8b:0a:e2:c4:fe:ce:f2:12:ff:78:01:b2:6b:70:45: a2:bc:cb:ec:cf:bc:8c:d1:77:33:18:0b:a2:85:ac: b3:2a:58:c2:4d:fb:c5:6f:c4:2d:e7:86:d0:14:e1: 9c:b4:36:82:f5:b0:bc:d7:75:ae:bb:2d:a5:0e:9c: 2e:1a:6d:3c:3a:42:8c:97:0f:7c:ff:2c:2f:74:95: dc:e6:e4:6a:2a:2f:99:02:0e:01:7a:f3:af:e0:28: 19:e6:56:59:be:a2:bd:5f:5a:9f:2e:89:2e:2e:53: ce:3a:78:55:12:66:a9:31:23:22:e4:52:42:1d:0e: 00:8f:2b:47:4a:b6:75:43:0e:68:ec:28:95:bd:44: ea:75:c3:81:80:f9:3f:b6:db:6a:9b:3d:97:2d:fc: 73:e8:3c:8f:8f:a1:1f:32:9d:0e:f6:15:af:99:a9: 97:83:99:7b:7b:9a:75:72:35:dc:6c:97:70:0d:20: 09:30:06:69:3f:65:09:c3:c0:21:86:c3:5d:75:38: b6:b6:ce:27:10:98:d4:02:89:9a:6a:55:48:b1:41: df:86:7b:ea:b7:26:fa:cf:40:d3:22:48:1b:dc:54: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:54:8A:B6:C5:F1:3D:C8:4E:B8:35:42:D6:31:2E:EB:E9:68:4C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e158bf8-f36f-32da-8bd2-0c4a73473ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.188.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:57:13:62:3d:84:da:ef:49:dd:cf:a1:37:b4:aa:8d:b6:62: f9:bb:58:e9:34:e4:bf:cc:25:f6:b9:54:ad:a8:16:3b:72:ab: 23:dd:cc:98:a7:cb:e4:b7:f2:22:68:0d:55:ca:3f:48:db:6e: 3b:9a:85:8c:a4:e1:2e:dc:0d:04:5b:c3:ce:74:1f:01:76:8d: 1f:78:9e:23:38:53:ec:84:ea:29:88:d6:e4:06:4d:c4:57:7d: 4c:ae:42:31:25:8e:ed:a5:d0:25:96:99:99:76:43:0d:13:6c: b6:df:87:70:dd:ef:27:21:d2:ca:98:6e:7d:c9:2d:fe:7b:f8: 2f:4e:27:08:15:41:d8:b2:df:00:68:ba:c1:6f:6b:b4:06:77: bb:41:8b:70:c8:06:9c:01:dd:62:e5:d5:9f:e3:63:68:3e:2d: 27:3b:82:99:a2:53:0c:6b:27:dd:70:db:b4:f9:ae:db:a1:0e: cd:be:6f:28:e2:ba:63:71:10:dc:8c:a6:07:8a:ac:ff:e9:7d: ae:1b:2f:6c:b7:e6:1f:59:e1:e3:d9:ac:44:6b:56:9d:67:4c: b7:42:2e:35:48:52:56:d3:5d:85:61:ed:46:32:87:94:b1:38: 68:74:1f:ae:bc:f3:dc:77:78:6a:1c:ba:d5:c2:ec:6b:8e:15: 66:98:77:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw/0MYrbjWWuZ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2EwZGI4MjgtZDU5Yy00OTdhLWFhYjgtNDA3NGQwMDlhZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHKmNOQcl/ESDfaqQzDFCl7TmSf8+Vfp+uvF DnOLCuLE/s7yEv94AbJrcEWivMvsz7yM0XczGAuihayzKljCTfvFb8Qt54bQFOGc tDaC9bC813Wuuy2lDpwuGm08OkKMlw98/ywvdJXc5uRqKi+ZAg4BevOv4CgZ5lZZ vqK9X1qfLokuLlPOOnhVEmapMSMi5FJCHQ4AjytHSrZ1Qw5o7CiVvUTqdcOBgPk/ tttqmz2XLfxz6DyPj6EfMp0O9hWvmamXg5l7e5p1cjXcbJdwDSAJMAZpP2UJw8Ah hsNddTi2ts4nEJjUAomaalVIsUHfhnvqtyb6z0DTIkgb3FTO5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFUirbF8T3ITrg1QtYxLuvpaEw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UxNThiZjgtZjM2Zi0z MmRhLThiZDItMGM0YTczNDczZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBXE2I9hNrvSd3PoTe0qo22Yvm7WOk05L/MJfa5VK2oFjtyqyPdzJin y+S38iJoDVXKP0jbbjuahYyk4S7cDQRbw850HwF2jR94niM4U+yE6imI1uQGTcRX fUyuQjElju2l0CWWmZl2Qw0TbLbfh3Dd7ych0sqYbn3JLf57+C9OJwgVQdiy3wBo usFva7QGd7tBi3DIBpwB3WLl1Z/jY2g+LSc7gpmiUwxrJ91w27T5rtuhDs2+byji umNxENyMpgeKrP/pfa4bL2y35h9Z4ePZrERrVp1nTLdCLjVIUlbTXYVh7UYyh5Sx OGh0H66889x3eGocutXC7GuOFWaYd60= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:09 2025 by rpki-client