$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f81b254-f46b-39d6-8815-185a9ec8c311.roa File: 3f81b254-f46b-39d6-8815-185a9ec8c311.roa (raw, json) Hash identifier: OXO8b2BoxtmDqHQdLLHE8pXBuGoBiCHJs15baqD5VHA= Subject key identifier: E3:8F:2F:E9:78:37:81:A5:6A:14:57:4D:74:E9:AF:B4:C0:6A:AB:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3131CD9C8A55D17D60C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f81b254-f46b-39d6-8815-185a9ec8c311.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.223.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:13:1c:d9:c8:a5:5d:17:d6:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4ca2fc8d-346b-4b4c-a228-f891dd27d6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:63:fa:85:53:b6:11:ea:26:ad:7a:bc:f0:e4: d6:be:21:ef:bf:3f:ae:65:7b:24:8e:47:7c:dd:d1: 20:ed:dd:95:43:8e:8a:9a:3a:44:d5:b7:48:1b:b5: 6e:c3:25:b1:1a:c1:33:81:bb:7b:82:a9:1c:cb:a4: 20:a0:e5:25:c8:d2:ce:f6:4d:9d:71:c3:c5:72:6d: 47:23:af:b7:fc:4b:39:fb:ac:37:dc:5a:b6:5b:7e: 5b:b8:db:ca:93:c2:bf:26:dd:d3:cf:b6:1c:8c:cf: 5c:6d:12:47:a5:fc:a7:13:f9:2d:35:37:fc:86:d9: 62:5d:ef:a7:a6:ff:8c:4f:40:61:e1:4b:d4:32:89: 21:e4:cf:cf:e9:c9:39:11:7e:60:5c:ea:db:72:80: 32:22:74:0c:bc:d7:8c:cd:41:4c:e7:ac:1f:71:13: 09:bb:1d:59:6a:4b:61:cd:49:c0:e1:b6:70:01:2c: 46:1a:58:f1:2a:0f:06:96:36:9f:90:40:a5:5f:10: 39:f5:a6:9a:2d:c3:50:ce:86:18:1b:d0:dc:8f:00: 78:af:78:95:c2:f1:01:0c:89:b6:38:4a:46:1c:9e: be:ab:44:3f:d2:f3:90:cd:4b:68:91:30:70:d7:45: 20:c7:58:72:aa:a7:4f:d4:fc:23:cb:5b:6e:2a:8d: 84:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:2F:E9:78:37:81:A5:6A:14:57:4D:74:E9:AF:B4:C0:6A:AB:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f81b254-f46b-39d6-8815-185a9ec8c311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:71:4b:e0:ee:9e:d9:0d:af:34:85:ec:f7:ae:d1:6b:03:0d: d6:36:e9:53:14:16:1c:69:16:89:13:04:60:18:b8:d8:d1:1b: c0:4d:ee:22:d6:da:7f:69:ee:70:18:69:54:b5:ba:59:03:f2: 61:da:35:82:e2:06:27:fa:73:32:18:3c:e9:58:97:c7:8c:c1: 4b:30:cc:72:f3:21:ba:62:5e:f1:e4:c5:6f:11:6a:6d:cf:93: 18:72:c0:a9:bd:2e:38:3b:28:a9:5d:92:9f:01:30:76:84:38: 52:ac:7b:35:67:50:e8:7a:3f:2f:46:ce:ff:24:0d:60:d7:a0: 0d:64:5d:e4:f2:62:a6:09:00:ad:ba:be:20:25:a8:2b:a6:bc: e5:70:af:29:55:e2:1f:26:c0:04:f6:46:13:c9:e2:fc:f4:70: fc:17:67:45:10:55:34:74:9c:20:7f:57:2d:94:04:65:52:57: ac:f4:be:4f:5b:28:d9:29:c2:03:68:d3:49:7e:b3:36:2a:5b: a3:e2:76:03:da:41:e3:f6:3a:9a:f7:1d:f6:d1:12:96:4d:12: 72:6c:88:6a:5a:93:cb:7d:0d:d4:5d:c2:29:66:79:57:ec:1f: 5e:e2:bf:14:07:a1:63:e4:f2:8c:24:36:3c:c9:f5:d3:f3:88: 8b:ec:5c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswxMc2cilXRfWDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGNhMmZjOGQtMzQ2Yi00YjRjLWEyMjgtZjg5MWRkMjdkNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2P6hVO2EeomrXq88OTWviHvvz+uZXskjkd8 3dEg7d2VQ46KmjpE1bdIG7VuwyWxGsEzgbt7gqkcy6QgoOUlyNLO9k2dccPFcm1H I6+3/Es5+6w33Fq2W35buNvKk8K/Jt3Tz7YcjM9cbRJHpfynE/ktNTf8htliXe+n pv+MT0Bh4UvUMokh5M/P6ck5EX5gXOrbcoAyInQMvNeMzUFM56wfcRMJux1Zakth zUnA4bZwASxGGljxKg8GljafkEClXxA59aaaLcNQzoYYG9DcjwB4r3iVwvEBDIm2 OEpGHJ6+q0Q/0vOQzUtokTBw10Ugx1hyqqdP1Pwjy1tuKo2EwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOPL+l4N4GlahRXTXTpr7TAaquvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y4MWIyNTQtZjQ2Yi0z OWQ2LTg4MTUtMTg1YTllYzhjMzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd96MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5xS+DuntkNrzSF7Peu0WsDDdY26VMUFhxpFokTBGAYuNjRG8BN7iLW 2n9p7nAYaVS1ulkD8mHaNYLiBif6czIYPOlYl8eMwUswzHLzIbpiXvHkxW8Ram3P kxhywKm9Ljg7KKldkp8BMHaEOFKsezVnUOh6Py9Gzv8kDWDXoA1kXeTyYqYJAK26 viAlqCumvOVwrylV4h8mwAT2RhPJ4vz0cPwXZ0UQVTR0nCB/Vy2UBGVSV6z0vk9b KNkpwgNo00l+szYqW6PidgPaQeP2Opr3HfbREpZNEnJsiGpak8t9DdRdwilmeVfs H17ivxQHoWPk8owkNjzJ9dPziIvsXJ4= -----END CERTIFICATE-----Generated at Sat Aug 23 23:09:33 2025 by rpki-client