$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409028a4-4947-3141-b12a-fa6a3b6b9020.roa File: 409028a4-4947-3141-b12a-fa6a3b6b9020.roa (raw, json) Hash identifier: 3F/uIzH8uf78mbBtF9UaZBpiUTbihY4lFHddx48696c= Subject key identifier: 01:CC:B3:BD:05:9C:20:35:96:25:25:08:C0:FB:20:DA:C1:DD:D6:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1637ABF1AF0A7A8415880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409028a4-4947-3141-b12a-fa6a3b6b9020.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 73.65.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:63:7a:bf:1a:f0:a7:a8:41:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6a0e0baa-1c06-4404-b4d1-f799ef4235dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9d:3d:c3:09:27:cd:28:f3:e9:06:ad:b8:43: 85:c7:e7:ee:d9:22:c2:7f:b6:cb:ba:2b:23:ee:fb: 89:f4:b9:76:ec:c2:5b:f5:af:64:41:84:21:28:77: 45:56:f4:1e:82:ae:6a:ac:51:d0:50:b0:46:59:5b: 50:1f:66:72:a8:fe:01:fa:48:ae:a9:9c:fc:5b:5e: 1d:cc:a5:41:c8:6b:b3:73:a7:77:71:1c:4f:06:8a: 72:28:a8:a9:93:ba:ad:31:2b:12:86:c8:6c:4d:d1: fc:85:cc:aa:ac:c6:bb:10:67:ac:4b:53:ca:34:1f: 73:c1:2a:e7:9d:c8:5f:43:73:88:10:1f:ed:4d:2c: 5b:ea:a8:58:09:95:8b:22:72:30:f1:7d:a0:a1:5e: b1:40:13:fe:9d:13:ce:3b:62:ec:54:fc:ca:0a:34: 98:0b:ea:5a:49:67:d2:02:b2:c3:dc:39:29:eb:82: 56:ad:81:bf:50:50:3e:44:2a:b9:44:7c:63:71:f9: a8:fb:84:fd:45:08:21:ab:e1:25:45:4d:bf:fd:78: 91:cd:50:db:38:c1:0e:16:22:e0:58:76:05:a6:74: 19:cc:af:9d:c1:05:70:b0:49:ad:d2:10:2a:18:b2: 0a:8d:6c:cd:ca:88:a2:61:01:fe:8a:f0:34:a1:56: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CC:B3:BD:05:9C:20:35:96:25:25:08:C0:FB:20:DA:C1:DD:D6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409028a4-4947-3141-b12a-fa6a3b6b9020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.65.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b4:cc:f6:20:db:8e:99:c6:25:47:b0:19:c2:3b:91:a0:ab: 77:c4:a6:6a:da:6b:55:35:14:ed:8b:69:a4:e0:62:f5:ba:23: b1:30:78:90:34:f9:f6:b9:66:27:4f:bd:75:37:03:b6:ce:19: c7:59:ab:af:08:e6:3a:c2:cd:87:07:29:3e:3c:45:8a:a7:a5: 6b:ee:79:81:a3:99:92:cf:46:7e:54:fa:06:ab:20:ac:ec:6e: 31:5e:f3:0e:c4:bc:25:99:61:63:b4:5c:aa:20:97:1d:b8:ff: 75:77:6d:68:70:bd:3e:8b:e4:b1:1f:0b:2c:e8:78:93:16:39: 0f:d4:cf:3e:7a:76:7e:23:2e:f6:de:3b:65:35:cc:a9:17:25: d2:ce:de:3c:bd:bf:7b:ee:34:40:b7:f4:f6:9d:9a:6c:d2:0a: 51:7a:28:3a:05:31:10:9a:a6:11:10:18:14:7d:31:19:7e:c5: 80:6d:aa:92:6a:51:7e:70:07:bd:ba:2c:6c:73:be:4e:47:92: b8:37:02:ff:d9:ad:16:1a:2b:97:41:ae:5b:59:da:1b:9e:9e: 11:33:8b:fa:94:f8:1b:73:52:b7:19:33:a2:84:19:e7:df:d3: 24:7e:e8:b7:d8:16:34:bd:aa:3f:a8:99:c0:e3:13:f5:63:80: a3:a6:3b:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswWN6vxrwp6hBWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmEwZTBiYWEtMWMwNi00NDA0LWI0ZDEtZjc5OWVmNDIzNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Z09wwknzSjz6QatuEOFx+fu2SLCf7bLuisj 7vuJ9Ll27MJb9a9kQYQhKHdFVvQegq5qrFHQULBGWVtQH2ZyqP4B+kiuqZz8W14d zKVByGuzc6d3cRxPBopyKKipk7qtMSsShshsTdH8hcyqrMa7EGesS1PKNB9zwSrn nchfQ3OIEB/tTSxb6qhYCZWLInIw8X2goV6xQBP+nRPOO2LsVPzKCjSYC+paSWfS ArLD3Dkp64JWrYG/UFA+RCq5RHxjcfmo+4T9RQghq+ElRU2//XiRzVDbOMEOFiLg WHYFpnQZzK+dwQVwsEmt0hAqGLIKjWzNyoiiYQH+ivA0oVax9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHMs70FnCA1liUlCMD7INrB3dZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA5MDI4YTQtNDk0Ny0z MTQxLWIxMmEtZmE2YTNiNmI5MDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq0zPYg246ZxiVHsBnCO5Ggq3fEpmraa1U1FO2LaaTgYvW6I7EweJA0 +fa5ZidPvXU3A7bOGcdZq68I5jrCzYcHKT48RYqnpWvueYGjmZLPRn5U+garIKzs bjFe8w7EvCWZYWO0XKoglx24/3V3bWhwvT6L5LEfCyzoeJMWOQ/Uzz56dn4jLvbe O2U1zKkXJdLO3jy9v3vuNEC39PadmmzSClF6KDoFMRCaphEQGBR9MRl+xYBtqpJq UX5wB726LGxzvk5Hkrg3Av/ZrRYaK5dBrltZ2huenhEzi/qU+BtzUrcZM6KEGeff 0yR+6LfYFjS9qj+omcDjE/VjgKOmO5U= -----END CERTIFICATE-----Generated at Sun Aug 24 01:38:52 2025 by rpki-client