$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca5e76-56de-3621-af00-436664e41e3a.roa File: 40ca5e76-56de-3621-af00-436664e41e3a.roa (raw, json) Hash identifier: OzpgXanDmiQ8TNUajvSJ6Y7c4TcRanXx7F/MFmZN15g= Subject key identifier: E1:CD:01:D8:D4:0A:43:7D:4A:E4:28:EB:33:F0:E2:A3:97:0F:2D:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1F38DB2C5F8F4A250F680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca5e76-56de-3621-af00-436664e41e3a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 73.233.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:f3:8d:b2:c5:f8:f4:a2:50:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b3db9e57-f107-463d-a51d-e711d8524a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:92:19:8f:f2:26:a5:00:45:d4:29:a5:ec: 5b:ed:0b:c9:b6:3f:56:87:3a:59:9d:61:f7:2c:14: 45:3c:80:2f:41:e9:ff:0f:63:70:1b:55:59:6f:4b: 2e:b7:65:b0:17:a8:41:2d:f2:38:cb:8d:ab:a8:d8: 8c:5e:b1:23:0e:fd:d2:2c:76:ce:6f:78:49:e3:dc: 25:b0:2f:d8:5b:5f:c5:6d:80:6a:04:8d:5a:da:af: fa:58:88:96:47:3d:58:d8:fb:06:d0:c3:d9:6d:ee: e3:60:78:ec:9c:e5:32:2d:59:29:17:b9:15:07:00: a7:ed:14:c7:27:be:63:4f:ef:07:a6:25:a6:68:7d: 67:f8:55:6d:c9:8a:83:5e:b5:3b:4d:fb:61:ef:52: 34:5f:e4:1a:91:19:a3:b2:38:b3:42:e1:8e:3a:c4: 7d:d2:c4:a7:20:e7:a6:5a:2a:64:dc:79:59:69:ac: 2e:00:f6:84:6b:69:b5:61:b6:f9:01:4e:21:26:dc: b0:3a:e3:8c:98:44:65:98:2c:5f:dd:5d:be:44:bd: ea:6d:5b:b5:ac:7b:a4:ad:e8:81:64:48:5f:66:29: d3:c8:f3:41:8e:8d:ed:3a:86:e1:42:46:f0:94:c2: 34:b8:ca:49:40:f7:42:39:e9:fe:6c:96:b9:ee:9f: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CD:01:D8:D4:0A:43:7D:4A:E4:28:EB:33:F0:E2:A3:97:0F:2D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca5e76-56de-3621-af00-436664e41e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.233.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:9d:71:ae:e5:38:2e:2c:3f:f4:cc:6b:67:01:af:45:44:dc: 8f:67:8f:94:c5:d5:ac:bd:1d:a3:2a:68:98:48:0b:cf:aa:de: fe:fe:79:2d:7c:bd:df:96:3a:d4:5d:11:01:27:20:36:1a:df: 96:e5:ab:4a:a3:06:80:3c:26:f4:06:f4:e1:7a:ed:21:8f:7f: 9f:2e:e2:80:30:e3:99:34:85:ef:f9:72:50:ee:62:93:98:b3: 3c:93:2e:e8:02:ce:be:f0:8f:ba:58:67:9a:ef:66:87:0b:bf: 49:6f:c5:be:c4:c9:e1:8b:42:7f:c0:6c:24:2e:e7:af:33:d6: 7e:a3:9a:ba:4c:ca:47:2b:ac:aa:a9:c6:c9:e9:7f:2d:9c:23: df:1f:18:45:2c:4b:df:7f:61:de:6d:26:c4:f6:af:16:2c:c6: 0b:66:58:22:ff:9b:02:c0:8b:4a:59:04:76:fe:2a:78:3d:52: c7:cb:4e:97:ee:a2:62:97:94:07:17:24:4a:9d:13:b8:63:38: de:f8:22:b3:e8:84:53:bd:57:5d:1e:79:cf:b6:27:12:00:c2: 4c:15:3d:2b:2c:d0:bf:cb:e7:5a:7a:86:f6:de:81:87:52:3b: 5f:54:e8:53:a6:52:c3:9a:72:6e:72:75:58:02:6f:f3:15:cc: c6:2d:ba:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswfONssX49KJQ9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjNkYjllNTctZjEwNy00NjNkLWE1MWQtZTcxMWQ4NTI0YTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ2SGY/yJqUARdQppexb7QvJtj9WhzpZnWH3 LBRFPIAvQen/D2NwG1VZb0sut2WwF6hBLfI4y42rqNiMXrEjDv3SLHbOb3hJ49wl sC/YW1/FbYBqBI1a2q/6WIiWRz1Y2PsG0MPZbe7jYHjsnOUyLVkpF7kVBwCn7RTH J75jT+8HpiWmaH1n+FVtyYqDXrU7Tfth71I0X+QakRmjsjizQuGOOsR90sSnIOem Wipk3HlZaawuAPaEa2m1Ybb5AU4hJtywOuOMmERlmCxf3V2+RL3qbVu1rHukreiB ZEhfZinTyPNBjo3tOobhQkbwlMI0uMpJQPdCOen+bJa57p/XlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHNAdjUCkN9SuQo6zPw4qOXDy14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBjYTVlNzYtNTZkZS0z NjIxLWFmMDAtNDM2NjY0ZTQxZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSenEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWdca7lOC4sP/TMa2cBr0VE3I9nj5TF1ay9HaMqaJhIC8+q3v7+eS18 vd+WOtRdEQEnIDYa35blq0qjBoA8JvQG9OF67SGPf58u4oAw45k0he/5clDuYpOY szyTLugCzr7wj7pYZ5rvZocLv0lvxb7EyeGLQn/AbCQu568z1n6jmrpMykcrrKqp xsnpfy2cI98fGEUsS99/Yd5tJsT2rxYsxgtmWCL/mwLAi0pZBHb+Kng9UsfLTpfu omKXlAcXJEqdE7hjON74IrPohFO9V10eec+2JxIAwkwVPSss0L/L51p6hvbegYdS O19U6FOmUsOacm5ydVgCb/MVzMYtujQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:32:01 2025 by rpki-client