$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42604b0f-ce9c-322a-ba6a-cd5ab2d02c39.roa File: 42604b0f-ce9c-322a-ba6a-cd5ab2d02c39.roa (raw, json) Hash identifier: 2m9qZsNzGsvspXDhfwYfJh8hJScZi3PyNI068WaM7os= Subject key identifier: 7D:D1:F6:E6:6F:D7:14:63:30:B0:C7:F3:01:AD:F1:7E:F0:77:CC:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED0B4DDA90A4443A5A4FE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42604b0f-ce9c-322a-ba6a-cd5ab2d02c39.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 73.32.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:0b:4d:da:90:a4:44:3a:5a:4f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=4b994237-0db2-461b-90a0-479c92b09247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:04:ad:97:68:2d:67:df:4d:dc:fa:41:1f:42: 2c:a9:7a:77:c1:2a:3e:07:a0:df:56:ac:af:14:d7: 57:2a:32:bc:ee:2e:c1:04:0b:14:08:d7:9d:f3:1d: 3a:a3:34:c1:6f:44:55:f3:08:e0:ef:cd:5a:1f:64: 6b:7c:2d:33:93:d6:f8:84:26:0c:67:c4:68:df:b5: 6f:8d:8e:53:d1:1e:67:18:01:67:03:ac:5d:2d:4f: 9d:4d:b4:fb:0a:28:46:8f:a2:fd:0e:5b:cd:c6:ed: 5b:93:4b:fc:f3:1f:cd:30:b3:f6:f0:22:19:e1:37: 8e:2e:7a:e3:27:b7:69:2a:7d:03:af:e1:fc:c5:58: 37:7f:29:9e:12:22:4c:4e:fb:a3:58:4f:62:c5:20: 18:1d:ca:1c:8c:b6:7c:b1:3a:ab:63:f1:ce:04:e1: c9:7a:0d:18:e5:b4:90:18:3d:53:8e:9e:0a:4f:5e: 2a:75:c3:11:bf:e9:9d:c9:ff:09:e6:cb:77:d3:9f: e5:c8:41:45:e0:6d:26:71:72:4c:c6:fb:5a:1d:91: 09:1c:49:77:42:b0:15:8b:2c:c1:fe:2d:8e:30:b9: b7:7f:66:8c:14:d1:12:c3:77:14:fe:cb:3a:03:11: 15:6b:03:73:20:d5:54:b3:8a:de:fd:e5:aa:26:60: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D1:F6:E6:6F:D7:14:63:30:B0:C7:F3:01:AD:F1:7E:F0:77:CC:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42604b0f-ce9c-322a-ba6a-cd5ab2d02c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.32.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9a:f8:dc:88:43:05:82:a8:20:c5:7d:65:03:73:24:db:49: b4:b6:17:d7:df:bb:15:0e:0e:96:05:aa:d2:81:8f:b3:a1:73: 67:84:29:24:e6:94:af:3a:bf:d8:26:af:df:18:95:9d:d6:85: 99:b6:ac:ba:6c:d5:f7:c5:e6:74:e6:1c:70:f5:d4:0d:bc:d0: d9:7b:88:c0:2e:9e:db:0c:d3:86:57:5c:b3:83:c5:3b:9c:3c: d2:6c:13:94:3a:76:94:d9:9f:b0:5d:13:c1:5a:c3:e9:6a:fe: f4:9c:d8:78:b4:f4:51:3b:84:33:df:4b:c2:42:8a:2d:7f:9f: 74:64:00:b6:22:f2:54:a3:27:85:9d:15:bc:dc:e8:73:99:50: 97:12:88:80:22:f9:d5:66:47:e7:76:b4:e9:b4:ae:b7:e4:11: 5b:75:0b:93:9b:c7:8a:e7:2b:18:c5:a6:4f:b8:a1:26:72:dd: 5a:8b:77:bd:92:45:13:82:a9:10:05:79:51:15:27:a1:e7:c3: cb:14:ef:aa:ed:22:c6:df:23:ae:b6:36:ae:96:fb:ef:68:32: 36:9f:c0:99:b3:08:ff:c0:cb:65:cb:2f:37:5d:74:c4:bf:dd: 05:d8:36:db:85:bb:0c:26:26:9a:f1:e5:c4:1e:a1:d6:f5:ac: 87:d3:88:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07QtN2pCkRDpaT+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NGI5OTQyMzctMGRiMi00NjFiLTkwYTAtNDc5YzkyYjA5MjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQStl2gtZ99N3PpBH0IsqXp3wSo+B6DfVqyv FNdXKjK87i7BBAsUCNed8x06ozTBb0RV8wjg781aH2RrfC0zk9b4hCYMZ8Ro37Vv jY5T0R5nGAFnA6xdLU+dTbT7CihGj6L9DlvNxu1bk0v88x/NMLP28CIZ4TeOLnrj J7dpKn0Dr+H8xVg3fymeEiJMTvujWE9ixSAYHcocjLZ8sTqrY/HOBOHJeg0Y5bSQ GD1Tjp4KT14qdcMRv+mdyf8J5st305/lyEFF4G0mcXJMxvtaHZEJHEl3QrAViyzB /i2OMLm3f2aMFNESw3cU/ss6AxEVawNzINVUs4re/eWqJmBxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3R9uZv1xRjMLDH8wGt8X7wd8zNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI2MDRiMGYtY2U5Yy0z MjJhLWJhNmEtY2Q1YWIyZDAyYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOa+NyIQwWCqCDFfWUDcyTbSbS2F9ffuxUODpYFqtKBj7Ohc2eEKSTm lK86v9gmr98YlZ3WhZm2rLps1ffF5nTmHHD11A280Nl7iMAuntsM04ZXXLODxTuc PNJsE5Q6dpTZn7BdE8Faw+lq/vSc2Hi09FE7hDPfS8JCii1/n3RkALYi8lSjJ4Wd Fbzc6HOZUJcSiIAi+dVmR+d2tOm0rrfkEVt1C5Obx4rnKxjFpk+4oSZy3VqLd72S RROCqRAFeVEVJ6Hnw8sU76rtIsbfI662Nq6W++9oMjafwJmzCP/Ay2XLLzdddMS/ 3QXYNtuFuwwmJprx5cQeodb1rIfTiAM= -----END CERTIFICATE-----Generated at Sun Aug 24 04:25:21 2025 by rpki-client