$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4286797d-0258-3f64-a55a-8415fc6699db.roa File: 4286797d-0258-3f64-a55a-8415fc6699db.roa (raw, json) Hash identifier: Pyo9ylkXCeQQFxhYBs/IuE2RaDV5Y+DCTQ5OXE5dOKA= Subject key identifier: A3:36:42:59:EF:D9:68:24:79:81:27:03:B7:82:9C:9C:8F:64:F1:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC268C1E667ED9F3D2A5B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4286797d-0258-3f64-a55a-8415fc6699db.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.209.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:68:c1:e6:67:ed:9f:3d:2a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=af1903b9-475c-435b-aa3d-a45dd6c011dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e6:9e:92:46:d8:79:77:cb:39:9a:31:6f:dc: e8:20:a6:a9:e2:de:54:42:1f:e9:cb:f8:19:59:5b: 9d:d7:49:27:d8:10:3d:62:ef:21:3d:cd:bd:c2:eb: a5:e8:db:fc:9e:39:4a:02:6d:a0:25:3f:fc:b3:f3: 92:d6:87:3d:4a:83:4e:19:d0:82:71:09:af:d5:0e: b1:33:74:24:3b:8b:82:e5:c4:8f:1d:fc:1b:36:e0: 25:f4:51:62:4b:63:ca:84:3a:2a:f7:fb:b7:fa:f8: 06:01:f3:c4:68:ab:56:7a:1a:52:d7:cb:bd:28:af: e5:db:33:26:8e:4e:09:3c:de:d2:51:9f:27:ba:c9: 95:66:2c:5d:51:4b:c4:2a:82:01:3d:29:3f:a9:fd: 83:0e:1b:5c:03:dd:d4:45:30:23:a4:5e:1e:36:80: 8f:c8:95:53:e3:ff:88:c8:74:06:50:a2:52:32:c8: a5:1a:bd:7f:c0:2e:49:55:f6:29:23:8e:08:06:13: 41:c1:07:eb:f3:40:4b:f2:2b:5d:7b:1d:12:1b:16: d1:53:ee:c7:a3:55:f5:5d:cf:74:10:63:bd:c6:31: 77:1e:07:bd:19:01:93:e6:36:d6:76:c1:be:d4:f5: ca:32:f2:a2:f6:b1:60:9a:d3:f5:09:34:0f:14:72: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:36:42:59:EF:D9:68:24:79:81:27:03:B7:82:9C:9C:8F:64:F1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4286797d-0258-3f64-a55a-8415fc6699db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:59:a7:bf:86:57:3d:88:a1:f9:b2:14:63:92:b9:f0:ef:ae: 8f:10:44:c4:9a:db:b2:83:b7:77:83:19:60:dc:f0:51:51:89: db:b9:cd:ce:5c:d0:17:91:b2:7c:1e:81:0f:6b:08:f4:ff:07: 06:13:93:69:13:36:f8:ce:a3:03:de:97:5c:42:22:25:98:7c: 7b:32:2e:42:9d:b1:07:17:69:1e:a0:b0:02:12:25:eb:b3:89: 9e:da:34:fa:70:53:c7:2d:7e:5a:7a:28:28:f2:e9:a2:e1:48: c9:c0:0b:be:ca:42:9f:cb:34:63:6b:e6:49:30:bb:cc:84:61: 5c:29:3d:9e:28:82:49:52:4b:f2:a8:a9:6f:59:c7:44:97:26: 91:17:95:1a:86:00:ad:69:00:39:b3:8f:19:42:6d:ce:59:ad: 52:dd:db:19:5b:31:44:d9:69:f2:df:a5:88:25:e2:fc:8a:5e: fc:cc:2b:43:23:3f:56:32:35:9c:1f:d4:f3:df:a8:a2:56:5e: 76:1d:69:50:8c:23:63:63:1a:ac:ce:82:21:a7:31:82:1d:3d: 7b:8a:0c:a5:e9:87:08:a2:15:01:e9:cd:2a:6c:4c:fc:05:6b: b9:42:67:8d:4c:d9:32:70:27:fd:ac:1d:77:fb:6f:fe:0d:f4: 3c:3b:d5:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswmjB5mftnz0qW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWYxOTAzYjktNDc1Yy00MzViLWFhM2QtYTQ1ZGQ2YzAxMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+aekkbYeXfLOZoxb9zoIKap4t5UQh/py/gZ WVud10kn2BA9Yu8hPc29wuul6Nv8njlKAm2gJT/8s/OS1oc9SoNOGdCCcQmv1Q6x M3QkO4uC5cSPHfwbNuAl9FFiS2PKhDoq9/u3+vgGAfPEaKtWehpS18u9KK/l2zMm jk4JPN7SUZ8nusmVZixdUUvEKoIBPSk/qf2DDhtcA93URTAjpF4eNoCPyJVT4/+I yHQGUKJSMsilGr1/wC5JVfYpI44IBhNBwQfr80BL8itdex0SGxbRU+7Ho1X1Xc90 EGO9xjF3Hge9GQGT5jbWdsG+1PXKMvKi9rFgmtP1CTQPFHLwawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM2Qlnv2WgkeYEnA7eCnJyPZPGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI4Njc5N2QtMDI1OC0z ZjY0LWE1NWEtODQxNWZjNjY5OWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBZp7+GVz2IofmyFGOSufDvro8QRMSa27KDt3eDGWDc8FFRidu5zc5c 0BeRsnwegQ9rCPT/BwYTk2kTNvjOowPel1xCIiWYfHsyLkKdsQcXaR6gsAISJeuz iZ7aNPpwU8ctflp6KCjy6aLhSMnAC77KQp/LNGNr5kkwu8yEYVwpPZ4ogklSS/Ko qW9Zx0SXJpEXlRqGAK1pADmzjxlCbc5ZrVLd2xlbMUTZafLfpYgl4vyKXvzMK0Mj P1YyNZwf1PPfqKJWXnYdaVCMI2NjGqzOgiGnMYIdPXuKDKXphwiiFQHpzSpsTPwF a7lCZ41M2TJwJ/2sHXf7b/4N9Dw71Yw= -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:24 2025 by rpki-client