$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497b680f-bde6-3f28-bc28-537370fa48a2.roa File: 497b680f-bde6-3f28-bc28-537370fa48a2.roa (raw, json) Hash identifier: cW1vmVOKuKoXf4bVlPsffu1xKefEqGlu9S064XUcY9E= Subject key identifier: 5D:96:9C:83:77:E5:ED:51:59:6C:9B:D6:51:5D:5F:20:B9:32:97:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4760473088CF108FEC980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497b680f-bde6-3f28-bc28-537370fa48a2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.209.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:76:04:73:08:8c:f1:08:fe:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2454f803-b954-4941-b143-fa89af9d7ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:2a:62:be:8c:81:6d:89:07:c0:77:0c:59: e1:81:b8:29:20:67:44:2f:32:1c:38:dd:46:2f:21: 40:be:44:2b:fa:45:da:fa:c1:3d:92:5f:8c:b3:7b: 45:9b:0a:99:42:48:6f:be:c3:10:cd:d2:e2:a1:d0: 4b:f7:6d:e3:c3:aa:d1:62:4a:fb:d3:de:19:3e:2a: fe:ca:df:25:fc:d2:58:b4:36:3d:69:2c:87:d7:6b: 59:20:6f:d6:e7:77:4d:86:27:ef:df:e9:78:1a:1b: 08:b6:f5:25:3d:44:5d:6e:db:a1:6f:a9:cc:21:bc: 9f:ed:5f:96:65:40:8c:88:f4:26:65:fe:c8:f0:0c: 58:e9:ae:7b:c1:81:5b:fe:c7:53:7a:41:fb:de:c2: af:2f:2a:38:c8:80:e5:79:a6:86:7f:76:c2:93:95: ab:7e:05:dc:a2:ba:e7:36:26:e0:18:05:53:c1:e5: 9e:0f:e9:0f:63:2b:a4:2d:24:ad:af:fa:70:f6:1c: ce:a4:6d:e3:43:4f:fa:a0:b5:ca:a0:87:46:a1:29: b5:25:c1:a5:7f:0b:52:3d:e2:c9:ca:34:3e:0f:bd: b7:93:1c:3f:ff:78:85:6c:33:64:98:99:dc:c2:92: 65:3f:d5:15:5f:3e:d5:0e:c1:c8:10:73:d9:c3:0f: 2a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:96:9C:83:77:E5:ED:51:59:6C:9B:D6:51:5D:5F:20:B9:32:97:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497b680f-bde6-3f28-bc28-537370fa48a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e3:d2:a9:f0:90:e6:1e:b5:30:b2:d9:3b:2b:6c:b7:8d:15: cf:d0:cb:23:f7:6d:cd:22:95:5f:6b:e6:43:02:d5:ad:50:d1: c3:0d:9d:7e:24:7b:85:87:b1:d8:83:81:ec:99:08:af:1b:e1: bd:bb:aa:a6:06:19:da:16:63:54:b0:cb:14:be:1d:8c:d5:3f: c3:03:01:1e:34:b2:c3:d9:7c:fd:2d:28:90:3d:8c:78:a8:b0: 25:03:15:a6:d0:4f:00:81:84:d2:3e:9c:8a:8e:01:f9:a9:8b: d9:57:a3:5e:45:e2:30:6e:1b:f3:97:e9:ad:ee:36:36:62:bd: d7:52:a9:13:de:02:ef:10:26:33:c9:ee:17:57:34:e8:3c:4c: 61:08:91:46:81:d5:a7:d4:b4:c0:ef:a3:96:5f:e4:2e:60:4b: 0d:ef:e8:07:db:74:7f:f3:86:c8:90:67:bb:0a:71:a7:ca:0d: 14:7c:23:b0:90:bc:25:2e:e8:77:44:8e:bb:76:08:aa:7c:61: 98:0e:34:7e:c4:ef:3a:56:5e:83:46:47:1d:f1:f8:ad:37:1b: 66:7c:6d:51:42:8f:48:f5:7c:3e:1f:98:b7:88:4f:90:10:17: 9f:93:51:4a:9e:d8:d3:e0:3d:7a:a6:bf:bc:42:f4:bc:54:eb: 7e:c1:9f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxHYEcwiM8Qj+yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjQ1NGY4MDMtYjk1NC00OTQxLWIxNDMtZmE4OWFmOWQ3Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKEqYr6MgW2JB8B3DFnhgbgpIGdELzIcON1G LyFAvkQr+kXa+sE9kl+Ms3tFmwqZQkhvvsMQzdLiodBL923jw6rRYkr7094ZPir+ yt8l/NJYtDY9aSyH12tZIG/W53dNhifv3+l4GhsItvUlPURdbtuhb6nMIbyf7V+W ZUCMiPQmZf7I8AxY6a57wYFb/sdTekH73sKvLyo4yIDleaaGf3bCk5WrfgXcorrn NibgGAVTweWeD+kPYyukLSStr/pw9hzOpG3jQ0/6oLXKoIdGoSm1JcGlfwtSPeLJ yjQ+D723kxw//3iFbDNkmJncwpJlP9UVXz7VDsHIEHPZww8q9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2WnIN35e1RWWyb1lFdXyC5Mpf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk3YjY4MGYtYmRlNi0z ZjI4LWJjMjgtNTM3MzcwZmE0OGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXj0qnwkOYetTCy2TsrbLeNFc/QyyP3bc0ilV9r5kMC1a1Q0cMNnX4k e4WHsdiDgeyZCK8b4b27qqYGGdoWY1SwyxS+HYzVP8MDAR40ssPZfP0tKJA9jHio sCUDFabQTwCBhNI+nIqOAfmpi9lXo15F4jBuG/OX6a3uNjZivddSqRPeAu8QJjPJ 7hdXNOg8TGEIkUaB1afUtMDvo5Zf5C5gSw3v6AfbdH/zhsiQZ7sKcafKDRR8I7CQ vCUu6HdEjrt2CKp8YZgONH7E7zpWXoNGRx3x+K03G2Z8bVFCj0j1fD4fmLeIT5AQ F5+TUUqe2NPgPXqmv7xC9LxU637Bn2s= -----END CERTIFICATE-----Generated at Sun Aug 24 09:33:23 2025 by rpki-client