$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aae9ba5-3cd4-39e2-b3c8-5f2fe6e8be7d.roa File: 4aae9ba5-3cd4-39e2-b3c8-5f2fe6e8be7d.roa (raw, json) Hash identifier: 5Gqc/m1T+DaKtxDUfcLtn82LmuNwWUrDIdslEn6ssKg= Subject key identifier: 16:B2:85:93:91:46:F1:55:37:4C:E4:CA:03:30:B9:F6:FC:82:E2:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC38DB88090F26A82E53500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aae9ba5-3cd4-39e2-b3c8-5f2fe6e8be7d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.33.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:8d:b8:80:90:f2:6a:82:e5:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a5cf9e03-e4ee-4c21-9888-b9e8f86a0bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:33:c6:1d:d7:59:7b:88:e9:df:c9:5e:86: 66:ac:3e:2c:d1:28:7d:19:f2:fb:64:f8:de:44:51: 9a:5f:0c:54:1b:77:39:bf:b6:f4:1b:a5:48:52:24: d2:35:57:c3:c0:3f:c3:b5:7b:9c:37:8e:2d:41:4d: a3:6b:d1:c1:e7:f2:b5:77:29:3a:43:ca:ef:f1:6d: d1:c6:f9:72:a8:4a:69:f9:d8:10:0c:c8:1a:fb:91: 23:9b:98:6a:b4:a0:ad:76:1c:d4:4b:4a:20:84:ad: c6:83:2b:60:68:d0:f7:f1:a5:15:04:2b:a1:b0:8d: b0:35:14:46:ed:ac:58:26:83:69:66:2f:0e:07:30: 9f:93:20:89:69:22:d1:fb:f6:c8:16:93:c3:28:26: 4c:c8:2a:10:73:aa:4d:8a:7b:1c:14:08:d7:95:b1: f3:25:e9:7d:77:9c:ad:a3:dc:52:5d:15:1a:c7:ea: 2f:0d:ed:b6:66:b0:d1:22:8d:7c:f2:70:79:29:96: dd:e5:34:15:e6:52:1c:ab:e8:80:13:e5:dc:d1:f1: c1:9a:64:89:65:ea:b4:f6:fc:e7:b8:64:24:ab:5b: 04:5b:ac:d8:da:c0:31:01:bd:63:c2:87:b2:20:9e: fc:34:3b:87:ce:a3:44:28:58:07:cf:8d:18:b4:9f: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B2:85:93:91:46:F1:55:37:4C:E4:CA:03:30:B9:F6:FC:82:E2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4aae9ba5-3cd4-39e2-b3c8-5f2fe6e8be7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4c:31:79:3f:4a:6e:7c:e2:5d:fc:f7:c2:95:d4:c2:d4:24: 8c:5f:fa:18:e1:8d:11:22:f2:75:ca:48:ee:69:0f:c7:4f:85: 03:78:7d:64:10:63:fe:eb:ef:f9:4d:83:d7:b1:af:68:83:23: 30:61:fe:b2:0b:c0:83:80:98:74:51:a9:31:95:62:b9:94:63: 09:fa:99:3e:d2:ff:82:6d:0c:ae:77:2b:97:cf:7a:04:d7:88: fe:a8:84:5d:d3:9b:f9:70:8e:e4:9e:e5:f8:b7:43:d2:5b:8c: 8d:c0:9f:53:53:8b:b3:01:6f:53:2a:d5:99:f3:9e:dc:7b:37: da:03:71:a9:13:5e:65:8a:e1:be:45:08:52:59:53:b5:4e:6c: a5:91:f1:dd:13:da:34:1e:df:44:73:c0:b4:b5:61:47:bb:f8: d0:dc:fe:1a:a3:62:11:7a:cf:0d:20:bc:24:b7:c1:b9:28:27: 26:c8:df:b7:fe:b6:0e:9b:2a:12:12:c5:61:ff:35:c3:af:ac: 88:c9:4d:39:51:66:06:f1:7e:f2:7c:a1:cc:93:e0:aa:f4:71: 36:dc:50:3b:7f:ba:52:17:44:4a:a7:b3:ee:52:ec:1a:d9:24: a9:a8:2a:3e:04:ed:27:8b:a0:36:6c:3b:b5:a0:85:ef:b1:b1: 54:31:ca:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw424gJDyaoLlNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTVjZjllMDMtZTRlZS00YzIxLTk4ODgtYjllOGY4NmEwYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA4zxh3XWXuI6d/JXoZmrD4s0Sh9GfL7ZPje RFGaXwxUG3c5v7b0G6VIUiTSNVfDwD/DtXucN44tQU2ja9HB5/K1dyk6Q8rv8W3R xvlyqEpp+dgQDMga+5Ejm5hqtKCtdhzUS0oghK3GgytgaND38aUVBCuhsI2wNRRG 7axYJoNpZi8OBzCfkyCJaSLR+/bIFpPDKCZMyCoQc6pNinscFAjXlbHzJel9d5yt o9xSXRUax+ovDe22ZrDRIo188nB5KZbd5TQV5lIcq+iAE+Xc0fHBmmSJZeq09vzn uGQkq1sEW6zY2sAxAb1jwoeyIJ78NDuHzqNEKFgHz40YtJ8n6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBayhZORRvFVN0zkygMwufb8guINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFhZTliYTUtM2NkNC0z OWUyLWIzYzgtNWYyZmU2ZThiZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlMMXk/Sm584l3898KV1MLUJIxf+hjhjREi8nXKSO5pD8dPhQN4fWQQ Y/7r7/lNg9exr2iDIzBh/rILwIOAmHRRqTGVYrmUYwn6mT7S/4JtDK53K5fPegTX iP6ohF3Tm/lwjuSe5fi3Q9JbjI3An1NTi7MBb1Mq1Znzntx7N9oDcakTXmWK4b5F CFJZU7VObKWR8d0T2jQe30RzwLS1YUe7+NDc/hqjYhF6zw0gvCS3wbkoJybI37f+ tg6bKhISxWH/NcOvrIjJTTlRZgbxfvJ8ocyT4Kr0cTbcUDt/ulIXREqns+5S7BrZ JKmoKj4E7SeLoDZsO7Wghe+xsVQxyvM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:02:17 2025 by rpki-client