$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab3cbc1-3f2a-3de1-8913-f3b610965efa.roa File: 4ab3cbc1-3f2a-3de1-8913-f3b610965efa.roa (raw, json) Hash identifier: BJ0qhokTCHySZ+Gq4i+6zEDMODFNx6SwxoFHf3gXoXg= Subject key identifier: 9C:F4:18:D1:ED:59:7E:06:BD:86:48:67:EE:7A:B1:4B:34:2B:9F:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC389C945A28445A9CA6000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab3cbc1-3f2a-3de1-8913-f3b610965efa.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.29.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:89:c9:45:a2:84:45:a9:ca:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=30085870-c176-41e0-94ba-d49abcccfe8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1e:43:4d:0f:bc:a5:e6:59:83:1e:ed:08:9a: 4c:4f:ef:ac:ef:77:39:9c:dc:39:89:a5:6a:03:f4: f3:52:8e:ce:4a:18:71:05:63:e4:9c:5a:7b:69:d5: f0:77:54:ad:3f:c7:97:2d:7e:2d:4e:31:e2:d6:80: c4:eb:23:6b:99:0a:85:ba:4b:91:6e:46:e5:d9:42: b2:6f:36:fb:1e:cd:90:16:18:81:62:e2:c6:a8:f5: 9e:a5:34:ee:96:dc:36:3d:d1:f9:22:87:1b:5e:86: 79:68:3b:e6:ef:0b:60:66:95:fe:0b:c2:b3:e6:dc: f0:53:7f:3b:23:92:7d:04:04:04:0e:8e:35:10:d0: 78:38:fb:cf:f1:da:cd:06:3e:c2:5b:09:4f:36:f4: 68:90:e9:b8:d9:1f:5c:b3:5d:20:05:25:f0:a8:af: 17:4f:34:e6:b8:62:53:c5:96:b2:6e:5a:59:e2:50: d5:b7:e1:0b:66:20:b2:11:3c:c1:06:d0:d8:3f:6c: d6:67:2c:87:9e:a7:92:8b:10:98:66:13:f2:d8:a2: a7:4f:d0:3f:ea:44:bc:26:58:dd:e5:5a:c5:07:13: 6c:bc:d5:fc:a4:c9:00:47:c0:f4:84:7d:34:d0:e6: 09:5c:e4:4a:28:6b:f8:60:8c:65:a5:8a:83:f4:2b: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F4:18:D1:ED:59:7E:06:BD:86:48:67:EE:7A:B1:4B:34:2B:9F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab3cbc1-3f2a-3de1-8913-f3b610965efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:52:da:d7:b7:0c:ab:69:be:89:d5:10:e0:03:3e:bf:eb:ab: 19:c5:f3:26:06:4f:c1:4d:aa:a3:0a:2e:c4:18:69:b9:af:31: 45:c7:5a:09:ca:b2:76:c7:e7:b3:4a:d8:37:a5:f6:26:85:4f: 1c:b3:c6:ef:d2:e5:67:4d:9c:4a:69:36:bc:74:ee:67:15:cd: 28:c5:7c:3c:46:2b:db:11:53:9a:96:bb:37:f4:3e:63:6a:a3: 82:fe:44:04:39:3a:92:7b:4b:75:72:f4:8c:14:39:87:dd:6d: 2d:60:d1:2c:53:1e:eb:e2:84:d1:fc:a8:48:b6:fe:02:a4:be: b0:43:bf:f9:85:fa:ae:a6:e0:cb:ee:72:2b:af:5a:38:04:c9: 47:93:11:1e:f7:9f:65:9b:de:11:f1:66:95:85:b3:61:dc:66: 6a:e1:40:7d:88:2e:53:2f:7e:69:00:ba:0c:61:30:de:8e:0f: 77:5c:2e:7d:7b:a9:88:97:bc:bd:da:37:aa:04:f6:09:a4:0f: bb:30:5e:19:96:27:69:e4:f2:6d:df:d7:f0:17:78:45:e7:a4: 75:4d:ee:b3:dc:10:0a:87:c5:3a:3d:1d:f2:4d:e0:ef:bb:7b: 95:49:81:6d:eb:bb:98:e8:e7:d2:52:23:96:24:56:da:36:64: d9:5f:4b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw4nJRaKERanKYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MzAwODU4NzAtYzE3Ni00MWUwLTk0YmEtZDQ5YWJjY2NmZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B5DTQ+8peZZgx7tCJpMT++s73c5nNw5iaVq A/TzUo7OShhxBWPknFp7adXwd1StP8eXLX4tTjHi1oDE6yNrmQqFukuRbkbl2UKy bzb7Hs2QFhiBYuLGqPWepTTultw2PdH5IocbXoZ5aDvm7wtgZpX+C8Kz5tzwU387 I5J9BAQEDo41ENB4OPvP8drNBj7CWwlPNvRokOm42R9cs10gBSXwqK8XTzTmuGJT xZayblpZ4lDVt+ELZiCyETzBBtDYP2zWZyyHnqeSixCYZhPy2KKnT9A/6kS8Jljd 5VrFBxNsvNX8pMkAR8D0hH000OYJXORKKGv4YIxlpYqD9CvyEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz0GNHtWX4GvYZIZ+56sUs0K5/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFiM2NiYzEtM2YyYS0z ZGUxLTg5MTMtZjNiNjEwOTY1ZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSR2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFS2te3DKtpvonVEOADPr/rqxnF8yYGT8FNqqMKLsQYabmvMUXHWgnK snbH57NK2Del9iaFTxyzxu/S5WdNnEppNrx07mcVzSjFfDxGK9sRU5qWuzf0PmNq o4L+RAQ5OpJ7S3Vy9IwUOYfdbS1g0SxTHuvihNH8qEi2/gKkvrBDv/mF+q6m4Mvu ciuvWjgEyUeTER73n2Wb3hHxZpWFs2HcZmrhQH2ILlMvfmkAugxhMN6OD3dcLn17 qYiXvL3aN6oE9gmkD7swXhmWJ2nk8m3f1/AXeEXnpHVN7rPcEAqHxTo9HfJN4O+7 e5VJgW3ru5jo59JSI5YkVto2ZNlfS28= -----END CERTIFICATE-----Generated at Sun Aug 24 05:46:21 2025 by rpki-client