$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b84a18e-d0cf-38a9-bda9-def4b96d26bb.roa File: 4b84a18e-d0cf-38a9-bda9-def4b96d26bb.roa (raw, json) Hash identifier: QwnAhlbqXjmxi+mXr2y7YOBW4b6JWEanp9PX5d3ULCg= Subject key identifier: 03:31:A8:EA:81:19:97:52:35:B7:83:4E:43:AE:B3:2E:30:72:49:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC313E9395F0D8EDE1B1880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b84a18e-d0cf-38a9-bda9-def4b96d26bb.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.223.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:13:e9:39:5f:0d:8e:de:1b:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e9ee3f84-70da-4b4d-9230-61188e161d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:b7:f5:a2:bd:ae:40:a3:62:9b:3f:85:8c: e4:79:80:ed:d9:fb:9d:e3:e7:98:3f:1a:b1:4b:c1: f3:cc:cf:29:c8:c5:8d:10:a4:f6:77:7f:88:86:0f: 0f:9c:b7:0e:59:61:8a:c6:a5:39:f1:9c:ec:5d:b3: f6:12:7e:ef:b7:cc:da:d5:f5:f8:5d:ff:f8:29:3c: 2e:9f:3f:0c:22:20:b0:5f:04:48:f5:40:9c:2a:19: b4:2a:00:15:06:23:cb:01:09:ec:1d:2b:aa:42:24: 46:75:30:15:a7:f3:08:06:c2:05:9d:c2:f6:de:47: 7f:55:0b:ec:c0:63:68:39:41:68:f6:53:ce:8f:1c: 35:02:ff:fe:fd:5f:62:55:5a:eb:fa:cb:e0:67:8e: 85:cc:e8:6c:85:cf:a8:d3:ae:9e:98:60:62:87:cf: 98:de:fd:7c:66:44:5b:5f:b4:5d:4c:21:4b:af:98: a8:41:d8:5e:0a:e7:f6:28:65:f0:22:db:32:eb:44: 45:be:cc:ee:b1:45:16:61:09:6f:d3:08:bc:91:5c: 74:83:65:e9:2c:e0:29:5d:f3:c9:74:cd:3e:ac:f9: a8:32:c6:cb:e3:6d:85:fb:2e:cd:bb:63:29:78:4d: ca:b4:6f:70:03:ee:0e:8c:34:d2:dd:dd:d7:26:8a: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:A8:EA:81:19:97:52:35:B7:83:4E:43:AE:B3:2E:30:72:49:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b84a18e-d0cf-38a9-bda9-def4b96d26bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:d2:1b:ed:c8:16:6a:84:ae:ec:7e:7d:f2:2d:ba:70:8d:c8: 72:ec:05:48:d2:2e:2d:09:e4:fc:34:72:f9:fc:86:b4:33:1f: 3b:22:29:45:be:06:32:4e:b6:ab:f7:25:8c:d2:a4:3c:8a:76: 62:1b:ee:2e:76:12:88:7a:cd:69:31:3d:2f:cd:d2:5c:9d:d4: 9e:21:57:b0:7f:6c:ef:84:58:6e:bf:53:84:59:5a:fd:a0:d9: c6:86:8e:32:c0:1c:60:3a:a0:f1:d0:b1:2b:d9:87:6a:8a:cf: 0f:74:64:bd:cc:97:ce:62:be:9b:4b:f2:68:e5:61:94:e8:16: 32:e7:99:6b:fd:df:b3:80:ad:9e:a5:bb:66:cc:78:bf:3d:27: 36:bc:78:f5:91:8e:4e:fe:aa:26:64:36:c7:d4:2c:2c:17:2f: 22:97:d5:98:32:25:e0:7b:85:70:54:4b:59:0a:20:11:e2:77: 1e:94:0a:5b:8a:85:7b:49:ba:16:d6:cb:47:46:1f:cf:84:61: 02:91:60:58:65:b8:0f:96:4d:da:2a:23:48:ef:70:09:17:06: 47:55:4e:65:68:42:ba:cd:97:f6:cc:53:34:24:6c:f7:47:fc: b7:88:25:b7:fc:b2:50:ae:2f:f6:8a:8c:d3:90:d5:a8:9c:fc: fc:4c:5a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswxPpOV8Njt4bGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTllZTNmODQtNzBkYS00YjRkLTkyMzAtNjExODhlMTYxZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMe39aK9rkCjYps/hYzkeYDt2fud4+eYPxqx S8HzzM8pyMWNEKT2d3+Ihg8PnLcOWWGKxqU58ZzsXbP2En7vt8za1fX4Xf/4KTwu nz8MIiCwXwRI9UCcKhm0KgAVBiPLAQnsHSuqQiRGdTAVp/MIBsIFncL23kd/VQvs wGNoOUFo9lPOjxw1Av/+/V9iVVrr+svgZ46FzOhshc+o066emGBih8+Y3v18ZkRb X7RdTCFLr5ioQdheCuf2KGXwItsy60RFvszusUUWYQlv0wi8kVx0g2XpLOApXfPJ dM0+rPmoMsbL422F+y7Nu2MpeE3KtG9wA+4OjDTS3d3XJoonBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMxqOqBGZdSNbeDTkOusy4wcknFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI4NGExOGUtZDBjZi0z OGE5LWJkYTktZGVmNGI5NmQyNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASd/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnSG+3IFmqErux+ffItunCNyHLsBUjSLi0J5Pw0cvn8hrQzHzsiKUW+ BjJOtqv3JYzSpDyKdmIb7i52Eoh6zWkxPS/N0lyd1J4hV7B/bO+EWG6/U4RZWv2g 2caGjjLAHGA6oPHQsSvZh2qKzw90ZL3Ml85ivptL8mjlYZToFjLnmWv937OArZ6l u2bMeL89Jza8ePWRjk7+qiZkNsfULCwXLyKX1ZgyJeB7hXBUS1kKIBHidx6UCluK hXtJuhbWy0dGH8+EYQKRYFhluA+WTdoqI0jvcAkXBkdVTmVoQrrNl/bMUzQkbPdH /LeIJbf8slCuL/aKjNOQ1aic/PxMWmA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:06 2025 by rpki-client