$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/527436f5-a529-3763-92b3-3ac7c4c4bf21.roa File: 527436f5-a529-3763-92b3-3ac7c4c4bf21.roa (raw, json) Hash identifier: B7uYh9CmFSlmh0kEW3Dkf1OOnMXZpsJUWjhki1b7uoI= Subject key identifier: D2:BF:9A:A0:82:72:A4:B4:D2:69:41:AE:22:C2:EC:FC:3A:78:D5:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC25D5B3B4A72C23B9C6680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/527436f5-a529-3763-92b3-3ac7c4c4bf21.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.168.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:5d:5b:3b:4a:72:c2:3b:9c:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a9bf127f-2ed0-41ca-93f2-2e411fb8d36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:4e:bf:c9:13:10:96:48:f8:67:34:46:d8: eb:fa:1c:77:be:2c:9c:e5:eb:d8:27:89:da:35:91: 4e:c5:63:9c:40:44:be:a0:24:28:6e:7f:93:4f:09: 53:2c:7b:1f:69:dc:32:9b:12:95:0d:2d:19:55:1e: 99:1a:85:cb:47:e8:db:bd:af:1d:f4:dc:30:18:14: ef:cc:fe:aa:9a:6b:35:5e:05:a8:5f:44:87:e9:c5: 77:d9:8a:57:3e:b2:88:24:46:2a:b8:60:7c:4d:b9: 30:00:f0:60:9e:0b:18:d3:9b:3f:1d:f7:45:e9:6c: 7d:d5:a6:e1:f2:fa:c6:5c:05:d8:86:ab:b9:92:0a: 69:80:66:93:2e:ea:bf:f8:82:47:3f:ab:97:dd:28: d3:6b:12:f8:9c:48:d7:2d:5c:3d:40:01:f2:f7:2e: 73:62:71:ca:9e:fc:2a:aa:01:9a:36:a4:d0:3c:26: a2:0e:27:8f:b6:7b:f2:24:49:54:64:47:28:20:d0: ae:3c:28:06:98:d9:32:ef:61:1b:9c:b7:c3:67:4a: 3a:28:d5:ab:79:c2:37:d4:6d:05:4f:e6:df:8a:86: d0:75:d0:5c:9f:59:96:5f:82:2e:3a:7a:54:4c:d8: ef:92:0c:b2:c1:49:d3:48:0b:fb:83:24:04:08:49: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BF:9A:A0:82:72:A4:B4:D2:69:41:AE:22:C2:EC:FC:3A:78:D5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/527436f5-a529-3763-92b3-3ac7c4c4bf21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.168.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3a:46:1e:f6:50:da:fe:a1:5c:db:33:a8:d4:63:3e:2e:04: 1d:99:e1:61:2d:77:78:69:ba:20:92:11:f0:5c:9b:41:28:a2: 1f:ac:12:b2:e4:cc:80:6a:22:dd:cb:00:9d:4c:6a:f3:84:08: fa:c3:0b:c2:db:dc:a0:d7:da:ea:42:00:72:97:42:e7:fd:dd: 97:13:ff:6b:89:c9:27:d9:ac:9b:e1:90:e7:98:d2:06:36:ab: 7f:50:44:0a:42:06:70:9b:52:68:59:08:07:63:64:54:6e:c4: 0e:2b:20:f6:8b:09:b6:40:8d:e3:5b:b6:4b:bc:63:80:43:1d: bc:7d:81:df:f0:18:1e:e8:bf:3b:99:3c:7e:72:1e:b0:4d:2b: 01:08:1a:8d:83:57:72:ae:d0:45:ed:27:90:5c:7c:dd:44:9f: f8:f1:69:da:54:11:74:83:c8:ec:8d:72:19:7b:f9:5b:6b:3d: fd:bb:3c:d8:b6:1b:67:ec:0b:b4:aa:3c:30:3f:50:e2:b9:61: e6:94:01:18:a7:10:22:ed:bd:ee:35:46:1c:c8:ca:f1:43:a1: 18:01:c4:bb:c8:94:e7:63:a5:79:28:5a:df:4d:cf:96:ab:80: f8:23:d3:c2:49:23:65:da:f3:c8:37:ad:e3:5f:d7:fb:e6:b6: 92:77:73:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswl1bO0pywjucZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTliZjEyN2YtMmVkMC00MWNhLTkzZjItMmU0MTFmYjhkMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wBOv8kTEJZI+Gc0Rtjr+hx3viyc5evYJ4na NZFOxWOcQES+oCQobn+TTwlTLHsfadwymxKVDS0ZVR6ZGoXLR+jbva8d9NwwGBTv zP6qmms1XgWoX0SH6cV32YpXPrKIJEYquGB8TbkwAPBgngsY05s/HfdF6Wx91abh 8vrGXAXYhqu5kgppgGaTLuq/+IJHP6uX3SjTaxL4nEjXLVw9QAHy9y5zYnHKnvwq qgGaNqTQPCaiDiePtnvyJElUZEcoINCuPCgGmNky72EbnLfDZ0o6KNWrecI31G0F T+bfiobQddBcn1mWX4IuOnpUTNjvkgyywUnTSAv7gyQECElFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK/mqCCcqS00mlBriLC7Pw6eNWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTI3NDM2ZjUtYTUyOS0z NzYzLTkyYjMtM2FjN2M0YzRiZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII6Rh72UNr+oVzbM6jUYz4uBB2Z4WEtd3hpuiCSEfBcm0Eooh+sErLk zIBqIt3LAJ1MavOECPrDC8Lb3KDX2upCAHKXQuf93ZcT/2uJySfZrJvhkOeY0gY2 q39QRApCBnCbUmhZCAdjZFRuxA4rIPaLCbZAjeNbtku8Y4BDHbx9gd/wGB7ovzuZ PH5yHrBNKwEIGo2DV3Ku0EXtJ5BcfN1En/jxadpUEXSDyOyNchl7+VtrPf27PNi2 G2fsC7SqPDA/UOK5YeaUARinECLtve41RhzIyvFDoRgBxLvIlOdjpXkoWt9Nz5ar gPgj08JJI2Xa88g3reNf1/vmtpJ3c0M= -----END CERTIFICATE-----Generated at Sat Aug 23 23:11:26 2025 by rpki-client