$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a645d8-9300-33a0-984a-43056a5f6a5b.roa File: 57a645d8-9300-33a0-984a-43056a5f6a5b.roa (raw, json) Hash identifier: BpIVsINMzBLbh9gveXOYBDKwsb3ExzyWr2uZDV7Vn5o= Subject key identifier: 70:83:77:57:76:4D:F1:2C:EA:29:52:60:C9:60:B0:CD:54:D3:0F:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC28E7EA520AED9D84B8D2C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a645d8-9300-33a0-984a-43056a5f6a5b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.72.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:8e:7e:a5:20:ae:d9:d8:4b:8d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=53d41a20-9ac6-46af-80af-f7ecf151ad10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:16:28:6c:be:a5:3e:93:79:9d:59:ea:f3: df:83:4c:82:c8:6b:fe:e1:19:7b:92:f0:f9:61:0b: af:d1:1d:bd:7b:b0:24:24:59:13:af:ff:56:74:a1: 78:e3:11:78:64:c6:4f:8b:01:89:89:e0:3c:d0:92: 30:6a:84:fd:9c:67:2a:32:cf:7a:f9:f8:ab:4d:3e: 64:86:15:01:10:a8:94:5a:bf:a4:5a:87:99:ca:6c: 85:c4:e2:6b:d5:29:46:8e:4a:b8:28:f0:1e:cc:2c: 6e:7f:c0:50:43:f0:f7:7f:d5:c6:e8:0c:71:33:14: 4c:00:b3:cf:15:37:74:b8:49:cd:0e:d6:67:5f:86: 4e:91:ca:a8:1c:47:a4:93:84:0f:29:a2:db:7f:c3: a9:dd:ec:33:d9:3b:95:4c:6e:d0:c0:e1:b0:c9:2b: f9:56:4e:83:77:01:c6:c2:80:d7:71:8c:60:23:eb: 85:7f:64:61:1c:51:42:fc:d6:53:4b:d7:1d:ce:74: 82:74:b9:80:80:03:52:6d:92:b4:ae:d7:73:a4:28: 51:65:3d:f5:6f:ce:66:8a:7a:93:c8:b0:e1:0d:8a: 4b:c1:f0:9c:51:54:bb:f8:a0:8c:14:33:2c:a1:2b: bd:dc:87:a3:08:4b:85:08:73:82:df:f2:91:d7:12: 30:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:77:57:76:4D:F1:2C:EA:29:52:60:C9:60:B0:CD:54:D3:0F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57a645d8-9300-33a0-984a-43056a5f6a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.72.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:4e:15:dd:55:bc:e5:28:92:13:91:d0:05:1c:90:61:dd:5d: 67:ec:c2:a8:4f:ea:82:86:0e:5d:81:f6:c5:75:b9:fe:3f:02: cf:7b:83:2f:9e:18:0d:12:9a:4a:5b:24:bb:b0:89:0c:4f:3e: b9:53:cf:e0:be:2c:d6:32:c7:1c:61:03:87:7f:52:af:c8:03: 3f:fb:81:ef:9e:51:cd:e4:fc:23:4d:9b:be:f7:c2:bd:a0:b9: 02:aa:7c:86:36:54:a7:ee:c3:20:e8:d6:01:91:20:c2:28:1a: e1:97:74:7e:f9:53:69:7e:48:66:15:00:ac:9e:7a:d0:52:af: 72:1f:c8:29:20:76:28:a0:c1:f1:16:3a:db:47:09:9f:b7:08: 61:38:b9:b1:a7:37:e9:0d:a5:4c:35:4f:c0:36:63:c9:d1:fe: a6:ca:f4:1b:5d:64:44:49:83:72:c3:7e:12:64:21:16:3a:8c: 79:25:64:ea:61:37:4b:64:fb:ed:6d:5f:10:63:33:4c:6b:ea: 04:47:5e:8d:24:f3:d3:e8:55:58:d0:2b:6f:d3:60:9e:9b:67: 0b:88:15:6c:d9:2b:77:df:f1:7a:57:4d:21:d4:7e:a9:41:9c: d6:1c:ce:6c:5c:3d:89:b9:3d:3f:03:5e:6f:80:83:b4:08:f1: b3:19:80:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswo5+pSCu2dhLjSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTNkNDFhMjAtOWFjNi00NmFmLTgwYWYtZjdlY2YxNTFhZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgcWKGy+pT6TeZ1Z6vPfg0yCyGv+4Rl7kvD5 YQuv0R29e7AkJFkTr/9WdKF44xF4ZMZPiwGJieA80JIwaoT9nGcqMs96+firTT5k hhUBEKiUWr+kWoeZymyFxOJr1SlGjkq4KPAezCxuf8BQQ/D3f9XG6AxxMxRMALPP FTd0uEnNDtZnX4ZOkcqoHEekk4QPKaLbf8Op3ewz2TuVTG7QwOGwySv5Vk6DdwHG woDXcYxgI+uFf2RhHFFC/NZTS9cdznSCdLmAgANSbZK0rtdzpChRZT31b85minqT yLDhDYpLwfCcUVS7+KCMFDMsoSu93IejCEuFCHOC3/KR1xIwmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCDd1d2TfEs6ilSYMlgsM1U0w8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTdhNjQ1ZDgtOTMwMC0z M2EwLTk4NGEtNDMwNTZhNWY2YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM1OFd1VvOUokhOR0AUckGHdXWfswqhP6oKGDl2B9sV1uf4/As97gy+e GA0SmkpbJLuwiQxPPrlTz+C+LNYyxxxhA4d/Uq/IAz/7ge+eUc3k/CNNm773wr2g uQKqfIY2VKfuwyDo1gGRIMIoGuGXdH75U2l+SGYVAKyeetBSr3IfyCkgdiigwfEW OttHCZ+3CGE4ubGnN+kNpUw1T8A2Y8nR/qbK9BtdZERJg3LDfhJkIRY6jHklZOph N0tk++1tXxBjM0xr6gRHXo0k89PoVVjQK2/TYJ6bZwuIFWzZK3ff8XpXTSHUfqlB nNYczmxcPYm5PT8DXm+Ag7QI8bMZgDg= -----END CERTIFICATE-----Generated at Sun Aug 24 08:08:29 2025 by rpki-client