$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57e5ce28-8f00-3b37-9959-7a906017fd5e.roa File: 57e5ce28-8f00-3b37-9959-7a906017fd5e.roa (raw, json) Hash identifier: 4JtKWIuUTXZOY65M7F+eRrJkZT7s3rtv7IkJR08RREU= Subject key identifier: 0A:11:CA:27:AB:42:B9:78:2B:43:32:1F:54:AE:11:07:BD:F2:9D:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3A96B2F190A30A9971280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57e5ce28-8f00-3b37-9959-7a906017fd5e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.198.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:a9:6b:2f:19:0a:30:a9:97:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=491aaf4a-18d9-4667-8a61-67a6bac4324c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:5e:b1:46:0c:a9:06:f4:8f:26:63:df:9e: da:65:53:c3:4f:56:75:14:46:bd:28:0f:5f:ed:9d: 58:1e:3b:d1:2b:d2:b3:f1:9f:52:96:04:6f:66:c5: 12:d5:53:65:87:15:3d:bf:82:8b:47:2d:6f:23:e0: e2:28:2c:8e:07:ec:86:08:6f:54:80:37:27:66:00: f1:51:02:d0:2b:0c:c0:2f:38:ce:dc:af:a0:0c:71: 0b:2b:c5:6d:27:5b:8f:69:66:38:0b:fc:86:bb:40: 7f:98:1d:98:7c:28:1d:ba:ab:bb:27:e2:83:56:e2: 45:84:c8:40:75:0b:34:36:bd:ff:db:3b:7c:2f:2f: 37:e8:ed:67:44:cc:ce:db:24:ba:16:df:fb:dc:89: 5d:66:c1:38:39:11:20:c6:29:eb:32:d0:3e:c6:e2: e7:e7:8e:45:d0:0e:39:04:71:63:54:33:38:d2:c1: e9:a3:50:f8:4e:b0:11:30:63:ea:d8:57:cd:46:ae: 0e:1e:31:d7:e8:93:29:a1:29:7c:0c:80:4c:ff:1b: 7d:ee:d6:32:0e:cb:1a:6d:f5:53:18:f5:1a:aa:54: dc:e9:3c:10:53:ca:60:33:b6:23:97:e9:9f:a1:d6: f2:c3:71:2a:07:c5:72:7e:ef:c5:ff:2c:30:88:95: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:CA:27:AB:42:B9:78:2B:43:32:1F:54:AE:11:07:BD:F2:9D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57e5ce28-8f00-3b37-9959-7a906017fd5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.198.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5f:83:6c:8a:7f:6c:9f:8c:a5:e0:f7:7c:4f:19:c8:60:2f: e6:05:f1:64:86:12:f4:12:de:eb:26:fb:4d:69:ee:56:63:75: df:ca:eb:ed:8c:38:17:50:bc:1e:0e:2e:89:a0:ea:f5:ab:b9: 2a:3d:65:cf:60:fa:2a:f7:9e:8c:4f:7c:2e:c8:23:8f:5c:93: 74:43:bd:7f:0f:2a:c2:fc:e6:1d:0d:01:89:85:12:8f:1d:c9: 48:11:d9:1f:b9:17:29:3a:af:b6:49:55:bc:a0:62:a7:aa:59: ae:6a:7d:26:bd:7b:1c:0b:dc:20:20:54:7b:0f:cd:9d:0f:cb: 91:11:3c:04:c1:37:f2:d6:c8:12:1a:53:4b:42:c5:d3:bf:f8: 56:6d:89:b3:c3:0d:55:76:bf:5f:be:a4:d2:34:61:32:d6:a0: f2:eb:1e:8e:1a:de:43:f1:9a:21:0c:5c:06:88:96:c9:18:d1: a7:3c:f1:aa:61:b6:e3:3d:13:8d:07:44:37:06:6d:8c:33:31: 75:6c:4e:a1:e3:a3:fd:85:ae:51:26:97:3a:f9:ab:44:b5:d7: f5:25:bb:7a:5a:08:ad:14:91:ae:e5:f9:b3:d7:fa:12:ca:9b: bd:10:46:c2:83:3b:4b:08:18:94:69:49:f1:28:da:05:5c:71: a3:0a:41:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw6lrLxkKMKmXEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDkxYWFmNGEtMThkOS00NjY3LThhNjEtNjdhNmJhYzQzMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+5esUYMqQb0jyZj357aZVPDT1Z1FEa9KA9f 7Z1YHjvRK9Kz8Z9SlgRvZsUS1VNlhxU9v4KLRy1vI+DiKCyOB+yGCG9UgDcnZgDx UQLQKwzALzjO3K+gDHELK8VtJ1uPaWY4C/yGu0B/mB2YfCgduqu7J+KDVuJFhMhA dQs0Nr3/2zt8Ly836O1nRMzO2yS6Ft/73IldZsE4OREgxinrMtA+xuLn545F0A45 BHFjVDM40sHpo1D4TrARMGPq2FfNRq4OHjHX6JMpoSl8DIBM/xt97tYyDssabfVT GPUaqlTc6TwQU8pgM7Yjl+mfodbyw3EqB8Vyfu/F/ywwiJW3DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoRyierQrl4K0MyH1SuEQe98p03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTdlNWNlMjgtOGYwMC0z YjM3LTk5NTktN2E5MDYwMTdmZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpfg2yKf2yfjKXg93xPGchgL+YF8WSGEvQS3usm+01p7lZjdd/K6+2M OBdQvB4OLomg6vWruSo9Zc9g+ir3noxPfC7II49ck3RDvX8PKsL85h0NAYmFEo8d yUgR2R+5Fyk6r7ZJVbygYqeqWa5qfSa9exwL3CAgVHsPzZ0Py5ERPATBN/LWyBIa U0tCxdO/+FZtibPDDVV2v1++pNI0YTLWoPLrHo4a3kPxmiEMXAaIlskY0ac88aph tuM9E40HRDcGbYwzMXVsTqHjo/2FrlEmlzr5q0S11/Ulu3paCK0Uka7l+bPX+hLK m70QRsKDO0sIGJRpSfEo2gVccaMKQaM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:29:19 2025 by rpki-client