$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588f8b6a-5fe1-3c0f-81d1-50cad707131a.roa File: 588f8b6a-5fe1-3c0f-81d1-50cad707131a.roa (raw, json) Hash identifier: cshYV+MpVqTujtEQBmu+CW8MZVKJeYYhc7HV1E3MGfA= Subject key identifier: 17:33:B4:3A:CF:25:EE:01:C9:F6:34:72:93:6C:2C:4E:A9:F7:0D:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC529CC4106C374F238C4D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588f8b6a-5fe1-3c0f-81d1-50cad707131a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.189.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:29:cc:41:06:c3:74:f2:38:c4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b4dc8094-c084-42d4-9617-80c53f594646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:25:69:0c:41:56:8c:eb:0e:a3:ca:49:f8:22: 81:02:10:47:8f:96:d2:e9:46:3e:b9:db:54:61:d9: 4c:27:fd:e1:96:e8:e1:10:e6:9e:90:64:23:5c:f6: 8d:3d:81:36:23:02:6b:20:35:2a:e9:c8:56:41:34: 2f:5b:2f:4e:cc:f8:44:09:b6:1b:ea:7d:c9:65:86: 1f:3c:89:fb:a5:1d:dc:22:8f:f1:7a:df:dc:8e:26: 87:fb:61:cd:d7:e1:f1:3f:76:98:27:5a:a9:10:74: 6a:ae:ca:67:59:9d:5e:00:55:ef:5b:0d:97:84:0c: cd:6e:7a:ee:0f:e7:e6:26:be:26:88:b3:7e:be:19: d7:3b:ce:1d:c6:26:0c:1b:b2:79:e2:e0:48:e9:44: e7:8a:82:4e:c2:57:e4:46:e8:8b:ea:41:b6:99:63: dd:5c:4b:88:90:58:c8:5e:18:3c:39:fd:04:3c:de: ff:7e:5f:21:83:3b:c2:5c:a2:a9:55:a1:92:1b:11: 50:a6:6e:25:0f:a9:18:cd:21:fe:e7:14:b8:70:2f: 7c:01:12:aa:3c:9b:c4:10:aa:64:7b:c9:16:fd:38: c7:aa:ea:06:51:d1:45:64:aa:74:a7:79:f2:48:d2: 85:f4:71:70:ac:14:1a:79:57:56:03:f9:ee:7b:96: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:33:B4:3A:CF:25:EE:01:C9:F6:34:72:93:6C:2C:4E:A9:F7:0D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/588f8b6a-5fe1-3c0f-81d1-50cad707131a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.189.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:83:af:b2:85:47:46:69:b8:7f:ad:ad:97:fd:73:f3:d7:ea: ae:10:18:d6:85:bf:89:8c:0d:cb:9b:69:d2:11:c1:9b:86:a0: 79:86:a2:42:e0:d5:56:b1:a1:66:80:cd:7e:64:6f:f5:03:06: 9c:93:17:17:3e:ff:dc:11:22:4c:55:17:85:f4:19:ec:af:ba: 0d:41:a0:12:7f:12:13:d0:db:ae:f0:8d:6d:42:6f:4c:48:d4: bf:63:23:9c:e1:cb:79:d8:1f:45:8d:61:0c:e9:30:8e:aa:d8: 69:98:51:2e:c8:87:fb:f4:9f:64:ee:21:09:f6:1f:42:45:e3: d1:f0:56:24:12:d0:57:79:4a:75:3f:f7:86:25:68:76:15:18: ee:9e:a4:4c:3e:a1:a8:77:e4:fc:57:de:3e:a7:49:17:e3:10: da:9f:3b:8c:62:8e:34:c3:10:7e:79:f9:9b:0b:a0:a3:7e:46: d2:af:50:9f:70:cf:9e:90:77:c0:1a:2b:15:a8:f0:bf:75:5d: 32:6e:d1:0a:aa:dd:6e:67:3f:51:cd:02:ab:03:ab:dd:2b:0d: 7c:5b:94:b5:85:68:06:17:b6:c3:8f:40:26:67:ef:17:9e:40: bd:49:9d:ff:07:a6:0f:12:ed:7c:5c:2d:25:d6:06:bc:2a:86: 70:16:3e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxSnMQQbDdPI4xNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjRkYzgwOTQtYzA4NC00MmQ0LTk2MTctODBjNTNmNTk0NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiVpDEFWjOsOo8pJ+CKBAhBHj5bS6UY+udtU YdlMJ/3hlujhEOaekGQjXPaNPYE2IwJrIDUq6chWQTQvWy9OzPhECbYb6n3JZYYf PIn7pR3cIo/xet/cjiaH+2HN1+HxP3aYJ1qpEHRqrspnWZ1eAFXvWw2XhAzNbnru D+fmJr4miLN+vhnXO84dxiYMG7J54uBI6UTnioJOwlfkRuiL6kG2mWPdXEuIkFjI Xhg8Of0EPN7/fl8hgzvCXKKpVaGSGxFQpm4lD6kYzSH+5xS4cC98ARKqPJvEEKpk e8kW/TjHquoGUdFFZKp0p3nySNKF9HFwrBQaeVdWA/nue5bgtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcztDrPJe4ByfY0cpNsLE6p9w3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg4ZjhiNmEtNWZlMS0z YzBmLTgxZDEtNTBjYWQ3MDcxMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGDr7KFR0ZpuH+trZf9c/PX6q4QGNaFv4mMDcubadIRwZuGoHmGokLg 1VaxoWaAzX5kb/UDBpyTFxc+/9wRIkxVF4X0Geyvug1BoBJ/EhPQ267wjW1Cb0xI 1L9jI5zhy3nYH0WNYQzpMI6q2GmYUS7Ih/v0n2TuIQn2H0JF49HwViQS0Fd5SnU/ 94YlaHYVGO6epEw+oah35PxX3j6nSRfjENqfO4xijjTDEH55+ZsLoKN+RtKvUJ9w z56Qd8AaKxWo8L91XTJu0Qqq3W5nP1HNAqsDq90rDXxblLWFaAYXtsOPQCZn7xee QL1Jnf8Hpg8S7XxcLSXWBrwqhnAWPnE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:26:44 2025 by rpki-client