$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb737f0-c281-3017-a446-52cd2c1e1fc2.roa File: 5eb737f0-c281-3017-a446-52cd2c1e1fc2.roa (raw, json) Hash identifier: yzZs4GMRi61S0z2n5Qra27H1q+Z22iq/BH0NliF+8RQ= Subject key identifier: 11:F7:DC:7C:D4:71:64:42:C9:7C:F4:C3:30:C3:67:81:4E:90:50:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC16AE97E1863B64F888FE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb737f0-c281-3017-a446-52cd2c1e1fc2.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 73.228.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:6a:e9:7e:18:63:b6:4f:88:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ea9684c6-dceb-41e4-80e7-040bf1966c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:61:45:df:34:e8:cb:a1:27:b1:94:10:28:a9: ea:2a:5b:be:20:9c:3f:55:d3:b3:bf:d9:30:b6:d3: 9a:87:e8:de:28:57:f8:37:20:9d:06:fb:ba:17:b4: 5c:b9:8e:d1:b7:dd:96:5b:e2:4c:3c:f8:f2:f4:a9: ab:e2:b8:ef:73:11:c6:13:0f:c3:39:38:85:ea:44: 21:5d:40:86:17:3a:c5:09:bf:f9:e8:d5:2b:2c:92: 3b:73:94:70:5a:2a:6f:29:63:e4:1d:28:d4:d9:10: a3:cc:34:5b:8b:24:80:a8:0b:a0:89:60:b1:3c:f1: a7:07:53:32:1b:4c:ef:11:f5:04:cf:c9:61:ce:3e: 5a:79:cb:27:8b:ef:18:b0:8c:20:6a:86:ab:01:df: 81:cd:4a:e3:35:55:f3:2a:a9:ec:83:f8:be:52:27: d5:62:e6:15:f8:0d:b0:5d:d6:61:7f:0f:e3:74:c4: ef:05:5b:93:a5:65:76:a8:5f:df:9a:70:43:00:cd: 41:20:0f:8d:eb:92:8a:0b:3f:18:34:2d:74:0b:72: 11:02:00:62:73:ee:ba:30:e6:f4:5c:06:2c:51:06: 34:a5:a9:3e:06:64:f6:65:ad:ff:e4:cc:16:15:ef: 32:f0:bc:ef:99:3b:3c:d8:49:84:08:cf:dc:27:1f: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F7:DC:7C:D4:71:64:42:C9:7C:F4:C3:30:C3:67:81:4E:90:50:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb737f0-c281-3017-a446-52cd2c1e1fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:68:be:f4:cf:69:fd:65:da:a7:7b:bb:56:21:35:7d:98:30: 22:33:47:1e:7b:32:e3:da:cb:dc:bd:c4:ca:46:7d:c5:db:5c: d6:19:a5:b6:66:00:9f:b0:c0:9d:dd:f9:5b:72:72:95:20:ee: f7:46:94:4a:77:a6:f6:86:ad:33:5f:1e:51:e9:0a:12:70:5b: 2b:1a:29:5b:01:e8:aa:aa:b4:dd:6e:64:3c:8e:59:c1:e6:10: 4f:50:37:91:88:3f:86:fb:73:8d:5b:a6:0b:41:3d:ff:8f:83: 1a:3a:77:8b:63:1e:27:7d:a2:f0:a7:73:17:52:53:16:f7:e0: 73:0b:63:b8:18:ac:e2:65:2f:d0:41:ca:a0:39:55:b8:8a:21: 6a:b7:d6:ca:d8:ac:04:64:9f:93:e8:47:f6:11:31:59:38:67: 6b:b9:d5:fd:48:1f:a2:9a:34:e4:9c:6e:b3:5b:e0:05:a5:4a: 55:aa:c9:be:8f:38:47:d4:f5:46:f9:d6:4a:e7:f9:4d:54:27: 81:02:f4:78:df:29:ff:4b:9f:51:29:a6:ee:ea:b9:80:44:eb: 9e:de:59:f8:69:ed:db:fa:a9:e2:d9:c0:b4:81:fb:61:3a:24: 0e:f5:cd:0b:36:f5:d3:58:23:65:43:a4:46:da:d6:cf:35:69: f1:2a:f1:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswWrpfhhjtk+Ij+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWE5Njg0YzYtZGNlYi00MWU0LTgwZTctMDQwYmYxOTY2YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2FF3zToy6EnsZQQKKnqKlu+IJw/VdOzv9kw ttOah+jeKFf4NyCdBvu6F7RcuY7Rt92WW+JMPPjy9Kmr4rjvcxHGEw/DOTiF6kQh XUCGFzrFCb/56NUrLJI7c5RwWipvKWPkHSjU2RCjzDRbiySAqAugiWCxPPGnB1My G0zvEfUEz8lhzj5aecsni+8YsIwgaoarAd+BzUrjNVXzKqnsg/i+UifVYuYV+A2w XdZhfw/jdMTvBVuTpWV2qF/fmnBDAM1BIA+N65KKCz8YNC10C3IRAgBic+66MOb0 XAYsUQY0pak+BmT2Za3/5MwWFe8y8LzvmTs82EmECM/cJx9WGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH33HzUcWRCyXz0wzDDZ4FOkFCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWViNzM3ZjAtYzI4MS0z MDE3LWE0NDYtNTJjZDJjMWUxZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM5ovvTPaf1l2qd7u1YhNX2YMCIzRx57MuPay9y9xMpGfcXbXNYZpbZm AJ+wwJ3d+VtycpUg7vdGlEp3pvaGrTNfHlHpChJwWysaKVsB6KqqtN1uZDyOWcHm EE9QN5GIP4b7c41bpgtBPf+Pgxo6d4tjHid9ovCncxdSUxb34HMLY7gYrOJlL9BB yqA5VbiKIWq31srYrARkn5PoR/YRMVk4Z2u51f1IH6KaNOScbrNb4AWlSlWqyb6P OEfU9Ub51krn+U1UJ4EC9HjfKf9Ln1Eppu7quYBE657eWfhp7dv6qeLZwLSB+2E6 JA71zQs29dNYI2VDpEba1s81afEq8e4= -----END CERTIFICATE-----Generated at Sun Aug 24 06:16:25 2025 by rpki-client