$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ebe9c6f-691e-3e02-88b9-11f66532f7e3.roa File: 5ebe9c6f-691e-3e02-88b9-11f66532f7e3.roa (raw, json) Hash identifier: 2rs0ZuM7Nf4MIO8q3cDXhg+2BkTDF5nM4l03ZyqPZKg= Subject key identifier: F3:6C:65:FA:43:38:81:E8:09:90:7B:DD:B6:5E:D6:11:BC:EF:57:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC38F1ECBFD283806A3A160 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ebe9c6f-691e-3e02-88b9-11f66532f7e3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.33.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:8f:1e:cb:fd:28:38:06:a3:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=938e9c86-514e-4f9f-a22c-ae31087ae1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:a3:22:e7:05:ac:bb:8a:20:0f:1b:f3:6a: 3d:59:fa:95:f7:89:be:80:73:54:fa:83:53:b5:f2: b9:80:79:a1:88:d4:ad:43:9d:76:b5:32:8f:04:39: 3e:6b:ff:ae:b2:bd:85:0e:bb:85:b6:81:27:04:7c: 5a:7f:3f:4b:f0:16:80:5b:d1:1d:90:e9:bf:e0:15: 08:9b:bf:2a:af:21:d1:24:3b:6d:29:ed:8e:fa:f8: b4:42:5d:4f:f0:fb:05:60:c7:62:99:28:08:d6:b3: 99:61:e5:d4:f5:96:a8:fb:40:af:6b:5f:35:07:56: 6e:d2:2e:73:b9:93:f2:3a:47:13:b1:b1:45:e1:7e: 92:e7:60:b8:eb:b8:b1:77:18:89:82:59:d5:17:73: 20:29:43:d8:74:0e:94:4d:27:aa:33:93:94:cc:f3: 61:41:ff:77:19:bb:ff:28:70:8f:f6:36:23:56:d7: 4b:9a:29:7d:37:c7:4a:09:8d:7a:49:b2:e3:01:a7: 9e:46:14:94:5e:d0:ce:96:ef:4f:eb:49:05:3e:49: 3d:ae:57:f0:3f:39:1b:fd:af:73:61:83:80:64:ba: 51:b4:df:1f:9c:98:11:a1:32:bd:17:f7:b5:f0:a5: a9:ef:13:cc:44:a8:ad:a0:53:0f:de:30:7c:2a:3d: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6C:65:FA:43:38:81:E8:09:90:7B:DD:B6:5E:D6:11:BC:EF:57:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ebe9c6f-691e-3e02-88b9-11f66532f7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ca:8f:1d:b9:a0:b0:fb:d7:ab:78:bf:4a:f8:1e:f6:47:52: f1:a7:cb:d2:29:a6:60:d0:45:11:53:28:81:df:a0:6b:52:50: e8:50:3d:80:a6:94:89:1d:64:a7:1d:ee:0c:b9:4e:4a:a8:9e: f3:9a:79:53:99:9b:c9:16:69:c3:32:0b:6a:2c:92:20:38:21: af:e4:f5:69:c8:9a:68:a5:38:58:76:fc:6a:c6:df:90:59:ca: f1:9b:04:9d:c7:13:91:c9:44:ad:85:2c:b8:52:48:0a:f3:b6: f7:c6:c6:2f:11:3b:0d:6f:a0:eb:81:20:2b:06:3e:5b:9b:0f: e8:cc:2c:a8:77:9e:a4:06:21:c2:80:ea:e1:c5:7f:54:b0:6e: 15:50:16:8e:04:9f:fb:86:60:81:ec:34:26:74:dc:1a:8c:0c: c7:40:b2:af:8e:c2:9d:ea:04:d7:e5:c6:37:bb:ee:19:67:e5: 36:e2:89:80:a4:fe:b4:fa:8e:d1:33:8c:92:b7:b1:26:f1:2e: d8:ff:b5:e2:e1:1b:08:8a:9e:97:d7:5b:5c:2e:99:3d:e0:ba: 7a:5d:84:00:b6:74:ab:f6:0d:57:c4:f4:38:bf:a6:e2:e0:69: 67:f1:4c:ba:09:7f:06:a2:8f:d0:af:22:6a:35:b5:d8:d1:e5: 04:35:8a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw48ey/0oOAajoWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTM4ZTljODYtNTE0ZS00ZjlmLWEyMmMtYWUzMTA4N2FlMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDOjIucFrLuKIA8b82o9WfqV94m+gHNU+oNT tfK5gHmhiNStQ512tTKPBDk+a/+usr2FDruFtoEnBHxafz9L8BaAW9EdkOm/4BUI m78qryHRJDttKe2O+vi0Ql1P8PsFYMdimSgI1rOZYeXU9Zao+0Cva181B1Zu0i5z uZPyOkcTsbFF4X6S52C467ixdxiJglnVF3MgKUPYdA6UTSeqM5OUzPNhQf93Gbv/ KHCP9jYjVtdLmil9N8dKCY16SbLjAaeeRhSUXtDOlu9P60kFPkk9rlfwPzkb/a9z YYOAZLpRtN8fnJgRoTK9F/e18KWp7xPMRKitoFMP3jB8Kj0sMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNsZfpDOIHoCZB73bZe1hG871fcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWViZTljNmYtNjkxZS0z ZTAyLTg4YjktMTFmNjY1MzJmN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrKjx25oLD716t4v0r4HvZHUvGny9IppmDQRRFTKIHfoGtSUOhQPYCm lIkdZKcd7gy5TkqonvOaeVOZm8kWacMyC2oskiA4Ia/k9WnImmilOFh2/GrG35BZ yvGbBJ3HE5HJRK2FLLhSSArztvfGxi8ROw1voOuBICsGPlubD+jMLKh3nqQGIcKA 6uHFf1SwbhVQFo4En/uGYIHsNCZ03BqMDMdAsq+Owp3qBNflxje77hln5TbiiYCk /rT6jtEzjJK3sSbxLtj/teLhGwiKnpfXW1wumT3gunpdhAC2dKv2DVfE9Di/puLg aWfxTLoJfwaij9CvImo1tdjR5QQ1iu4= -----END CERTIFICATE-----Generated at Sat Aug 23 22:55:36 2025 by rpki-client