$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a3a6b21-deef-3b70-91a4-826619aa3af6.roa File: 6a3a6b21-deef-3b70-91a4-826619aa3af6.roa (raw, json) Hash identifier: d+lutIFpWgGrEU2x+2SbAbGI6ahtG4RXcxU7sWJFhfM= Subject key identifier: 24:24:35:5F:DF:36:01:E9:87:F2:70:94:7B:BE:87:63:C3:8C:02:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC312FAA9F1B4C858348380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a3a6b21-deef-3b70-91a4-826619aa3af6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.222.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:12:fa:a9:f1:b4:c8:58:34:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4cfc0722-3a2e-484a-8a04-6d03fcd15cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:50:0c:25:b4:4f:93:49:26:7d:a7:87:c5: fe:58:8d:37:a7:a4:5e:36:1c:15:24:c0:be:69:05: 61:da:7b:99:12:ef:5e:ae:93:6c:4f:ae:65:62:c2: 88:52:9b:16:61:e1:c8:5e:3c:66:49:05:ee:fc:67: cd:1a:bd:78:bd:4e:f5:5a:e8:25:1d:1e:48:a3:ce: 73:c8:b9:83:74:5c:e3:fe:f8:4a:19:dd:ad:ed:92: 68:88:60:f5:b8:92:9b:80:72:4d:31:18:ac:e4:a8: 38:62:19:8b:fe:c5:f1:5c:f0:69:e9:4f:5d:59:88: 6b:f7:05:0e:14:88:20:d1:61:b6:ba:a3:48:01:65: 02:94:07:e1:59:d6:5e:fb:a7:c2:94:fe:d5:e8:fc: 8e:b4:bf:a1:5e:be:01:b3:bd:71:38:19:2a:e6:2f: 4b:0a:7e:25:27:c0:f0:b8:da:1b:28:ef:c1:9c:ce: cf:c8:89:69:ce:1a:32:e9:53:e7:94:d7:76:69:a0: bc:0f:2a:dc:2c:ac:de:e4:f3:c8:5b:82:6f:ca:33: 72:5d:5b:59:5c:a5:9f:a0:63:7f:9a:57:28:18:ef: bc:26:1b:f2:e3:31:7b:de:aa:e7:de:93:9a:37:f4: d6:c4:c2:26:69:f7:bc:d9:3b:67:da:36:5c:97:b6: a4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:24:35:5F:DF:36:01:E9:87:F2:70:94:7B:BE:87:63:C3:8C:02:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a3a6b21-deef-3b70-91a4-826619aa3af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.222.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:59:39:16:6e:a2:8c:d7:92:be:52:8b:e8:f3:63:46:d1:20: ce:cb:8a:c0:b2:02:4a:60:5f:a1:14:9e:ca:3c:88:07:80:5f: 9a:bb:53:ea:dc:25:f8:4c:dd:e1:2e:28:8e:b4:46:e2:40:1f: 74:f2:b2:39:c1:0e:28:c1:27:69:4b:ff:75:48:5c:f3:69:00: 60:6f:96:86:a0:a6:10:0f:26:88:af:02:c8:36:60:b2:6a:45: a7:fb:1e:44:5d:67:ae:73:e7:96:23:93:43:7f:3e:fd:91:19: f2:b3:2e:bb:b4:d9:dd:a9:30:cf:ff:f3:09:5b:70:fa:c3:2c: 50:dd:e3:80:b5:e1:72:26:95:f1:1f:59:dc:61:8e:cb:82:79: e7:80:1d:9b:d0:6c:08:2c:ee:d7:87:35:60:c3:56:1c:59:53: 49:22:31:59:51:59:a7:15:1d:f0:a9:92:7f:1c:d7:a7:6d:d9: 98:dc:2b:92:ed:09:15:73:f6:3b:6f:98:9a:90:57:0b:40:4c: ed:bc:92:be:a9:8e:b8:fe:d7:42:ad:52:ab:0b:77:e9:d9:8a: f6:ee:cd:d6:44:c0:1a:77:73:36:6b:40:61:9a:8f:6d:60:2f: aa:42:54:8b:dd:7c:4b:2e:37:b6:82:23:60:d5:80:39:fb:98: 3d:8c:0b:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswxL6qfG0yFg0g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGNmYzA3MjItM2EyZS00ODRhLThhMDQtNmQwM2ZjZDE1Y2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYBQDCW0T5NJJn2nh8X+WI03p6ReNhwVJMC+ aQVh2nuZEu9erpNsT65lYsKIUpsWYeHIXjxmSQXu/GfNGr14vU71WuglHR5Io85z yLmDdFzj/vhKGd2t7ZJoiGD1uJKbgHJNMRis5Kg4YhmL/sXxXPBp6U9dWYhr9wUO FIgg0WG2uqNIAWUClAfhWdZe+6fClP7V6PyOtL+hXr4Bs71xOBkq5i9LCn4lJ8Dw uNobKO/BnM7PyIlpzhoy6VPnlNd2aaC8DyrcLKze5PPIW4JvyjNyXVtZXKWfoGN/ mlcoGO+8Jhvy4zF73qrn3pOaN/TWxMImafe82Ttn2jZcl7akaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQkNV/fNgHph/JwlHu+h2PDjAK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmEzYTZiMjEtZGVlZi0z YjcwLTkxYTQtODI2NjE5YWEzYWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9ZORZuoozXkr5Si+jzY0bRIM7LisCyAkpgX6EUnso8iAeAX5q7U+rc JfhM3eEuKI60RuJAH3TysjnBDijBJ2lL/3VIXPNpAGBvloagphAPJoivAsg2YLJq Raf7HkRdZ65z55Yjk0N/Pv2RGfKzLru02d2pMM//8wlbcPrDLFDd44C14XImlfEf WdxhjsuCeeeAHZvQbAgs7teHNWDDVhxZU0kiMVlRWacVHfCpkn8c16dt2ZjcK5Lt CRVz9jtvmJqQVwtATO28kr6pjrj+10KtUqsLd+nZivbuzdZEwBp3czZrQGGaj21g L6pCVIvdfEsuN7aCI2DVgDn7mD2MC2Q= -----END CERTIFICATE-----Generated at Sun Aug 24 03:51:58 2025 by rpki-client