$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a70ae4d-225e-3c46-9487-ec59386e1a33.roa File: 7a70ae4d-225e-3c46-9487-ec59386e1a33.roa (raw, json) Hash identifier: BwShRtzNFh3YDwoxRuJQ4NCR0Hj6BMoUUQOB18MDhrM= Subject key identifier: 5A:F4:FC:9B:55:CF:6D:29:47:91:AC:59:C5:15:6A:AF:DA:E0:75:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC471391BED73D7B5CD68C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a70ae4d-225e-3c46-9487-ec59386e1a33.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.208.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:71:39:1b:ed:73:d7:b5:cd:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4fcf7ddc-6a3d-4086-8370-e51ef9f834bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:ff:0b:34:47:1b:32:09:37:f2:35:58:29: f3:64:76:dd:b2:e8:ad:fa:35:e0:6d:20:c0:8c:26: 5c:1c:bb:36:d6:5b:b9:f8:8f:8f:c8:43:41:7e:b7: 37:ba:8c:2a:7a:55:5a:cd:20:7e:f4:9d:dd:a3:7b: 81:87:b3:6f:f7:5b:18:36:18:21:18:c5:13:2d:c6: ef:07:1b:c5:85:09:87:51:21:11:94:60:1f:13:21: 2a:14:ad:8e:81:85:f3:be:da:45:07:a6:1e:04:ab: 01:46:84:87:aa:ef:6f:cc:ac:cd:fa:68:42:a6:4f: e5:0e:7c:a9:8d:80:63:57:d2:da:e1:1e:f8:27:18: 01:a5:c5:18:9c:7b:67:e2:03:09:ca:87:94:ff:d4: 8b:7e:34:06:01:f7:a3:5e:fa:00:9a:f6:5f:81:ed: fe:08:69:b4:d2:ac:be:2d:bf:67:ac:9a:c7:96:d8: 3b:78:6b:91:86:d7:00:e2:23:df:0c:64:be:fc:b4: 8b:2c:30:64:f4:35:26:26:36:19:02:bc:9f:22:b5: 29:0f:3b:fc:64:8a:12:5a:d8:28:8b:9e:b8:7c:47: 85:36:d7:87:f0:b6:30:26:6b:ee:a9:3f:21:9c:3a: b3:a6:c6:18:6c:be:24:f3:35:a2:f3:4b:fb:9b:9e: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:FC:9B:55:CF:6D:29:47:91:AC:59:C5:15:6A:AF:DA:E0:75:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a70ae4d-225e-3c46-9487-ec59386e1a33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.208.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3b:e4:b9:c2:e0:35:b7:b8:c9:e3:13:ce:71:4c:00:f0:29: 59:69:4b:2e:f6:9e:d3:4d:fe:21:86:68:01:8f:e9:ac:f9:95: ae:96:1f:46:a4:44:40:8d:a2:6d:97:3c:f1:33:ca:c3:9a:e0: 0c:2d:cd:a1:1d:ea:d0:36:1f:11:0c:3a:da:fa:9d:dd:bc:67: 20:0d:9c:da:e0:8e:7f:25:68:6f:fc:27:67:b0:42:a8:4c:9e: a6:1f:2a:53:6b:12:54:de:bb:cd:ae:ca:38:36:f4:03:20:de: 3a:96:8f:41:97:48:79:b3:99:b4:fa:3d:52:04:5d:13:8f:6d: 0d:34:f4:88:93:1f:52:57:ff:a2:cb:af:cf:3f:23:64:72:83: 92:20:0e:d5:20:29:b1:2f:5f:c0:d0:f2:9b:8d:c2:de:50:f6: 08:ee:a1:d2:0b:8b:8a:c7:3b:12:f7:ae:0f:e5:a1:91:df:99: 6e:43:34:e8:4c:01:aa:8b:71:bf:fc:d7:09:de:8c:2c:84:73: 8a:41:cf:75:87:67:79:db:f0:25:7e:c6:9f:15:8e:2e:c9:14: 70:08:7d:a2:30:bc:68:7a:63:6a:80:c1:38:7c:a9:3d:a6:1e: a5:af:95:9f:58:da:b3:cf:33:d5:d1:83:a5:ad:00:d4:53:1d: bf:0f:fe:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxHE5G+1z17XNaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGZjZjdkZGMtNmEzZC00MDg2LTgzNzAtZTUxZWY5ZjgzNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAH/CzRHGzIJN/I1WCnzZHbdsuit+jXgbSDA jCZcHLs21lu5+I+PyENBfrc3uowqelVazSB+9J3do3uBh7Nv91sYNhghGMUTLcbv BxvFhQmHUSERlGAfEyEqFK2OgYXzvtpFB6YeBKsBRoSHqu9vzKzN+mhCpk/lDnyp jYBjV9La4R74JxgBpcUYnHtn4gMJyoeU/9SLfjQGAfejXvoAmvZfge3+CGm00qy+ Lb9nrJrHltg7eGuRhtcA4iPfDGS+/LSLLDBk9DUmJjYZAryfIrUpDzv8ZIoSWtgo i564fEeFNteH8LYwJmvuqT8hnDqzpsYYbL4k8zWi80v7m55v9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr0/JtVz20pR5GsWcUVaq/a4HUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E3MGFlNGQtMjI1ZS0z YzQ2LTk0ODctZWM1OTM4NmUxYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU75LnC4DW3uMnjE85xTADwKVlpSy72ntNN/iGGaAGP6az5la6WH0ak RECNom2XPPEzysOa4AwtzaEd6tA2HxEMOtr6nd28ZyANnNrgjn8laG/8J2ewQqhM nqYfKlNrElTeu82uyjg29AMg3jqWj0GXSHmzmbT6PVIEXROPbQ009IiTH1JX/6LL r88/I2Ryg5IgDtUgKbEvX8DQ8puNwt5Q9gjuodILi4rHOxL3rg/loZHfmW5DNOhM AaqLcb/81wnejCyEc4pBz3WHZ3nb8CV+xp8Vji7JFHAIfaIwvGh6Y2qAwTh8qT2m HqWvlZ9Y2rPPM9XRg6WtANRTHb8P/oQ= -----END CERTIFICATE-----Generated at Sun Aug 24 06:08:30 2025 by rpki-client