$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d01bcb4-8820-3427-bb0a-13db6aa1de0d.roa File: 8d01bcb4-8820-3427-bb0a-13db6aa1de0d.roa (raw, json) Hash identifier: KZjvcYxghm8b/045R1XFCWKNtynOekBaE9TZKbetGUY= Subject key identifier: 32:37:FD:A1:2E:55:43:D5:05:18:27:E9:86:DB:06:29:9A:2C:ED:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC401C54628F65DE6237A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d01bcb4-8820-3427-bb0a-13db6aa1de0d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 73.233.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:01:c5:46:28:f6:5d:e6:23:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fb9708e1-e95b-4bfd-816a-2a57fc5c8b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:21:a7:05:df:a2:db:27:bd:48:c6:1d:5e:1c: 03:e1:4b:a5:0c:38:7e:f6:64:24:85:52:3b:36:47: 52:9b:29:e8:d3:b4:60:77:8f:4b:13:17:3e:52:e1: 62:da:e3:3a:ee:f8:5b:25:9c:7e:17:ff:28:aa:09: cc:cc:98:1c:ff:85:66:ac:9e:23:8e:cf:41:2f:9a: b0:db:96:92:ec:2d:53:d3:50:3e:c1:25:71:1c:fc: 94:4d:2e:be:29:39:16:b0:3a:49:f0:48:b8:cf:eb: 38:b4:e7:9b:0c:24:cb:a6:1b:b6:3c:9d:a7:84:38: d5:e9:2e:45:e6:06:2b:a2:d3:87:b4:b3:54:31:65: b0:16:4d:fe:ef:2a:cb:6b:c4:c2:c9:d2:32:9b:91: 05:9e:b4:9c:dc:3e:60:4a:61:cc:96:ee:41:fc:dd: 81:f6:9f:7c:76:22:7f:e2:06:62:5b:4d:0b:4c:cb: da:78:c9:94:69:a1:44:3d:d7:68:e3:a9:24:f1:8b: 16:be:c8:6b:1e:b8:f8:9e:4e:a8:00:98:11:fc:3e: f8:f0:42:c2:37:c2:90:8b:b8:a0:ae:30:5e:fe:db: a0:41:fc:ad:31:6c:6d:6d:ce:5a:d3:16:80:b1:32: 45:57:9b:1a:77:da:8e:b3:ca:54:91:17:11:84:17: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:37:FD:A1:2E:55:43:D5:05:18:27:E9:86:DB:06:29:9A:2C:ED:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d01bcb4-8820-3427-bb0a-13db6aa1de0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.233.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:4f:95:16:ad:93:a0:bc:65:3e:1d:7d:8a:94:6a:cc:45:f0: b6:79:c0:f6:29:bf:5d:25:08:96:b0:bb:ed:66:87:31:35:a5: ab:2e:4f:66:14:46:59:f2:25:3c:ff:c7:36:76:93:23:ab:0b: 6b:6b:1a:76:07:22:d5:5c:5c:af:60:e8:82:ab:30:11:6b:3b: f2:94:d3:15:c1:1e:4b:1d:99:0f:05:54:a1:99:50:ff:4d:41: 81:b6:09:22:a9:0f:d2:bf:9d:33:cf:71:2e:84:34:73:47:e0: 84:60:cd:42:01:00:3f:3f:ce:ab:c8:6c:0e:28:e2:e1:7d:a4: 4b:37:37:7a:43:3d:9d:f2:7f:c3:8c:11:20:28:a0:eb:ba:fa: df:01:89:a1:5e:c8:39:79:a3:e9:a3:8c:a6:70:69:61:8b:ca: b5:b0:8e:e4:b3:01:4a:f2:84:c3:f4:0a:84:01:99:c7:a7:4a: b9:6f:40:32:10:72:8e:b1:e8:ea:36:17:8c:70:d6:0c:76:ed: ca:1b:17:82:8e:b1:b5:91:6f:35:58:d3:e8:00:b0:66:6b:54: 97:df:71:60:37:6f:2a:9b:d5:dd:d2:f0:5a:de:a5:12:6c:a5: b1:2f:7d:5d:dd:65:f2:39:2a:d4:ff:e1:2c:97:a4:a5:29:61: 01:5f:96:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxAHFRij2XeYjegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmI5NzA4ZTEtZTk1Yi00YmZkLTgxNmEtMmE1N2ZjNWM4YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiGnBd+i2ye9SMYdXhwD4UulDDh+9mQkhVI7 NkdSmyno07Rgd49LExc+UuFi2uM67vhbJZx+F/8oqgnMzJgc/4VmrJ4jjs9BL5qw 25aS7C1T01A+wSVxHPyUTS6+KTkWsDpJ8Ei4z+s4tOebDCTLphu2PJ2nhDjV6S5F 5gYrotOHtLNUMWWwFk3+7yrLa8TCydIym5EFnrSc3D5gSmHMlu5B/N2B9p98diJ/ 4gZiW00LTMvaeMmUaaFEPddo46kk8YsWvshrHrj4nk6oAJgR/D748ELCN8KQi7ig rjBe/tugQfytMWxtbc5a0xaAsTJFV5sad9qOs8pUkRcRhBcP6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI3/aEuVUPVBRgn6YbbBimaLO2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQwMWJjYjQtODgyMC0z NDI3LWJiMGEtMTNkYjZhYTFkZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSemIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL1PlRatk6C8ZT4dfYqUasxF8LZ5wPYpv10lCJawu+1mhzE1pasuT2YU RlnyJTz/xzZ2kyOrC2trGnYHItVcXK9g6IKrMBFrO/KU0xXBHksdmQ8FVKGZUP9N QYG2CSKpD9K/nTPPcS6ENHNH4IRgzUIBAD8/zqvIbA4o4uF9pEs3N3pDPZ3yf8OM ESAooOu6+t8BiaFeyDl5o+mjjKZwaWGLyrWwjuSzAUryhMP0CoQBmcenSrlvQDIQ co6x6Oo2F4xw1gx27cobF4KOsbWRbzVY0+gAsGZrVJffcWA3byqb1d3S8FrepRJs pbEvfV3dZfI5KtT/4SyXpKUpYQFflkY= -----END CERTIFICATE-----Generated at Sat Aug 23 23:26:06 2025 by rpki-client