$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5c35ea-4594-366c-bd6c-372af14a8e24.roa File: 8d5c35ea-4594-366c-bd6c-372af14a8e24.roa (raw, json) Hash identifier: MQ7UIv/ogLC+GBY9/GWJXp+Sz+LbAGBpOL8ZC+7WJeM= Subject key identifier: 54:35:1E:D0:F0:F0:ED:87:82:53:A7:A2:A3:EB:E9:5D:3A:20:8D:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC38CACB74040A77276FF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5c35ea-4594-366c-bd6c-372af14a8e24.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.33.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:8c:ac:b7:40:40:a7:72:76:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=93e6cb5c-893a-4f94-ad0b-e0569625fd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:6c:c7:c7:e5:27:e4:0d:a4:29:c0:2c:34: a2:76:01:d9:d0:a5:b0:1d:da:b1:65:55:c2:04:3c: b6:de:87:6b:68:18:9e:a8:2e:c1:98:18:72:5d:52: eb:c5:f4:31:9f:5e:35:57:31:eb:1a:87:85:bc:11: 51:39:e1:70:03:46:f1:c9:58:87:42:f6:e4:1f:42: 41:f8:53:96:d4:f0:37:44:3d:8f:d8:91:fd:b1:97: f0:f5:7b:d5:f0:64:15:7b:bc:e2:28:d8:de:a8:78: d5:a4:d6:46:6d:87:5c:2d:70:07:66:b1:70:57:98: 2d:f9:78:35:b6:0e:40:37:72:6b:e0:72:7a:49:aa: 3e:7d:95:6b:21:94:ca:20:9e:ef:b6:dc:4c:58:1e: 05:b7:f7:0c:1c:ef:3d:59:f3:f4:a0:e6:40:6b:92: e0:bb:3e:93:c5:be:80:f9:c3:80:43:82:5c:79:16: 94:0a:5f:c9:b8:1f:5c:a3:38:48:20:3f:96:82:40: de:79:b0:f8:17:57:87:e8:4a:eb:ff:ad:4b:f9:ff: 7d:46:cf:95:0f:4a:bb:16:f0:22:88:b0:e4:e5:1f: ee:0a:fb:ca:7b:c4:2f:53:25:ba:2b:1b:0e:b1:4c: 36:5c:9b:e7:75:57:ba:f4:aa:50:05:64:5d:f8:0a: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:35:1E:D0:F0:F0:ED:87:82:53:A7:A2:A3:EB:E9:5D:3A:20:8D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5c35ea-4594-366c-bd6c-372af14a8e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:37:47:ef:71:bd:7b:27:f7:87:02:c4:a6:ac:59:2e:bd:fc: dc:70:f6:29:a5:28:aa:e8:5b:f3:c3:92:20:41:57:24:da:31: 67:c2:79:10:3a:77:43:62:e4:fb:37:19:bf:d4:05:42:b5:e3: 51:04:b9:68:c5:51:3e:49:4d:cc:a4:57:df:9e:b0:79:49:96: 02:00:dc:d8:22:2f:29:ed:60:82:4f:2d:c2:0f:f8:52:ea:16: 04:b3:7f:7a:a1:83:5c:af:5a:9e:f3:d5:13:83:dc:e5:f3:ff: 12:a2:e0:66:7d:29:da:57:70:b4:2a:06:2c:f7:99:04:9e:6c: ed:93:aa:5f:78:7d:ce:f5:0f:5b:4b:de:f1:fd:2f:a6:c5:1c: 36:5f:6e:56:1d:09:50:1c:48:6d:2a:24:17:a3:a6:56:c5:00: 12:33:51:3f:19:fe:03:ab:c9:47:90:b6:8e:9b:20:0f:00:bf: 2b:6e:e2:d9:c5:84:6a:42:58:a9:31:8f:03:e7:9c:03:27:00: 02:ae:08:16:91:83:aa:b9:19:10:15:d0:3e:39:03:d6:8b:26: b9:a2:91:4a:01:1a:ec:0f:85:a6:a8:cc:70:e5:c1:7f:d1:44: e3:3d:7d:f3:3b:eb:b8:74:17:84:bb:ed:b0:57:8f:49:f6:ee: 17:92:34:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw4yst0BAp3J2/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTNlNmNiNWMtODkzYS00Zjk0LWFkMGItZTA1Njk2MjVmZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooZsx8flJ+QNpCnALDSidgHZ0KWwHdqxZVXC BDy23odraBieqC7BmBhyXVLrxfQxn141VzHrGoeFvBFROeFwA0bxyViHQvbkH0JB +FOW1PA3RD2P2JH9sZfw9XvV8GQVe7ziKNjeqHjVpNZGbYdcLXAHZrFwV5gt+Xg1 tg5AN3Jr4HJ6Sao+fZVrIZTKIJ7vttxMWB4Ft/cMHO89WfP0oOZAa5Lguz6Txb6A +cOAQ4JceRaUCl/JuB9cozhIID+WgkDeebD4F1eH6Err/61L+f99Rs+VD0q7FvAi iLDk5R/uCvvKe8QvUyW6KxsOsUw2XJvndVe69KpQBWRd+ArkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ1HtDw8O2HglOnoqPr6V06II1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ1YzM1ZWEtNDU5NC0z NjZjLWJkNmMtMzcyYWYxNGE4ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc3R+9xvXsn94cCxKasWS69/Nxw9imlKKroW/PDkiBBVyTaMWfCeRA6 d0Ni5Ps3Gb/UBUK141EEuWjFUT5JTcykV9+esHlJlgIA3NgiLyntYIJPLcIP+FLq FgSzf3qhg1yvWp7z1ROD3OXz/xKi4GZ9KdpXcLQqBiz3mQSebO2Tql94fc71D1tL 3vH9L6bFHDZfblYdCVAcSG0qJBejplbFABIzUT8Z/gOryUeQto6bIA8Avytu4tnF hGpCWKkxjwPnnAMnAAKuCBaRg6q5GRAV0D45A9aLJrmikUoBGuwPhaaozHDlwX/R ROM9ffM767h0F4S77bBXj0n27heSNBQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:25:09 2025 by rpki-client