$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9085bc75-f325-3965-91f0-f01ce4011448.roa File: 9085bc75-f325-3965-91f0-f01ce4011448.roa (raw, json) Hash identifier: 6/8ZD5ZlxjCJSSdoWq/MQYAj+vXQ1gQFkXmSWAPd2oQ= Subject key identifier: 75:79:8A:5A:02:A1:D2:52:88:98:9E:0D:44:31:BC:D4:6B:C8:D8:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1AF87C81C97C0EC6CBB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9085bc75-f325-3965-91f0-f01ce4011448.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.198.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:af:87:c8:1c:97:c0:ec:6c:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=96294a45-f01a-4ed1-b500-570a83c8ee76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bf:e1:2d:15:84:27:78:6b:8e:f6:4f:f1:df: 52:bb:c3:fa:8a:2d:4b:41:e0:6f:90:f3:f1:ad:46: 48:2b:83:ec:04:5f:a4:0d:03:a5:d8:fd:27:78:76: b9:3e:de:c7:6c:fb:d7:8f:43:23:81:4b:93:c3:16: 28:17:9b:6b:6b:84:47:94:37:ea:ee:cf:a3:60:37: 9d:f2:d4:4f:30:98:e8:a1:f5:29:2a:1b:14:cc:4c: e6:a8:f3:b4:d9:96:e5:f9:0b:59:5b:dd:a4:22:85: 6f:c8:ee:a6:44:9e:9f:05:ba:9f:80:92:4f:11:85: c9:54:13:6e:a6:b6:0c:8b:6b:db:e1:12:b9:de:4a: 83:a7:bd:2d:40:37:00:5a:b8:0a:54:e1:90:a3:64: 8d:6f:24:9b:85:c0:29:82:af:21:9b:82:4a:ee:cb: 7d:e0:49:03:ff:30:0b:4c:1b:77:1c:0e:04:4b:8d: ce:2f:4a:a8:d4:c3:0c:18:fe:9f:f5:c2:19:14:41: d5:f8:00:c7:d3:2b:9a:38:05:ff:25:bd:c3:c6:82: ee:60:70:99:38:ae:59:3b:03:4b:0f:02:49:97:f9: 60:1b:c0:95:82:1b:f4:26:b4:49:30:8d:a7:e8:3d: 3e:c4:81:4f:2a:ed:46:0e:5b:17:ab:0e:32:85:ef: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:79:8A:5A:02:A1:D2:52:88:98:9E:0D:44:31:BC:D4:6B:C8:D8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9085bc75-f325-3965-91f0-f01ce4011448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.198.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:56:41:72:ea:b3:c3:63:0b:00:b0:b0:de:15:43:d0:00:8b: 8f:c7:a9:d3:ee:e9:80:94:50:31:54:da:6c:e0:1f:59:b4:56: 38:a1:0f:af:32:53:2c:b0:51:b4:b3:3a:a4:bc:11:49:f3:62: 21:70:89:cd:82:e4:61:79:51:a4:54:48:3b:bf:a8:dd:75:f6: 88:e2:65:0b:4b:a4:55:0c:d0:a7:fa:88:a5:a2:07:79:a6:e4: 30:f3:44:2f:7b:e0:64:42:c5:6c:dc:69:d8:ab:bb:b8:8f:2e: 58:fa:c1:f3:68:62:35:60:57:8a:43:fe:9d:c4:ef:c7:cf:34: bb:35:36:2d:b5:09:5a:d9:78:0b:05:45:66:5c:99:f8:09:bf: ec:aa:3a:1f:fc:19:c4:0f:06:9f:00:22:02:8c:fd:e5:46:b7: e0:b7:29:48:ed:14:dc:68:72:f7:bf:6a:b3:54:8c:1e:e7:c7: fd:c6:e0:83:12:10:c1:8a:f8:45:5f:65:53:15:15:54:06:bb: ad:7e:b6:9e:d1:4f:9c:65:88:05:e5:82:f5:2a:f5:1d:20:f1: 48:7a:90:ab:73:86:c1:eb:51:8f:58:bb:a5:69:13:e3:17:0f: 32:51:3c:31:a4:dd:d2:76:4e:33:2c:7e:55:8c:e2:75:40:10: 8c:67:c4:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswa+HyByXwOxsu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTYyOTRhNDUtZjAxYS00ZWQxLWI1MDAtNTcwYTgzYzhlZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL/hLRWEJ3hrjvZP8d9Su8P6ii1LQeBvkPPx rUZIK4PsBF+kDQOl2P0neHa5Pt7HbPvXj0MjgUuTwxYoF5tra4RHlDfq7s+jYDed 8tRPMJjoofUpKhsUzEzmqPO02Zbl+QtZW92kIoVvyO6mRJ6fBbqfgJJPEYXJVBNu prYMi2vb4RK53kqDp70tQDcAWrgKVOGQo2SNbySbhcApgq8hm4JK7st94EkD/zAL TBt3HA4ES43OL0qo1MMMGP6f9cIZFEHV+ADH0yuaOAX/Jb3DxoLuYHCZOK5ZOwNL DwJJl/lgG8CVghv0JrRJMI2n6D0+xIFPKu1GDlsXqw4yhe8SxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV5iloCodJSiJieDUQxvNRryNhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA4NWJjNzUtZjMyNS0z OTY1LTkxZjAtZjAxY2U0MDExNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJWQXLqs8NjCwCwsN4VQ9AAi4/HqdPu6YCUUDFU2mzgH1m0VjihD68y UyywUbSzOqS8EUnzYiFwic2C5GF5UaRUSDu/qN119ojiZQtLpFUM0Kf6iKWiB3mm 5DDzRC974GRCxWzcadiru7iPLlj6wfNoYjVgV4pD/p3E78fPNLs1Ni21CVrZeAsF RWZcmfgJv+yqOh/8GcQPBp8AIgKM/eVGt+C3KUjtFNxocve/arNUjB7nx/3G4IMS EMGK+EVfZVMVFVQGu61+tp7RT5xliAXlgvUq9R0g8Uh6kKtzhsHrUY9Yu6VpE+MX DzJRPDGk3dJ2TjMsflWM4nVAEIxnxOs= -----END CERTIFICATE-----Generated at Sun Aug 24 00:00:02 2025 by rpki-client