$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90efab25-1ef6-31e6-85e2-2f2eb349ab3e.roa File: 90efab25-1ef6-31e6-85e2-2f2eb349ab3e.roa (raw, json) Hash identifier: a5iy6XU6jPfXw6zhAxogfV5Beqfcm2GFI7gMhutYFn8= Subject key identifier: E1:C9:4E:5C:0C:C3:D6:EB:F8:3C:27:F3:86:93:17:28:9A:3F:B2:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5279D5BEDC30260F7F880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90efab25-1ef6-31e6-85e2-2f2eb349ab3e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.189.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:27:9d:5b:ed:c3:02:60:f7:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b04ee75f-538e-4c7e-8ce1-7bd1ff1ac002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:10:22:67:c0:fd:5c:95:bf:99:5f:84:51: 58:03:c6:28:02:aa:40:78:2f:3b:05:a4:f8:83:9f: 82:31:45:5b:d4:a4:4b:ba:a4:49:25:91:4d:10:f4: 5c:46:44:34:27:80:0a:df:0b:0d:b1:e5:46:3d:31: cf:ae:a7:8f:87:89:14:ab:68:e0:c0:3e:37:e6:c1: 06:c3:df:6d:88:9d:b7:53:76:63:a5:4a:e5:5c:30: f2:61:5d:49:d3:81:25:45:29:18:0c:44:c0:4a:79: 17:e5:ac:cc:5b:03:14:4b:f8:a0:ac:7c:60:7a:d2: 13:df:68:4c:fb:39:2e:36:4b:6c:13:c6:0f:ab:76: dd:cd:70:2e:e3:81:d0:0b:53:dd:52:85:ee:2a:9c: 4e:c9:fb:82:17:86:8c:43:70:72:f2:e3:a0:07:16: 93:0a:84:fa:08:64:61:d9:a2:b9:84:f0:09:e0:7f: 05:0c:a3:28:5e:e6:12:b7:db:30:53:a9:fe:39:46: 26:75:70:8a:77:62:c1:a8:62:05:7d:a3:3a:47:2a: a6:c5:dd:22:25:ec:2e:07:5a:7d:38:78:55:26:62: 5e:69:50:83:f0:ac:ab:a4:91:bc:3c:1b:64:23:9b: 65:1f:4f:ab:6b:c2:4e:5a:46:5f:ee:4a:ba:7b:3e: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:4E:5C:0C:C3:D6:EB:F8:3C:27:F3:86:93:17:28:9A:3F:B2:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90efab25-1ef6-31e6-85e2-2f2eb349ab3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.189.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4e:04:83:20:0e:a8:e8:65:cb:22:b8:d7:a1:76:54:34:92: 20:1d:75:6d:22:87:70:b0:ee:b4:7d:b0:a3:75:71:a2:91:83: 46:71:a5:c8:61:2f:75:ef:45:d7:96:84:38:96:1b:c8:3b:6a: b7:a6:40:e5:0f:2b:57:61:df:c3:f8:46:35:cc:29:d8:df:f2: 2f:4d:b0:01:3a:96:c9:47:49:69:52:3a:5b:e4:90:b1:1f:ea: c5:a0:a6:f2:48:23:81:19:e4:46:9f:b5:e8:78:3f:29:aa:5e: 95:48:63:76:69:26:a7:47:aa:6d:20:77:e4:dd:19:3b:7a:34: 19:30:e2:24:ae:a2:b7:bb:3e:6b:f1:77:a2:03:35:2c:d9:78: 4c:f6:88:a8:ba:91:e4:03:77:b2:6b:cb:45:9a:1a:d4:92:5f: 9a:f5:ef:68:77:97:d2:1f:73:87:36:ea:c0:6d:8d:da:93:35: d6:7d:b9:55:f7:b1:47:aa:1f:7b:c6:b4:eb:df:39:96:51:64: eb:38:a7:5c:78:98:d1:0f:b7:da:23:86:38:ad:69:00:9f:6d: 9a:d6:2a:16:0b:32:bc:c6:1f:1d:06:7d:2f:69:c6:50:c7:bd: cc:7c:ef:72:d6:b4:fd:0c:67:a2:af:1e:95:6f:6a:dd:c1:fb: 2c:cc:26:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxSedW+3DAmD3+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjA0ZWU3NWYtNTM4ZS00YzdlLThjZTEtN2JkMWZmMWFjMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfYQImfA/VyVv5lfhFFYA8YoAqpAeC87BaT4 g5+CMUVb1KRLuqRJJZFNEPRcRkQ0J4AK3wsNseVGPTHPrqePh4kUq2jgwD435sEG w99tiJ23U3ZjpUrlXDDyYV1J04ElRSkYDETASnkX5azMWwMUS/igrHxgetIT32hM +zkuNktsE8YPq3bdzXAu44HQC1PdUoXuKpxOyfuCF4aMQ3By8uOgBxaTCoT6CGRh 2aK5hPAJ4H8FDKMoXuYSt9swU6n+OUYmdXCKd2LBqGIFfaM6Ryqmxd0iJewuB1p9 OHhVJmJeaVCD8KyrpJG8PBtkI5tlH0+ra8JOWkZf7kq6ez4i8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHJTlwMw9br+Dwn84aTFyiaP7KtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTBlZmFiMjUtMWVmNi0z MWU2LTg1ZTItMmYyZWIzNDlhYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSb2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdOBIMgDqjoZcsiuNehdlQ0kiAddW0ih3Cw7rR9sKN1caKRg0Zxpchh L3XvRdeWhDiWG8g7aremQOUPK1dh38P4RjXMKdjf8i9NsAE6lslHSWlSOlvkkLEf 6sWgpvJII4EZ5Eafteh4PymqXpVIY3ZpJqdHqm0gd+TdGTt6NBkw4iSuore7Pmvx d6IDNSzZeEz2iKi6keQDd7Jry0WaGtSSX5r172h3l9Ifc4c26sBtjdqTNdZ9uVX3 sUeqH3vGtOvfOZZRZOs4p1x4mNEPt9ojhjitaQCfbZrWKhYLMrzGHx0GfS9pxlDH vcx873LWtP0MZ6KvHpVvat3B+yzMJjI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:27:37 2025 by rpki-client