$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959a8459-e046-3f71-9e0f-05b3ddffc02f.roa File: 959a8459-e046-3f71-9e0f-05b3ddffc02f.roa (raw, json) Hash identifier: 1bRa6tPYLCe87PAJY/D08smvgv2fsBQD5HS5OtHWj6g= Subject key identifier: 58:B6:EE:84:DF:00:1E:B5:D4:A7:15:A2:F4:41:14:CD:02:EC:72:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC47F01ABB80BA7F88F3580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959a8459-e046-3f71-9e0f-05b3ddffc02f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.211.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:7f:01:ab:b8:0b:a7:f8:8f:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b409ff99-12b6-40f2-9725-6b53b4c3a378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:91:72:db:c9:66:82:a5:6c:32:54:b7:8a:4d: b9:91:5e:64:2b:b2:f1:63:34:31:bc:df:10:b2:62: 35:7d:c2:11:6b:5a:c8:ab:10:76:77:1a:9d:44:a6: 17:b8:69:03:38:fe:19:bc:6b:3c:4c:a5:08:45:21: 96:ef:92:a7:08:3f:b9:c5:1e:f3:93:93:75:07:b0: 92:82:10:d7:81:61:ee:a8:0b:f3:4d:2b:af:ff:71: cc:21:bf:68:78:6c:50:7f:90:5b:05:c1:03:7b:dc: b7:bc:46:9c:5a:a7:d4:58:12:64:d4:87:17:26:d3: 37:77:3f:d1:eb:82:b9:f8:6a:b8:67:03:69:8c:89: 54:58:a8:dd:db:c5:15:5c:34:02:89:be:ca:ae:b2: 5c:7f:73:fc:5e:28:88:3b:a0:a5:be:7d:ef:2f:34: c6:f4:33:69:9d:cb:6a:c3:e1:53:4c:e2:33:4e:43: 16:ea:f6:4a:7a:bf:90:9e:3f:be:f1:94:63:82:8a: 04:a3:7e:26:89:1f:ec:af:9b:b0:84:5c:d5:91:d4: c2:06:f4:cd:ba:f7:1f:e4:01:f6:5f:21:82:a1:1c: 91:2e:f4:5e:09:e6:dc:72:c5:34:68:d9:b8:45:39: bd:00:ad:af:09:82:35:ea:56:3a:ee:f4:c1:a2:74: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B6:EE:84:DF:00:1E:B5:D4:A7:15:A2:F4:41:14:CD:02:EC:72:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/959a8459-e046-3f71-9e0f-05b3ddffc02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.211.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:42:c4:1d:0a:0d:fd:bf:92:97:a2:fb:0d:55:70:4f:25:1d: ea:a9:ee:43:a4:d7:01:19:d5:08:b6:ea:e5:c7:03:e0:80:97: 5a:39:fe:57:e7:27:7a:70:3b:b2:70:e9:29:8e:21:c2:dd:29: b4:cf:67:51:d0:b0:24:e4:52:27:fd:5e:8f:44:bb:ba:37:71: c7:e6:f1:49:7a:86:6a:6b:42:31:c9:72:b3:97:5a:6a:ae:5a: e3:f4:61:26:da:37:dc:65:39:bc:29:aa:ad:9a:1b:d8:63:e6: 87:ec:a5:3f:b1:84:19:f8:8d:3d:4a:2e:63:f1:81:55:3f:2e: 7a:ca:dc:69:a1:5a:f8:f2:c8:1e:8e:c7:6c:d2:50:b6:eb:66: 0d:65:b6:00:e2:ea:b6:8d:8b:1a:f0:f9:5b:1e:db:57:9c:c8: 93:e3:8e:84:87:de:8d:e0:48:0a:35:82:74:49:ba:0e:2f:79: 0e:ef:38:da:95:24:86:5a:18:65:5a:c1:97:f8:df:e9:4e:45: a8:c1:96:25:87:13:a9:bf:c3:a7:fb:b6:f4:e3:ff:e1:c5:35: b2:5b:a4:aa:98:b9:68:f3:b4:6c:8f:ff:d4:7d:87:5d:37:98: 04:1c:86:d6:6b:55:46:57:58:23:af:de:fc:cd:f1:f2:79:05: fb:d1:29:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxH8Bq7gLp/iPNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjQwOWZmOTktMTJiNi00MGYyLTk3MjUtNmI1M2I0YzNhMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JFy28lmgqVsMlS3ik25kV5kK7LxYzQxvN8Q smI1fcIRa1rIqxB2dxqdRKYXuGkDOP4ZvGs8TKUIRSGW75KnCD+5xR7zk5N1B7CS ghDXgWHuqAvzTSuv/3HMIb9oeGxQf5BbBcEDe9y3vEacWqfUWBJk1IcXJtM3dz/R 64K5+Gq4ZwNpjIlUWKjd28UVXDQCib7KrrJcf3P8XiiIO6Clvn3vLzTG9DNpnctq w+FTTOIzTkMW6vZKer+Qnj++8ZRjgooEo34miR/sr5uwhFzVkdTCBvTNuvcf5AH2 XyGCoRyRLvReCebccsU0aNm4RTm9AK2vCYI16lY67vTBonQJ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi27oTfAB611KcVovRBFM0C7HKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU5YTg0NTktZTA0Ni0z ZjcxLTllMGYtMDViM2RkZmZjMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRCxB0KDf2/kpei+w1VcE8lHeqp7kOk1wEZ1Qi26uXHA+CAl1o5/lfn J3pwO7Jw6SmOIcLdKbTPZ1HQsCTkUif9Xo9Eu7o3ccfm8Ul6hmprQjHJcrOXWmqu WuP0YSbaN9xlObwpqq2aG9hj5ofspT+xhBn4jT1KLmPxgVU/LnrK3GmhWvjyyB6O x2zSULbrZg1ltgDi6raNixrw+Vse21ecyJPjjoSH3o3gSAo1gnRJug4veQ7vONqV JIZaGGVawZf43+lORajBliWHE6m/w6f7tvTj/+HFNbJbpKqYuWjztGyP/9R9h103 mAQchtZrVUZXWCOv3vzN8fJ5BfvRKZQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:42 2025 by rpki-client