$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/967be4fa-a58f-357e-90e5-58974c2f05f9.roa File: 967be4fa-a58f-357e-90e5-58974c2f05f9.roa (raw, json) Hash identifier: ezdC/hkn6dRb0dw+1xnpD854vODwHTunhYvSOdRrYUQ= Subject key identifier: D6:A0:FD:86:A1:08:32:2E:35:8A:BD:21:79:4E:BE:D2:6F:B5:AB:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC18999A612B36F383AD3C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/967be4fa-a58f-357e-90e5-58974c2f05f9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.29.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:89:99:a6:12:b3:6f:38:3a:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5c5c5240-10f2-4df5-927a-6eb50cab9b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:cc:54:e3:58:3a:7f:23:52:3b:d7:da:20: de:78:11:dc:ca:67:80:ec:99:98:1a:7e:74:3d:53: 77:9a:bf:44:29:e2:8e:76:e3:df:6a:31:e7:76:40: b4:3f:f5:d0:50:41:b9:9f:fa:2a:ea:ae:40:3d:19: 0b:b8:1e:25:8a:58:68:29:47:a0:bb:b7:86:90:32: 9c:d3:ca:4b:64:09:bb:57:63:38:55:4e:76:41:f6: 57:08:ec:72:e5:58:60:3a:9e:6a:13:b0:92:a1:3c: 65:bc:02:94:54:0f:4b:e6:14:25:56:9d:da:39:af: 2b:dc:9c:d2:ca:58:7c:57:49:ef:17:46:84:b6:89: f1:40:a0:db:e8:6f:22:b8:79:6e:dd:86:ab:06:02: 22:68:f9:6c:e2:ec:d9:d8:74:ee:7d:e0:8e:09:67: 5e:f1:b9:ca:33:1f:68:1e:96:4d:5a:94:40:dd:bc: 63:c2:cb:c9:db:fd:91:71:c9:22:86:1b:af:b6:b5: a7:00:53:19:b7:e2:9a:62:ae:ce:52:3b:94:fb:bd: b4:a1:21:95:b8:c2:09:bf:a1:72:f9:1b:f8:61:92: 78:b7:74:52:89:b1:6c:ae:84:28:a6:c1:03:95:8c: ca:06:6c:da:91:19:c8:65:7a:64:31:26:9d:fb:70: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A0:FD:86:A1:08:32:2E:35:8A:BD:21:79:4E:BE:D2:6F:B5:AB:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/967be4fa-a58f-357e-90e5-58974c2f05f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.29.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b0:f0:e5:d2:51:17:7d:a7:dc:b6:7c:59:f1:8c:f8:6f:93: 7b:b0:0a:a7:7c:74:3a:d1:59:e8:bf:73:55:a2:1a:b2:62:eb: 15:9a:dd:08:20:83:c4:f9:23:e4:98:f4:88:43:4a:c5:01:c8: dd:52:c6:10:d5:db:ac:95:b0:4a:ef:f3:59:dd:b4:28:ea:b4: 3f:2a:6c:b2:22:40:38:7b:a1:6d:fc:c2:6f:43:03:43:a9:47: 67:1d:d8:13:82:58:e9:87:87:9d:3f:c0:4f:ac:08:0a:ab:83: 10:a1:3a:16:9d:31:ff:f8:e8:6e:c9:b8:04:60:18:92:bf:a1: c6:22:10:ff:fa:ba:97:eb:7e:8b:09:d1:98:4a:78:fc:47:49: da:a8:27:b5:94:1b:75:44:e7:f5:bb:52:87:53:b4:dc:07:c6: 29:98:76:d6:d2:90:90:db:35:d2:aa:34:3f:89:4b:90:58:ee: 43:97:f6:44:55:ae:86:a5:11:8d:96:e1:39:ec:85:a5:5a:f4: 29:df:3e:05:c7:00:3f:c6:b3:ff:2d:27:93:d4:26:94:16:33: 38:07:5a:3d:8f:03:51:be:72:d9:eb:17:6f:b9:4f:4e:07:8c: c3:e8:83:58:60:77:90:a7:71:55:f1:21:c2:ff:55:29:22:34: ee:7e:52:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswYmZphKzbzg608AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWM1YzUyNDAtMTBmMi00ZGY1LTkyN2EtNmViNTBjYWI5YjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTTMVONYOn8jUjvX2iDeeBHcymeA7JmYGn50 PVN3mr9EKeKOduPfajHndkC0P/XQUEG5n/oq6q5APRkLuB4lilhoKUegu7eGkDKc 08pLZAm7V2M4VU52QfZXCOxy5VhgOp5qE7CSoTxlvAKUVA9L5hQlVp3aOa8r3JzS ylh8V0nvF0aEtonxQKDb6G8iuHlu3YarBgIiaPls4uzZ2HTufeCOCWde8bnKMx9o HpZNWpRA3bxjwsvJ2/2RcckihhuvtrWnAFMZt+KaYq7OUjuU+720oSGVuMIJv6Fy +Rv4YZJ4t3RSibFsroQopsEDlYzKBmzakRnIZXpkMSad+3BQDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNag/YahCDIuNYq9IXlOvtJvtau/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY3YmU0ZmEtYTU4Zi0z NTdlLTkwZTUtNTg5NzRjMmYwNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSR3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2w8OXSURd9p9y2fFnxjPhvk3uwCqd8dDrRWei/c1WiGrJi6xWa3Qgg g8T5I+SY9IhDSsUByN1SxhDV26yVsErv81ndtCjqtD8qbLIiQDh7oW38wm9DA0Op R2cd2BOCWOmHh50/wE+sCAqrgxChOhadMf/46G7JuARgGJK/ocYiEP/6upfrfosJ 0ZhKePxHSdqoJ7WUG3VE5/W7UodTtNwHximYdtbSkJDbNdKqND+JS5BY7kOX9kRV roalEY2W4TnshaVa9CnfPgXHAD/Gs/8tJ5PUJpQWMzgHWj2PA1G+ctnrF2+5T04H jMPog1hgd5CncVXxIcL/VSkiNO5+UrI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:03:22 2025 by rpki-client