$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97a70b0b-a96f-3c06-b5af-e0268367fb40.roa File: 97a70b0b-a96f-3c06-b5af-e0268367fb40.roa (raw, json) Hash identifier: IUxgZ6K0tn43AKVCrtKOqdumGU1NUP6+HhK3qCBK32o= Subject key identifier: 67:5A:87:65:8C:55:AF:65:F1:A9:CB:1D:BB:EC:A5:60:BB:23:54:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1BBEDCA967CEF610D8680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97a70b0b-a96f-3c06-b5af-e0268367fb40.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.248.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:bb:ed:ca:96:7c:ef:61:0d:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9cbe0a63-a836-4f26-886b-85ad486ac71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:95:2c:70:1b:18:e9:44:53:8f:01:9d:86:cd: 59:63:d3:08:9f:ee:6a:7f:93:4d:df:52:ad:ce:1c: 8a:a6:91:6b:4d:b5:b1:db:9d:cc:10:b5:d8:c3:71: ef:9c:ca:08:ee:8a:ca:34:ec:07:66:31:5c:29:32: 99:06:8d:42:57:41:5c:55:2e:c0:e2:5f:f3:0a:94: e0:e6:19:d7:08:f6:24:95:13:1a:ed:d8:3e:a5:db: 73:2d:bc:eb:2e:96:1a:e7:f7:73:19:24:0e:0b:e7: ed:7d:6a:4a:29:15:65:90:25:62:72:1e:f3:4a:78: 10:2d:1b:3a:ae:17:50:0a:1a:ea:2b:12:5e:b4:19: b4:5e:cf:5d:c0:be:93:60:84:27:c1:2f:14:be:1b: a5:89:f1:c5:90:31:2c:3e:e3:bd:01:e3:24:11:a9: 31:a2:99:86:c7:74:55:80:af:d8:d3:f5:bc:46:46: d9:2e:ea:58:d4:cb:72:b5:c7:74:17:cc:97:f9:91: e4:5b:0f:86:29:f7:97:00:12:a8:01:59:5a:3f:e6: 6d:e3:3f:80:78:ef:19:1e:b3:06:19:c0:0a:74:e3: f4:09:8d:57:7f:3b:69:c3:a7:ba:43:f1:29:3c:9c: a7:12:82:42:d8:e5:2c:6b:2a:2f:c8:3a:a7:05:ec: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5A:87:65:8C:55:AF:65:F1:A9:CB:1D:BB:EC:A5:60:BB:23:54:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97a70b0b-a96f-3c06-b5af-e0268367fb40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:02:18:78:0e:95:8a:c7:88:1f:0f:e7:1c:2d:9f:14:f8:14: ce:46:4a:07:f7:43:e9:24:d9:11:d6:b9:97:e1:70:ff:3b:85: 66:15:31:f0:88:2b:ef:95:55:63:83:18:d0:65:82:60:db:76: d2:6a:e1:41:00:70:7e:d4:b8:01:8b:1d:b2:2f:dd:28:14:ed: c7:40:71:21:ed:66:3f:6e:2c:55:8d:98:b7:3a:95:b6:84:86: 78:76:fc:f1:a5:49:d3:1f:98:10:0a:74:37:10:29:0f:af:f5: d4:a7:0d:32:fc:f9:b1:85:f0:89:e4:3d:bb:9f:3f:d3:f9:d2: cb:68:c5:ed:4e:96:03:08:f6:be:ed:7b:5e:38:5a:6e:f4:92: af:2f:d4:da:43:95:6f:24:88:be:e1:78:45:7e:86:30:53:a3: 10:c9:56:4e:f5:f8:82:00:30:92:42:be:20:75:e6:4c:89:27: 1c:6f:9c:68:f5:2b:5d:e2:ce:38:95:03:aa:1e:06:f1:11:44: bf:02:5a:98:cf:55:14:a7:ef:59:a3:6a:23:4e:e9:e8:12:1e: 8b:ae:11:77:51:ce:7f:92:b0:2b:45:f5:2c:d7:ab:b7:f4:bf: 26:36:9f:d4:e2:60:e8:c0:b7:fe:ac:ea:2b:0e:53:a7:64:55: 0d:af:ea:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswbvtypZ872ENhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWNiZTBhNjMtYTgzNi00ZjI2LTg4NmItODVhZDQ4NmFjNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pUscBsY6URTjwGdhs1ZY9MIn+5qf5NN31Kt zhyKppFrTbWx253MELXYw3HvnMoI7orKNOwHZjFcKTKZBo1CV0FcVS7A4l/zCpTg 5hnXCPYklRMa7dg+pdtzLbzrLpYa5/dzGSQOC+ftfWpKKRVlkCVich7zSngQLRs6 rhdQChrqKxJetBm0Xs9dwL6TYIQnwS8UvhulifHFkDEsPuO9AeMkEakxopmGx3RV gK/Y0/W8RkbZLupY1Mtytcd0F8yX+ZHkWw+GKfeXABKoAVlaP+Zt4z+AeO8ZHrMG GcAKdOP0CY1Xfztpw6e6Q/EpPJynEoJC2OUsayovyDqnBeyHiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdah2WMVa9l8anLHbvspWC7I1TPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTdhNzBiMGItYTk2Zi0z YzA2LWI1YWYtZTAyNjgzNjdmYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfh2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8CGHgOlYrHiB8P5xwtnxT4FM5GSgf3Q+kk2RHWuZfhcP87hWYVMfCI K++VVWODGNBlgmDbdtJq4UEAcH7UuAGLHbIv3SgU7cdAcSHtZj9uLFWNmLc6lbaE hnh2/PGlSdMfmBAKdDcQKQ+v9dSnDTL8+bGF8InkPbufP9P50stoxe1OlgMI9r7t e144Wm70kq8v1NpDlW8kiL7heEV+hjBToxDJVk71+IIAMJJCviB15kyJJxxvnGj1 K13izjiVA6oeBvERRL8CWpjPVRSn71mjaiNO6egSHouuEXdRzn+SsCtF9SzXq7f0 vyY2n9TiYOjAt/6s6isOU6dkVQ2v6uk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:10:18 2025 by rpki-client