$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1acb7ab-184c-36a8-8d18-35469e2bf00c.roa File: a1acb7ab-184c-36a8-8d18-35469e2bf00c.roa (raw, json) Hash identifier: 8R7pnYgBiVwlrsyT3wuUYYYDm/OGp5lUWRr8YYDisY8= Subject key identifier: 1D:17:8A:45:C4:BC:F9:04:76:CF:64:CC:29:1A:F5:0F:91:C7:1B:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1A7872DAC60CD79ABFA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1acb7ab-184c-36a8-8d18-35469e2bf00c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.196.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:a7:87:2d:ac:60:cd:79:ab:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c8b2d28f-fbd5-4224-840e-ce07a9e23339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:d0:5c:47:b5:83:96:e2:0b:dc:ed:e3:d3: 56:76:eb:29:59:de:57:b1:a6:8b:16:c4:c8:82:6d: d4:19:46:57:23:4a:84:1f:9c:b4:c4:2d:27:bd:fc: 91:7b:42:5c:8a:5b:14:9b:27:43:23:d9:1d:43:8b: 9d:4c:7f:8f:b5:65:84:f4:6b:1a:47:22:2e:ab:a4: 0b:7d:27:cd:2c:39:14:a6:9a:b5:b4:31:2c:0f:c7: 82:da:c9:f9:e5:e0:c9:d2:77:8f:bc:29:ff:5e:e5: 5b:a8:53:6e:b2:81:9e:b0:fa:64:58:46:fc:f6:5b: c5:dd:46:f1:89:ec:51:f0:02:57:d6:0b:56:0f:16: 4a:37:fe:3c:b5:40:75:fe:0c:6b:41:0e:bb:4d:b9: e8:72:ae:12:d9:a7:63:68:93:f9:2c:27:52:58:5a: aa:12:ff:1b:1a:09:59:65:7a:10:9d:68:b8:17:45: 93:05:00:5d:5c:2e:42:8e:11:06:ea:b2:7e:ed:13: 80:a3:ba:09:e6:cc:ff:6e:5e:de:60:0f:41:27:af: b4:ca:f8:2f:a5:50:e9:c3:95:f4:04:82:54:4c:cd: 7a:5b:19:07:8a:44:86:39:20:b2:30:a6:1a:c9:73: be:f0:78:da:2d:48:e7:15:09:7a:58:59:b8:8b:a6: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:17:8A:45:C4:BC:F9:04:76:CF:64:CC:29:1A:F5:0F:91:C7:1B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1acb7ab-184c-36a8-8d18-35469e2bf00c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:19:8a:d7:0a:4f:a7:e1:23:d6:c3:24:9a:37:14:59:7c:b1: 1d:b8:24:fd:8a:c1:78:3c:fb:74:08:e1:22:39:70:4f:e1:72: 3c:31:b7:bb:0c:38:00:2a:6e:15:45:f2:70:64:98:f2:47:12: bf:69:e6:80:c6:90:d5:e5:7d:5f:1f:8c:59:9a:73:4a:14:05: 84:3b:f9:ba:da:ed:77:4f:73:2e:73:da:9a:5d:15:e1:76:d5: 19:62:70:c9:30:70:12:9a:c7:1e:49:fa:6d:25:be:53:38:4f: a2:f5:05:d0:a8:4c:32:b1:96:70:85:61:a4:3d:23:26:9d:92: f7:5c:f7:55:e0:e9:f9:13:ae:f0:e4:1b:cb:59:74:eb:90:0a: 02:07:a1:9f:02:cb:2f:28:7c:0e:87:ac:36:b8:9c:18:68:d7: bc:2d:5f:f4:f7:02:ea:45:23:a9:40:53:ec:5c:da:b7:6e:e9: 03:ba:64:de:91:c6:6d:54:6e:be:ae:ed:f2:fe:de:02:a6:3a: f8:9f:1c:60:3d:5e:9a:a2:f7:cb:62:1d:66:17:e6:c0:63:08: 71:5f:6b:59:68:78:7b:7f:bb:81:58:da:5f:25:21:1d:8b:8f: 5f:29:84:9f:48:7a:7d:11:5c:65:51:ce:d2:08:34:fe:c2:22: 1f:2e:ab:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswaeHLaxgzXmr+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzhiMmQyOGYtZmJkNS00MjI0LTg0MGUtY2UwN2E5ZTIzMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5rQXEe1g5biC9zt49NWduspWd5XsaaLFsTI gm3UGUZXI0qEH5y0xC0nvfyRe0JcilsUmydDI9kdQ4udTH+PtWWE9GsaRyIuq6QL fSfNLDkUppq1tDEsD8eC2sn55eDJ0nePvCn/XuVbqFNusoGesPpkWEb89lvF3Ubx iexR8AJX1gtWDxZKN/48tUB1/gxrQQ67Tbnocq4S2adjaJP5LCdSWFqqEv8bGglZ ZXoQnWi4F0WTBQBdXC5CjhEG6rJ+7ROAo7oJ5sz/bl7eYA9BJ6+0yvgvpVDpw5X0 BIJUTM16WxkHikSGOSCyMKYayXO+8HjaLUjnFQl6WFm4i6bAuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0XikXEvPkEds9kzCka9Q+Rxxv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTFhY2I3YWItMTg0Yy0z NmE4LThkMTgtMzU0NjllMmJmMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCScRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgZitcKT6fhI9bDJJo3FFl8sR24JP2KwXg8+3QI4SI5cE/hcjwxt7sM OAAqbhVF8nBkmPJHEr9p5oDGkNXlfV8fjFmac0oUBYQ7+bra7XdPcy5z2ppdFeF2 1RlicMkwcBKaxx5J+m0lvlM4T6L1BdCoTDKxlnCFYaQ9Iyadkvdc91Xg6fkTrvDk G8tZdOuQCgIHoZ8Cyy8ofA6HrDa4nBho17wtX/T3AupFI6lAU+xc2rdu6QO6ZN6R xm1Ubr6u7fL+3gKmOvifHGA9Xpqi98tiHWYX5sBjCHFfa1loeHt/u4FY2l8lIR2L j18phJ9Ien0RXGVRztIINP7CIh8uq1g= -----END CERTIFICATE-----Generated at Sun Aug 24 05:38:00 2025 by rpki-client