$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a35bf006-416e-35d5-a881-b8d4817813c1.roa File: a35bf006-416e-35d5-a881-b8d4817813c1.roa (raw, json) Hash identifier: OsQvhmdzEnBoDDMZWJ8ecQORFJXSfCHg/lPBYtgSXZo= Subject key identifier: 61:B8:BF:DA:DA:2A:F6:9D:E2:F9:66:2C:2E:0B:49:BC:51:DD:9A:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC261084D56A7358AF4CEC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a35bf006-416e-35d5-a881-b8d4817813c1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.176.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:61:08:4d:56:a7:35:8a:f4:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=803ebc82-1bfb-44e1-ad71-70bc59df769b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:97:ce:03:07:e5:96:56:a2:9f:25:e3:52: 16:51:66:38:cb:d5:2a:ec:d3:93:34:5c:71:0a:ca: 57:36:0e:1e:c9:11:8f:7e:37:25:05:4f:37:7d:0c: a3:8b:0b:05:d0:c8:2e:49:9e:61:0b:4f:e8:1b:f8: dc:cd:a2:26:68:16:3e:23:69:53:27:3a:af:54:06: b0:80:86:0b:2b:a5:a3:b1:a3:33:30:29:f8:57:03: 0e:ba:90:30:20:14:f5:36:42:99:fc:f2:3e:76:19: c1:76:15:96:6a:5c:10:86:d3:8b:9b:3d:d0:94:ca: 4d:e5:03:fd:b9:a7:09:83:49:b4:08:02:3d:57:ba: 60:29:39:8a:10:4c:e9:e9:12:bd:80:2a:61:29:6d: 4b:f8:41:86:8a:72:7c:96:ee:71:7a:ef:c5:b8:57: 96:12:67:bb:57:8a:ab:12:eb:13:3e:74:12:60:04: c5:bf:42:7f:73:71:3f:dc:bd:fd:8b:d8:f8:be:03: 1d:5b:85:00:f9:7b:d6:7b:dd:ae:8c:6b:82:3f:fe: 36:ec:03:64:73:37:e5:3c:d9:ca:a7:49:fe:01:f4: fc:cf:53:71:62:c3:5e:a4:3f:e8:09:42:ea:a6:e1: 70:bc:25:ff:b2:32:fc:4c:27:34:16:23:ca:0f:40: da:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B8:BF:DA:DA:2A:F6:9D:E2:F9:66:2C:2E:0B:49:BC:51:DD:9A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a35bf006-416e-35d5-a881-b8d4817813c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.176.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7c:7c:a3:1b:35:56:bb:7c:2c:fb:b1:5d:88:ef:84:b1:9b: 21:dc:b9:03:da:08:87:f2:f8:3a:dd:89:10:ed:8d:7b:51:24: d2:cc:51:6c:ec:b2:f8:fb:8d:3b:ad:43:fc:78:75:ee:f4:49: 61:a3:fa:c1:83:d8:d6:04:7f:d6:21:49:95:86:9e:13:90:ea: bb:62:af:8c:9f:a0:3f:d7:10:07:01:d0:6c:d6:be:9d:8e:9a: 73:b2:ba:f6:4d:8c:eb:7e:de:90:d4:72:51:fa:e1:65:8a:de: 8c:b5:42:a3:6d:c3:d0:a3:43:66:be:b3:ed:ca:4f:55:81:53: 36:65:13:bb:b1:22:25:d9:44:06:16:56:c2:11:3f:9b:80:e1: a2:78:f1:6c:59:30:53:db:dc:a5:4b:4d:4d:9d:2a:ce:3d:33: 91:ec:90:9e:a1:dc:38:e6:ad:8e:3f:e0:33:26:4b:0f:bc:24: ee:3b:d5:59:2e:9c:c2:01:52:a1:ad:40:9c:9c:a4:59:40:57: 48:6b:6c:2e:81:fd:2b:8d:6d:1d:73:a5:6b:b5:5a:72:bb:e4: c0:5e:30:83:c2:1f:8c:cb:8b:f8:af:4a:b2:44:78:fa:b8:c7: 46:25:05:69:6f:d1:87:53:ff:f7:a2:0f:90:29:70:e5:20:37: b9:18:28:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswmEITVanNYr0zsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODAzZWJjODItMWJmYi00NGUxLWFkNzEtNzBiYzU5ZGY3NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07OXzgMH5ZZWop8l41IWUWY4y9Uq7NOTNFxx CspXNg4eyRGPfjclBU83fQyjiwsF0MguSZ5hC0/oG/jczaImaBY+I2lTJzqvVAaw gIYLK6WjsaMzMCn4VwMOupAwIBT1NkKZ/PI+dhnBdhWWalwQhtOLmz3QlMpN5QP9 uacJg0m0CAI9V7pgKTmKEEzp6RK9gCphKW1L+EGGinJ8lu5xeu/FuFeWEme7V4qr EusTPnQSYATFv0J/c3E/3L39i9j4vgMdW4UA+XvWe92ujGuCP/427ANkczflPNnK p0n+AfT8z1NxYsNepD/oCULqpuFwvCX/sjL8TCc0FiPKD0DaBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG4v9raKvad4vlmLC4LSbxR3ZrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM1YmYwMDYtNDE2ZS0z NWQ1LWE4ODEtYjhkNDgxNzgxM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN8fKMbNVa7fCz7sV2I74SxmyHcuQPaCIfy+DrdiRDtjXtRJNLMUWzs svj7jTutQ/x4de70SWGj+sGD2NYEf9YhSZWGnhOQ6rtir4yfoD/XEAcB0GzWvp2O mnOyuvZNjOt+3pDUclH64WWK3oy1QqNtw9CjQ2a+s+3KT1WBUzZlE7uxIiXZRAYW VsIRP5uA4aJ48WxZMFPb3KVLTU2dKs49M5HskJ6h3DjmrY4/4DMmSw+8JO471Vku nMIBUqGtQJycpFlAV0hrbC6B/SuNbR1zpWu1WnK75MBeMIPCH4zLi/ivSrJEePq4 x0YlBWlv0YdT//eiD5ApcOUgN7kYKGI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:37:58 2025 by rpki-client