$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f13488-afb2-307a-924a-2f141f81f635.roa File: a7f13488-afb2-307a-924a-2f141f81f635.roa (raw, json) Hash identifier: ENOzvAdMayxHHQicYBD2q+4cQ8FCDaNCaKfHi8K0uF8= Subject key identifier: 1C:63:35:EF:1E:0B:F9:E0:78:A2:28:E2:16:17:18:FF:4A:88:C9:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC38E82ACE9E93FBD844F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f13488-afb2-307a-924a-2f141f81f635.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.33.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:8e:82:ac:e9:e9:3f:bd:84:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ae7963fd-d6fe-4f73-a0f7-c4c4febce646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:ae:69:66:4d:71:ef:bd:4c:47:d7:63:4d: c0:77:e9:3d:8b:d0:11:63:00:f8:4f:be:e4:72:54: dd:27:ba:62:0c:8a:9f:cd:ff:12:a0:ea:a8:df:1c: 9f:5e:24:e7:89:29:d3:c7:5f:79:b5:c4:74:33:06: 70:f5:c4:2d:3e:c9:f8:0a:5c:c7:a4:ba:13:98:35: d6:08:7f:c9:04:ad:8d:59:82:d8:90:62:39:12:f1: 2c:49:d0:31:87:3b:3f:fa:1c:28:ea:d2:3a:77:b0: 6e:b6:e9:e9:3d:21:eb:8d:47:93:0d:ca:eb:9e:8a: 4b:5d:50:ab:00:b9:99:ba:78:4c:eb:67:eb:e7:c9: b7:83:df:07:59:3d:aa:79:6e:70:ba:50:e7:ed:ee: 72:9d:15:10:ae:8e:07:23:84:d2:82:7e:4f:72:c9: d7:8e:c8:a1:d8:96:0a:b1:3a:70:63:eb:62:48:de: 35:aa:5a:8b:70:e0:a7:b3:a9:73:0d:30:cf:45:3f: 0e:57:da:f8:71:8d:92:6e:e4:43:9d:a5:46:2a:67: d1:42:75:56:91:9a:8e:cb:54:fd:58:0d:cf:c0:d9: 5e:2c:b8:b7:91:78:6a:69:b2:fa:50:b0:47:1e:44: 92:59:e6:05:cb:d7:ce:ac:a5:1e:94:d7:c9:d4:8a: eb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:63:35:EF:1E:0B:F9:E0:78:A2:28:E2:16:17:18:FF:4A:88:C9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f13488-afb2-307a-924a-2f141f81f635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:47:ac:51:79:7d:b9:c2:ce:4b:f6:9f:b7:73:15:60:58:22: e0:db:c3:0b:f2:80:a7:b4:41:02:42:8b:1a:0e:a8:44:af:44: 7f:d0:49:aa:19:3e:cf:e1:c3:c2:0b:42:78:bb:1a:1e:4f:3d: 59:b9:3a:dc:10:3e:bf:72:b0:1a:2f:d7:b9:6a:98:4f:43:d6: cc:ef:9e:4b:fa:9e:be:6a:86:f3:69:29:ad:1d:04:d3:6b:f4: 4d:c0:4d:6d:90:c5:6e:ee:7a:8c:dd:a0:bc:91:a2:27:cc:ad: a3:8e:71:32:97:bd:ac:48:70:a0:ca:2e:ed:23:8f:ab:90:2d: d8:37:d7:aa:f6:be:de:8d:9d:08:f8:87:4b:f8:c6:fa:df:f7: f8:f5:4e:6b:78:ec:29:fd:2a:f9:8c:d9:1e:c5:00:e4:e6:95: dd:7a:e3:5a:2a:db:41:1f:2b:44:cf:da:57:b7:ab:68:e3:6e: b5:1c:7e:5b:98:be:8b:69:99:84:2c:1e:7e:79:ab:68:d3:2d: 90:3c:0b:65:30:2f:2f:c8:8e:18:7c:59:46:da:e7:03:1c:05: 2d:2b:8f:cf:40:e7:78:95:03:f1:65:ec:5f:a1:19:16:9d:a0: 0f:1b:b7:39:0a:8a:f7:e4:b4:ee:3d:20:3a:f0:38:74:ed:76: a2:57:33:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw46CrOnpP72ET0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWU3OTYzZmQtZDZmZS00ZjczLWEwZjctYzRjNGZlYmNlNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvneuaWZNce+9TEfXY03Ad+k9i9ARYwD4T77k clTdJ7piDIqfzf8SoOqo3xyfXiTniSnTx195tcR0MwZw9cQtPsn4ClzHpLoTmDXW CH/JBK2NWYLYkGI5EvEsSdAxhzs/+hwo6tI6d7ButunpPSHrjUeTDcrrnopLXVCr ALmZunhM62fr58m3g98HWT2qeW5wulDn7e5ynRUQro4HI4TSgn5PcsnXjsih2JYK sTpwY+tiSN41qlqLcOCns6lzDTDPRT8OV9r4cY2SbuRDnaVGKmfRQnVWkZqOy1T9 WA3PwNleLLi3kXhqabL6ULBHHkSSWeYFy9fOrKUelNfJ1IrrqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxjNe8eC/ngeKIo4hYXGP9KiMlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdmMTM0ODgtYWZiMi0z MDdhLTkyNGEtMmYxNDFmODFmNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSSHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJHrFF5fbnCzkv2n7dzFWBYIuDbwwvygKe0QQJCixoOqESvRH/QSaoZ Ps/hw8ILQni7Gh5PPVm5OtwQPr9ysBov17lqmE9D1szvnkv6nr5qhvNpKa0dBNNr 9E3ATW2QxW7ueozdoLyRoifMraOOcTKXvaxIcKDKLu0jj6uQLdg316r2vt6NnQj4 h0v4xvrf9/j1Tmt47Cn9KvmM2R7FAOTmld1641oq20EfK0TP2le3q2jjbrUcfluY votpmYQsHn55q2jTLZA8C2UwLy/Ijhh8WUba5wMcBS0rj89A53iVA/Fl7F+hGRad oA8btzkKivfktO49IDrwOHTtdqJXM5g= -----END CERTIFICATE-----Generated at Sun Aug 24 03:59:40 2025 by rpki-client