$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8639b72-5e2b-32f0-82d2-5d7eab80e05d.roa File: a8639b72-5e2b-32f0-82d2-5d7eab80e05d.roa (raw, json) Hash identifier: lYr9qNqzllTtmcMzx46ljzzuepC3T5oXNqrSUehwGLM= Subject key identifier: B5:29:68:81:EB:D1:75:AD:53:A5:A6:A8:1C:8B:F1:9E:56:3B:A6:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC523C6049A004E2B026200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8639b72-5e2b-32f0-82d2-5d7eab80e05d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.170.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:23:c6:04:9a:00:4e:2b:02:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bcf0d487-5c90-43d2-93ed-bb0ae531ae01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:45:8b:e9:18:80:b0:14:c6:e6:0c:ee:44: 32:fd:10:44:a6:15:78:fd:90:48:96:91:2c:14:88: 55:18:05:b6:73:cd:0b:0b:0c:84:a2:67:41:5b:6d: 63:43:02:14:89:02:d4:41:95:02:8f:d2:1f:9d:be: eb:78:0f:45:a5:08:bd:3e:80:eb:ff:69:1c:db:ba: e3:5a:fd:4f:c0:d4:59:4d:63:32:e6:05:75:dc:d7: c2:bb:c2:86:58:1e:a7:7d:39:d9:28:18:cf:5a:52: 62:23:e4:b3:1c:d7:8e:7e:2f:c6:5b:d3:96:c3:70: 25:93:57:7b:a3:54:22:4e:80:96:c9:01:08:7d:26: 7c:64:b0:f8:09:85:d8:48:fd:7a:71:d0:05:67:6f: 63:77:9b:e7:9d:34:60:0a:7a:48:0f:af:d6:73:8c: 85:a0:82:82:c3:3e:a3:37:3b:b8:f8:f9:a7:bb:5b: b7:16:8e:85:2c:e5:c4:cf:84:1b:91:7f:f3:16:51: 40:64:90:34:37:b1:bd:f2:4b:80:63:11:72:f5:e6: 78:a0:82:9c:61:ed:a9:f5:18:60:99:75:f0:43:2a: cc:5c:e5:ca:c4:3f:20:2c:71:22:44:24:02:84:34: bb:70:13:0a:d5:22:f1:bd:4e:5b:f5:63:b8:68:6a: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:29:68:81:EB:D1:75:AD:53:A5:A6:A8:1C:8B:F1:9E:56:3B:A6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8639b72-5e2b-32f0-82d2-5d7eab80e05d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:76:3a:ed:7f:11:ba:08:98:61:58:0f:7b:2d:9e:9e:b8:ef: 58:10:95:2a:19:c2:df:08:74:5a:f9:87:31:7c:00:8f:8b:8e: cd:bc:f4:a5:ab:fb:20:ce:35:6c:7b:8b:12:3c:53:17:e4:a0: 7a:00:c9:5d:9f:08:b2:75:cf:36:3e:c4:1e:63:2b:46:5a:6c: 33:e7:f0:46:60:33:20:c4:bc:b6:4c:d9:ad:94:b0:2c:31:6a: 80:bd:2c:59:5a:6b:5b:4e:9d:1a:54:7d:e9:a0:a4:4a:89:4a: df:16:fe:65:0f:90:fc:03:17:9d:cd:37:7d:90:dd:82:5b:b9: 6a:84:8e:6f:f6:6c:06:90:c1:5d:f0:ca:4c:c6:29:1f:2d:c0: 22:06:b6:da:02:4c:71:3a:50:d8:70:47:a7:49:0c:49:8d:50: 4a:97:ac:a1:87:3a:86:0e:bb:65:af:93:7a:79:e8:d5:03:ec: 11:42:2e:38:66:e5:73:ce:16:61:94:86:eb:bf:6e:62:27:62: e4:5b:8a:00:1b:74:c5:d8:e7:25:3e:66:95:71:97:9d:53:5e: e1:e7:f6:82:05:8b:59:d0:b9:f3:a3:48:e8:da:48:18:c7:29: 6b:d3:57:b1:48:32:37:4d:0b:97:bd:94:93:2d:f5:da:eb:e6: bf:c8:24:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxSPGBJoATisCYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmNmMGQ0ODctNWM5MC00M2QyLTkzZWQtYmIwYWU1MzFhZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfRFi+kYgLAUxuYM7kQy/RBEphV4/ZBIlpEs FIhVGAW2c80LCwyEomdBW21jQwIUiQLUQZUCj9Ifnb7reA9FpQi9PoDr/2kc27rj Wv1PwNRZTWMy5gV13NfCu8KGWB6nfTnZKBjPWlJiI+SzHNeOfi/GW9OWw3Alk1d7 o1QiToCWyQEIfSZ8ZLD4CYXYSP16cdAFZ29jd5vnnTRgCnpID6/Wc4yFoIKCwz6j Nzu4+Pmnu1u3Fo6FLOXEz4QbkX/zFlFAZJA0N7G98kuAYxFy9eZ4oIKcYe2p9Rhg mXXwQyrMXOXKxD8gLHEiRCQChDS7cBMK1SLxvU5b9WO4aGrlPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUpaIHr0XWtU6WmqByL8Z5WO6YrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTg2MzliNzItNWUyYi0z MmYwLTgyZDItNWQ3ZWFiODBlMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN2Ou1/EboImGFYD3stnp6471gQlSoZwt8IdFr5hzF8AI+Ljs289KWr +yDONWx7ixI8UxfkoHoAyV2fCLJ1zzY+xB5jK0ZabDPn8EZgMyDEvLZM2a2UsCwx aoC9LFlaa1tOnRpUfemgpEqJSt8W/mUPkPwDF53NN32Q3YJbuWqEjm/2bAaQwV3w ykzGKR8twCIGttoCTHE6UNhwR6dJDEmNUEqXrKGHOoYOu2Wvk3p56NUD7BFCLjhm 5XPOFmGUhuu/bmInYuRbigAbdMXY5yU+ZpVxl51TXuHn9oIFi1nQufOjSOjaSBjH KWvTV7FIMjdNC5e9lJMt9drr5r/IJLY= -----END CERTIFICATE-----Generated at Sun Aug 24 01:18:38 2025 by rpki-client