$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95d621a-36c4-3c4f-9a53-1bdc5363c6e1.roa File: a95d621a-36c4-3c4f-9a53-1bdc5363c6e1.roa (raw, json) Hash identifier: 2JY5zEU8YTG2tUWpPjq9Ta5m9xjyDuiKrW6an6P9Esc= Subject key identifier: 03:CF:C1:64:3D:BD:68:55:CC:E9:F9:26:77:F6:0A:47:F1:93:67:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC26045245CD3182C677540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95d621a-36c4-3c4f-9a53-1bdc5363c6e1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.168.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:60:45:24:5c:d3:18:2c:67:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b67cc3fb-1abe-4adf-9dd6-6063c7909c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:c3:bf:3c:fd:96:3b:16:fc:86:33:f9:14: d6:63:dc:99:a2:d2:47:5c:9d:c3:99:fb:22:12:a0: 80:ec:01:c9:a5:e3:68:4b:8b:07:6f:c6:ed:0c:be: 5f:5f:fa:74:a9:71:62:11:e6:58:02:04:2b:d9:23: bc:d3:f5:3a:f2:1f:17:24:90:f6:ba:6e:e1:99:31: c1:ec:dd:18:42:15:99:81:2c:ca:e5:0a:c4:a1:20: 03:35:15:c9:a4:f2:8c:01:b9:be:97:5a:30:af:b5: 02:fa:e6:89:7c:f0:6b:dc:3b:07:b8:17:bc:33:dc: f2:76:54:00:c5:cf:b6:a3:1a:dc:99:85:a9:01:52: c4:46:7a:68:c4:39:67:9b:5d:07:7e:d3:ed:d2:8d: 24:f4:1a:d6:f7:41:91:d3:8f:91:0b:ed:90:b3:de: cd:a6:c3:b9:5f:1e:be:4e:a7:2d:f1:ea:b0:8e:d6: 46:95:7a:d9:d7:24:b3:9e:21:a2:35:2e:1d:dc:8e: 92:b5:05:89:b1:55:95:ed:c3:e4:79:82:c8:aa:46: d0:44:83:3b:b1:9c:7e:65:72:77:5f:ad:e2:ae:35: f1:bd:34:be:94:5a:de:61:c9:e5:8b:61:fe:e3:3f: ef:f3:a0:26:cb:63:f7:a2:9e:e7:43:ae:96:47:f5: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:C1:64:3D:BD:68:55:CC:E9:F9:26:77:F6:0A:47:F1:93:67:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95d621a-36c4-3c4f-9a53-1bdc5363c6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.168.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:29:e0:93:cd:8e:ed:26:fa:dd:89:df:f8:9a:f7:85:d2:06: d4:34:fd:50:4b:69:bd:34:61:7d:50:97:26:93:40:34:c9:9f: 20:1f:bf:77:72:4c:b4:81:64:2f:d5:ae:bf:c0:01:c4:7a:5e: 96:b8:29:e0:3e:68:19:fd:85:2b:d8:ba:54:c6:fa:69:c7:dc: ee:c1:5c:22:51:17:27:c7:8d:de:3c:df:b3:44:53:40:8e:1c: 36:d0:25:6f:7a:83:f3:2d:2f:15:bf:06:9e:7e:35:3d:12:18: 3a:0d:7e:a1:59:b0:0f:9b:f1:ef:2c:b8:3a:40:bb:6a:be:d6: 99:89:00:b9:df:1c:17:83:8a:af:cf:b8:a7:73:ff:e4:8b:db: dd:6f:b6:e8:95:87:5c:9c:cb:a5:81:57:77:cd:82:e3:87:0d: 76:dc:6c:12:26:34:85:56:6e:07:2a:34:5c:95:5b:e0:fe:95: f3:69:47:3e:3c:b2:54:d3:4b:da:38:0f:27:dd:36:8b:a1:b1: b8:f5:30:8b:1f:82:06:51:02:0b:8f:6e:55:3c:e7:5b:17:50: 62:b1:6c:73:cf:38:61:ae:59:a6:80:af:9d:06:b8:f9:41:fc: 88:7e:96:f6:39:29:97:25:e2:85:8b:0d:ab:0e:22:37:e2:ac: f6:51:1c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswmBFJFzTGCxndUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjY3Y2MzZmItMWFiZS00YWRmLTlkZDYtNjA2M2M3OTA5YzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL3Dvzz9ljsW/IYz+RTWY9yZotJHXJ3Dmfsi EqCA7AHJpeNoS4sHb8btDL5fX/p0qXFiEeZYAgQr2SO80/U68h8XJJD2um7hmTHB 7N0YQhWZgSzK5QrEoSADNRXJpPKMAbm+l1owr7UC+uaJfPBr3DsHuBe8M9zydlQA xc+2oxrcmYWpAVLERnpoxDlnm10HftPt0o0k9BrW90GR04+RC+2Qs97NpsO5Xx6+ Tqct8eqwjtZGlXrZ1ySzniGiNS4d3I6StQWJsVWV7cPkeYLIqkbQRIM7sZx+ZXJ3 X63irjXxvTS+lFreYcnli2H+4z/v86Amy2P3op7nQ66WR/XJwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPPwWQ9vWhVzOn5Jnf2Ckfxk2cWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk1ZDYyMWEtMzZjNC0z YzRmLTlhNTMtMWJkYzUzNjNjNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASahVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAp4JPNju0m+t2J3/ia94XSBtQ0/VBLab00YX1QlyaTQDTJnyAfv3dy TLSBZC/Vrr/AAcR6Xpa4KeA+aBn9hSvYulTG+mnH3O7BXCJRFyfHjd4837NEU0CO HDbQJW96g/MtLxW/Bp5+NT0SGDoNfqFZsA+b8e8suDpAu2q+1pmJALnfHBeDiq/P uKdz/+SL291vtuiVh1ycy6WBV3fNguOHDXbcbBImNIVWbgcqNFyVW+D+lfNpRz48 slTTS9o4DyfdNouhsbj1MIsfggZRAguPblU851sXUGKxbHPPOGGuWaaAr50GuPlB /Ih+lvY5KZcl4oWLDasOIjfirPZRHFI= -----END CERTIFICATE-----Generated at Sat Aug 23 23:13:20 2025 by rpki-client