$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab2f8f6f-a4b7-3356-bf61-ab242d309d83.roa File: ab2f8f6f-a4b7-3356-bf61-ab242d309d83.roa (raw, json) Hash identifier: 6UoYpNSjqo3udTjvHOAnsCp6C+yGX0/lD0yXAiOTBP0= Subject key identifier: 8D:55:5D:EB:86:F8:AB:ED:AF:DE:A0:5E:35:C2:83:04:C5:7C:FC:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2FD34C83CD0D2B936B120 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab2f8f6f-a4b7-3356-bf61-ab242d309d83.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.158.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:fd:34:c8:3c:d0:d2:b9:36:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=76ffeedd-4d56-4bd5-a557-d77f5dedccfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:61:c7:9f:51:8d:06:59:20:17:d2:72:12: 20:24:ed:02:ae:ab:4c:bc:44:10:d5:92:65:8a:ab: 29:c3:bc:c8:18:9d:10:a1:fd:82:48:16:98:96:ea: b4:d9:fb:80:2f:bb:cf:12:b4:51:00:a8:45:ad:ec: 90:e6:af:a7:02:1c:bd:23:30:a3:b8:32:cc:98:3d: 28:c5:43:a3:9b:32:d9:fc:fc:de:e8:e4:02:af:50: c5:1e:80:df:b3:78:8e:96:4e:66:f7:c4:d9:61:51: 37:d8:cf:cb:50:cc:b1:c5:29:0d:68:29:e1:9d:fe: 0a:cf:ec:15:eb:15:22:4c:bb:6f:97:26:68:fb:75: f6:bc:c4:30:ea:0e:fa:bf:69:53:4f:2b:fd:cc:97: 7e:91:53:d4:f8:47:3f:58:fc:19:84:c6:39:e1:9c: d6:88:5f:76:7c:f9:70:ab:9e:68:a4:02:43:8e:d5: fb:89:64:d9:0f:32:74:aa:e0:9b:a1:15:aa:b1:f3: 62:23:27:65:82:2e:81:83:b8:aa:3f:41:ad:3d:07: 38:56:14:6a:47:24:dd:2a:59:40:71:a0:9c:da:7c: 2c:9c:4a:11:91:9f:9a:47:14:9a:d2:e0:e7:fc:48: e4:71:40:47:ca:75:5b:06:01:5a:c4:2c:40:e3:26: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:55:5D:EB:86:F8:AB:ED:AF:DE:A0:5E:35:C2:83:04:C5:7C:FC:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab2f8f6f-a4b7-3356-bf61-ab242d309d83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3b:a5:1a:8b:84:fc:67:75:40:a0:76:98:e9:32:e0:5c:8a: 10:6a:cd:55:1e:61:64:ff:60:a8:c8:e6:d1:77:f8:10:16:e3: c2:07:3d:d8:1b:e4:22:c4:50:3a:10:0b:26:96:ad:9e:03:40: 61:0c:47:15:30:e9:d5:dd:23:f6:99:b4:4c:05:3d:64:9b:6a: 83:d3:0d:99:01:4b:35:b7:51:66:03:85:48:69:ac:d3:29:89: 2c:aa:0e:4c:bb:0f:23:c3:4e:f5:46:ab:38:96:2e:bb:20:2d: e1:3f:97:a3:aa:42:ea:e1:90:3f:20:3b:e4:7f:dc:ad:e4:6e: bc:43:f5:a2:26:2e:a3:8b:f0:de:6b:f1:5b:c3:bf:96:41:1d: 02:08:a6:8e:ae:5c:7a:12:c6:f2:e6:c0:83:f9:48:e6:c6:59: 4c:47:34:5d:47:18:c4:6e:f6:3d:e1:3a:38:d6:e7:23:a7:d5: 90:11:02:38:5c:7d:0a:e2:7c:00:4d:e8:dd:f0:63:35:8c:7f: 17:41:47:fd:91:a0:bf:e2:9c:64:44:85:78:87:35:31:4e:a0: eb:50:b8:32:74:5c:96:2f:d8:20:ed:4a:b5:4b:ac:f3:d1:c7: 63:36:b3:f6:f6:eb:b1:91:d7:04:9c:3f:87:71:75:ca:bc:aa: f4:7d:52:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswv00yDzQ0rk2sSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzZmZmVlZGQtNGQ1Ni00YmQ1LWE1NTctZDc3ZjVkZWRjY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Bhx59RjQZZIBfSchIgJO0CrqtMvEQQ1ZJl iqspw7zIGJ0Qof2CSBaYluq02fuAL7vPErRRAKhFreyQ5q+nAhy9IzCjuDLMmD0o xUOjmzLZ/Pze6OQCr1DFHoDfs3iOlk5m98TZYVE32M/LUMyxxSkNaCnhnf4Kz+wV 6xUiTLtvlyZo+3X2vMQw6g76v2lTTyv9zJd+kVPU+Ec/WPwZhMY54ZzWiF92fPlw q55opAJDjtX7iWTZDzJ0quCboRWqsfNiIydlgi6Bg7iqP0GtPQc4VhRqRyTdKllA caCc2nwsnEoRkZ+aRxSa0uDn/EjkcUBHynVbBgFaxCxA4yY6OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1VXeuG+Kvtr96gXjXCgwTFfPxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWIyZjhmNmYtYTRiNy0z MzU2LWJmNjEtYWIyNDJkMzA5ZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA7pRqLhPxndUCgdpjpMuBcihBqzVUeYWT/YKjI5tF3+BAW48IHPdgb 5CLEUDoQCyaWrZ4DQGEMRxUw6dXdI/aZtEwFPWSbaoPTDZkBSzW3UWYDhUhprNMp iSyqDky7DyPDTvVGqziWLrsgLeE/l6OqQurhkD8gO+R/3K3kbrxD9aImLqOL8N5r 8VvDv5ZBHQIIpo6uXHoSxvLmwIP5SObGWUxHNF1HGMRu9j3hOjjW5yOn1ZARAjhc fQrifABN6N3wYzWMfxdBR/2RoL/inGREhXiHNTFOoOtQuDJ0XJYv2CDtSrVLrPPR x2M2s/b267GR1wScP4dxdcq8qvR9UrU= -----END CERTIFICATE-----Generated at Sun Aug 24 03:59:40 2025 by rpki-client