$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad309d07-bd66-35cc-a73b-df7e3523d956.roa File: ad309d07-bd66-35cc-a73b-df7e3523d956.roa (raw, json) Hash identifier: U25VFTcdZ8ZZ4rT3Lkh8ucqGwzTwrltC855OsWAMzf4= Subject key identifier: F5:3F:21:2E:E5:1F:1A:AD:CF:23:B8:45:34:03:7A:64:C5:47:85:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC538E7A175B25AEF764780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad309d07-bd66-35cc-a73b-df7e3523d956.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.223.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:38:e7:a1:75:b2:5a:ef:76:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ca4c895e-da7d-4c5d-ba7f-f898a8f464fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:ab:4f:fd:bc:20:f4:eb:4b:63:0e:cb:dc: fa:73:09:c4:67:61:55:07:06:08:d4:73:00:3f:52: a7:31:54:97:35:be:03:48:87:f3:36:d5:8c:60:c0: 20:0c:16:e3:c6:53:eb:ca:fa:2e:a9:03:f5:07:f1: 6d:b6:68:57:72:5c:29:d4:ec:06:9f:da:25:01:49: 8e:ba:53:3c:c7:09:c4:88:8e:dd:bd:ea:eb:c9:db: e3:f1:e0:df:20:55:7d:1d:8c:b0:90:c7:51:27:71: 4b:64:da:95:64:dc:0a:db:06:11:83:dd:df:c3:f2: 49:42:d5:75:c2:9e:a7:21:32:d0:1f:6c:f0:31:f9: e7:9f:35:05:8b:d6:8a:ec:44:7c:09:55:b8:7d:0c: f0:e8:1a:17:03:b4:ea:d3:c9:70:50:da:fb:4b:8a: 64:fc:ef:1d:98:cb:fd:e3:87:55:7c:0c:dd:8a:97: c7:52:96:6c:ae:42:84:5f:36:85:a7:9a:e6:48:bd: b0:44:0a:4e:bb:d1:bc:a0:cb:49:2c:98:b5:31:a1: e8:a8:3d:cd:54:59:2e:1e:e5:23:6a:f6:7a:7e:36: 15:30:c3:09:6e:61:f0:84:c9:c0:8b:2c:6c:fe:d6: 76:8b:09:ae:d0:d3:f3:80:89:2c:58:8f:32:c6:66: 5e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3F:21:2E:E5:1F:1A:AD:CF:23:B8:45:34:03:7A:64:C5:47:85:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad309d07-bd66-35cc-a73b-df7e3523d956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:d7:6a:14:53:4b:b9:98:5f:3e:22:00:3c:35:ef:8b:73:ec: c0:30:99:75:d5:45:1c:e0:f6:49:ce:c2:8b:b3:e9:a2:23:1a: 46:4a:f1:df:1d:7d:9a:15:f4:3d:7f:5f:b0:af:fb:ae:10:5b: c3:87:67:5b:96:9d:da:4b:a6:c5:66:4d:23:32:06:50:a2:50: 2e:a5:a1:9f:b4:38:74:3c:d1:5b:c1:64:47:94:1a:f4:68:a1: dd:a0:af:85:64:b2:79:d6:30:14:aa:7c:e6:e3:a6:c8:81:f4: 86:7c:e7:ca:b6:42:d5:92:5e:9c:45:14:c0:af:47:df:53:a4: d4:88:6c:5c:a3:b7:7c:4a:bc:85:8b:da:b8:cf:0f:34:64:98: e6:9c:39:4f:27:29:71:0c:17:9d:ee:99:70:ed:2d:01:e5:61: 69:1a:4d:5d:48:a0:11:65:2d:f4:03:7e:af:0e:6f:5c:45:95: 17:b8:ca:f8:d1:2a:b6:c1:a7:20:6e:dc:ef:18:38:74:61:00: e4:1a:90:2f:83:55:5c:19:c2:90:9a:b8:f0:6c:4f:d0:28:89: a3:4e:65:45:17:a4:9f:59:23:91:bc:e0:58:08:85:7f:c8:e1: 49:2c:50:52:63:5d:84:71:23:e0:e6:0d:8a:4f:b7:ca:25:a4: 7e:57:1d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxTjnoXWyWu92R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk Y2E0Yzg5NWUtZGE3ZC00YzVkLWJhN2YtZjg5OGE4ZjQ2NGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sKrT/28IPTrS2MOy9z6cwnEZ2FVBwYI1HMA P1KnMVSXNb4DSIfzNtWMYMAgDBbjxlPryvouqQP1B/FttmhXclwp1OwGn9olAUmO ulM8xwnEiI7dverrydvj8eDfIFV9HYywkMdRJ3FLZNqVZNwK2wYRg93fw/JJQtV1 wp6nITLQH2zwMfnnnzUFi9aK7ER8CVW4fQzw6BoXA7Tq08lwUNr7S4pk/O8dmMv9 44dVfAzdipfHUpZsrkKEXzaFp5rmSL2wRApOu9G8oMtJLJi1MaHoqD3NVFkuHuUj avZ6fjYVMMMJbmHwhMnAiyxs/tZ2iwmu0NPzgIksWI8yxmZe5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPU/IS7lHxqtzyO4RTQDemTFR4UfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQzMDlkMDctYmQ2Ni0z NWNjLWE3M2ItZGY3ZTM1MjNkOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/XahRTS7mYXz4iADw174tz7MAwmXXVRRzg9knOwouz6aIjGkZK8d8d fZoV9D1/X7Cv+64QW8OHZ1uWndpLpsVmTSMyBlCiUC6loZ+0OHQ80VvBZEeUGvRo od2gr4VksnnWMBSqfObjpsiB9IZ858q2QtWSXpxFFMCvR99TpNSIbFyjt3xKvIWL 2rjPDzRkmOacOU8nKXEMF53umXDtLQHlYWkaTV1IoBFlLfQDfq8Ob1xFlRe4yvjR KrbBpyBu3O8YOHRhAOQakC+DVVwZwpCauPBsT9AoiaNOZUUXpJ9ZI5G84FgIhX/I 4UksUFJjXYRxI+DmDYpPt8olpH5XHWo= -----END CERTIFICATE-----Generated at Sun Aug 24 01:13:56 2025 by rpki-client