$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21444dd-7adf-3320-8505-59a38cc9da1e.roa File: b21444dd-7adf-3320-8505-59a38cc9da1e.roa (raw, json) Hash identifier: MIaRjxnzHJR8p6ya8d4y2qnZPSG6L25fuxYPNGJYtv4= Subject key identifier: 44:A8:AC:95:05:EB:DF:99:61:10:02:6B:56:04:69:F6:85:F3:B0:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1E70245AE18905DCBA800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21444dd-7adf-3320-8505-59a38cc9da1e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 73.81.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:e7:02:45:ae:18:90:5d:cb:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5c8bd24e-994a-4adc-85d3-d9cc9d4b7f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:39:6f:a8:ad:ba:ec:55:9c:38:c3:5c:54: 26:12:b9:79:a1:02:63:64:32:ae:02:50:25:3f:48: f4:c9:e2:26:8f:b5:62:8f:91:bd:16:2d:f8:e4:b4: 62:b0:b5:55:5c:de:60:6a:c3:2f:44:42:28:f1:a8: 2a:86:91:fd:d5:55:8c:e0:38:48:6a:53:97:0d:b6: fe:73:c5:cd:be:4d:f1:9a:b7:4d:2f:d2:8e:90:d6: ca:84:c8:1b:f6:ef:42:9a:17:da:2a:f6:02:1a:41: 9b:68:79:6c:4d:50:4e:ac:2d:f0:e4:8b:66:9b:09: 97:d5:db:71:99:78:d1:65:aa:4b:3a:24:16:b0:5e: 87:06:ba:68:0a:2b:85:f5:db:eb:9a:5c:3a:33:ce: 06:a7:3f:b0:bb:86:9c:aa:36:cd:be:19:93:ab:43: bf:6a:41:d9:b7:3e:c2:27:ce:a3:ac:3d:e3:90:82: f2:a2:b3:87:7e:5e:4f:86:38:77:3d:fb:0f:ee:1d: 8e:7e:6e:02:18:e2:28:ee:f6:03:1c:c8:f4:78:de: 3f:9f:dc:53:3c:18:82:ab:38:35:c0:2b:38:f7:be: 0d:51:5b:fd:ff:77:53:b7:86:8a:9c:b7:d1:99:13: 03:33:b2:3a:1e:a1:26:6c:10:e2:93:d3:a3:0f:18: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:AC:95:05:EB:DF:99:61:10:02:6B:56:04:69:F6:85:F3:B0:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21444dd-7adf-3320-8505-59a38cc9da1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.81.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e1:cb:67:e7:9c:1e:34:f6:55:a0:d8:85:33:80:30:6d:00: 73:58:86:6f:34:e6:8a:d5:17:12:d6:6b:4d:a2:43:a3:6b:fa: 22:8b:e6:7e:29:a5:77:36:c9:44:13:77:0e:c6:64:ed:c4:d8: 83:da:d2:89:01:08:7f:05:d5:7a:34:be:bb:f3:6f:f7:be:25: ed:7a:78:ab:ba:c5:3c:c5:9d:b0:72:72:12:26:63:40:d3:44: 61:cc:50:a1:13:90:c6:8c:ff:32:1b:90:66:f6:e9:bc:31:25: 6c:04:2d:47:29:17:f4:17:b7:cb:da:ba:89:e3:bf:eb:18:16: 8b:60:c6:34:96:08:fe:4d:ca:f3:1f:7e:0c:49:36:5b:00:10: 23:ea:d9:2a:22:81:5e:07:23:d5:2f:62:66:dc:6f:96:77:65: 8a:d9:d1:07:80:6d:43:e9:f3:3c:ee:82:f8:b4:1e:d2:26:6c: 80:35:6c:3b:e2:a1:ac:d7:cb:60:fd:0e:b8:5e:f4:68:a7:11: 55:d8:3a:45:9f:b1:b4:c9:70:8d:ea:6c:7a:b2:b7:f7:40:37: 9f:68:fc:eb:b4:a4:38:48:58:26:4f:3c:26:ec:48:30:7f:b4: ec:ef:46:44:90:c6:07:ac:79:2f:ed:bf:fc:64:2a:ee:a3:5f: 37:45:a2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswecCRa4YkF3LqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWM4YmQyNGUtOTk0YS00YWRjLTg1ZDMtZDljYzlkNGI3ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicg5b6ituuxVnDjDXFQmErl5oQJjZDKuAlAl P0j0yeImj7Vij5G9Fi345LRisLVVXN5gasMvREIo8agqhpH91VWM4DhIalOXDbb+ c8XNvk3xmrdNL9KOkNbKhMgb9u9CmhfaKvYCGkGbaHlsTVBOrC3w5ItmmwmX1dtx mXjRZapLOiQWsF6HBrpoCiuF9dvrmlw6M84Gpz+wu4acqjbNvhmTq0O/akHZtz7C J86jrD3jkILyorOHfl5Phjh3PfsP7h2Ofm4CGOIo7vYDHMj0eN4/n9xTPBiCqzg1 wCs4974NUVv9/3dTt4aKnLfRmRMDM7I6HqEmbBDik9OjDxhYnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESorJUF69+ZYRACa1YEafaF87DTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIxNDQ0ZGQtN2FkZi0z MzIwLTg1MDUtNTlhMzhjYzlkYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFThy2fnnB409lWg2IUzgDBtAHNYhm805orVFxLWa02iQ6Nr+iKL5n4p pXc2yUQTdw7GZO3E2IPa0okBCH8F1Xo0vrvzb/e+Je16eKu6xTzFnbBychImY0DT RGHMUKETkMaM/zIbkGb26bwxJWwELUcpF/QXt8vauonjv+sYFotgxjSWCP5NyvMf fgxJNlsAECPq2SoigV4HI9UvYmbcb5Z3ZYrZ0QeAbUPp8zzugvi0HtImbIA1bDvi oazXy2D9Drhe9GinEVXYOkWfsbTJcI3qbHqyt/dAN59o/Ou0pDhIWCZPPCbsSDB/ tOzvRkSQxgeseS/tv/xkKu6jXzdFoqk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:20:10 2025 by rpki-client