$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3aca7a8-a811-318e-a1b6-232fd2269a9f.roa File: b3aca7a8-a811-318e-a1b6-232fd2269a9f.roa (raw, json) Hash identifier: 1/l4rcgZn8GXpxPrfq10v4au1iEhYfdWuZOzoHVBV1Y= Subject key identifier: 1A:F9:3C:AE:60:2C:1F:04:9C:01:2E:C2:EB:C4:6D:EC:FF:52:4F:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE03208CF95E6EBF9E123E690 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3aca7a8-a811-318e-a1b6-232fd2269a9f.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 33287 IP address blocks: 73.188.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:32:08:cf:95:e6:eb:f9:e1:23:e6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=31000ac8-1b21-42f1-934b-278abb14c491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:d9:bb:15:91:d9:9b:c9:59:9b:49:d4:df: 6f:0d:62:b6:b8:3f:19:2a:0a:4c:24:6e:43:62:99: 27:21:bc:22:72:b5:38:6b:95:4e:ed:37:43:e6:a7: f5:c7:a1:ba:7a:19:84:78:a2:fb:cf:f6:47:85:f1: 4a:17:52:ec:14:0e:5e:c2:4a:77:e4:70:53:e6:16: 45:9c:bf:75:44:13:2b:7a:92:49:24:c9:f1:a7:ba: 5d:39:72:a0:f8:fb:e8:61:67:63:33:c6:67:70:2b: e9:36:23:6c:da:c9:85:68:af:5b:7b:9e:10:91:12: 49:d2:69:bc:cd:bd:dd:60:ef:bb:f6:8f:1c:a9:32: f2:31:cc:18:37:cd:7d:e3:0a:a1:b5:31:de:37:70: 6a:50:31:b3:da:a5:1c:cd:84:bb:4a:20:fe:8e:a2: 48:5e:39:ea:e3:eb:f1:d2:92:b1:65:56:5e:2f:cb: 80:11:39:3a:f7:51:89:bc:e9:88:aa:19:e9:27:dd: 57:a2:79:eb:09:f6:1e:60:1d:df:2f:77:f4:33:57: 6a:fa:0d:ba:ed:08:f3:8b:11:a1:b6:10:fa:0b:e9: 3f:98:e1:16:2e:78:ba:f4:87:86:79:d9:9a:86:6d: a5:36:9b:ad:1a:f0:0e:85:5b:12:38:83:8b:3f:29: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F9:3C:AE:60:2C:1F:04:9C:01:2E:C2:EB:C4:6D:EC:FF:52:4F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3aca7a8-a811-318e-a1b6-232fd2269a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.188.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:70:3a:12:72:28:ee:a9:9a:e2:85:91:23:8f:1f:5a:5b:f1: 1b:16:07:53:a7:aa:a2:bd:39:10:69:0b:96:df:fb:6d:76:05: af:1f:b8:90:08:2d:fb:64:25:28:dc:e0:a4:46:d0:6d:86:0b: 92:69:95:2d:2e:b2:1f:f4:32:42:1f:aa:13:87:38:f1:67:1e: 4b:4f:04:61:a9:60:35:0c:f2:7d:1b:b0:54:98:7e:77:20:d7: 0b:00:f3:7c:e1:2c:63:4b:8a:3f:32:11:a1:c9:7e:88:eb:0f: 71:b4:96:1c:91:93:3d:f9:9c:ef:40:f5:c9:1c:c0:9f:4d:5b: eb:e9:ea:08:61:25:98:8e:4c:bc:ab:3a:6a:7f:39:09:44:7f: 48:2f:ce:40:7b:dc:cf:de:12:64:50:a7:8f:49:91:50:9d:9e: 29:74:21:2a:a5:dc:6e:e6:6f:11:2a:fb:f8:3d:86:6c:e0:50: 37:21:d2:5c:d1:29:09:6d:be:ea:d8:e3:c9:21:87:35:cb:34: e1:6e:13:73:ae:93:9c:8f:0e:7e:6a:f5:65:71:55:3b:19:73: 48:64:47:74:14:8b:ad:b4:18:ea:c8:7a:72:ed:a1:d7:ea:ee: b5:65:32:23:1b:10:1a:d0:03:fb:f4:38:6a:99:b0:36:9b:22: d0:2c:96:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMgjPlebr+eEj5pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk MzEwMDBhYzgtMWIyMS00MmYxLTkzNGItMjc4YWJiMTRjNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu/ZuxWR2ZvJWZtJ1N9vDWK2uD8ZKgpMJG5D YpknIbwicrU4a5VO7TdD5qf1x6G6ehmEeKL7z/ZHhfFKF1LsFA5ewkp35HBT5hZF nL91RBMrepJJJMnxp7pdOXKg+PvoYWdjM8ZncCvpNiNs2smFaK9be54QkRJJ0mm8 zb3dYO+79o8cqTLyMcwYN8194wqhtTHeN3BqUDGz2qUczYS7SiD+jqJIXjnq4+vx 0pKxZVZeL8uAETk691GJvOmIqhnpJ91XonnrCfYeYB3fL3f0M1dq+g267QjzixGh thD6C+k/mOEWLni69IeGedmahm2lNputGvAOhVsSOIOLPykAVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr5PK5gLB8EnAEuwuvEbez/Uk9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjNhY2E3YTgtYTgxMS0z MThlLWExYjYtMjMyZmQyMjY5YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASbzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANNwOhJyKO6pmuKFkSOPH1pb8RsWB1OnqqK9ORBpC5bf+212Ba8fuJAI LftkJSjc4KRG0G2GC5JplS0ush/0MkIfqhOHOPFnHktPBGGpYDUM8n0bsFSYfncg 1wsA83zhLGNLij8yEaHJfojrD3G0lhyRkz35nO9A9ckcwJ9NW+vp6ghhJZiOTLyr Omp/OQlEf0gvzkB73M/eEmRQp49JkVCdnil0ISql3G7mbxEq+/g9hmzgUDch0lzR KQltvurY48khhzXLNOFuE3Ouk5yPDn5q9WVxVTsZc0hkR3QUi620GOrIenLtodfq 7rVlMiMbEBrQA/v0OGqZsDabItAsluQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:07:32 2025 by rpki-client