$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7aac637-3854-3257-b4f0-a3e97991c3dd.roa File: b7aac637-3854-3257-b4f0-a3e97991c3dd.roa (raw, json) Hash identifier: aDRaj6iSoObB1NGp85Tp8uoG/ocs0De8HLUqE1Lppt8= Subject key identifier: 54:DD:DD:0A:3D:39:ED:78:52:DB:15:28:5C:A1:62:E3:7B:9A:F1:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3B0EFA1F8D381C48EA180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7aac637-3854-3257-b4f0-a3e97991c3dd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.226.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:b0:ef:a1:f8:d3:81:c4:8e:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d98d8bea-57d8-4986-98b4-3bc13624b74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:d7:81:0a:6c:53:1a:dc:6d:a0:8d:d6:7c: 7f:fe:d3:f2:33:a3:eb:72:f2:db:fa:43:c3:70:7d: 95:fd:26:e8:43:82:c3:8e:ab:d1:69:e1:7f:25:22: 11:9e:9b:49:9e:93:2d:88:df:a8:65:9c:f4:76:8d: a9:a0:38:ea:cf:40:2e:3e:d7:a8:a1:2e:6c:db:2a: a8:02:ae:88:35:c7:24:3c:0c:aa:54:87:6d:92:bc: ba:14:d2:bc:00:a4:aa:c8:33:26:b5:29:81:7c:c3: 35:84:2e:6b:3d:e4:b6:65:73:2b:81:21:22:af:1f: 6c:4c:76:4e:77:1e:2e:18:c3:2c:dc:c0:2c:58:aa: ae:45:43:62:ec:9b:fb:45:79:04:d0:82:b3:b8:14: c5:fe:51:5a:99:fc:dd:d7:c2:5b:1f:bc:b8:0f:20: 16:ab:86:a7:b5:3a:65:fa:12:14:58:a9:98:92:8e: 36:6f:c3:9c:a8:c2:5b:9a:55:78:f1:19:ed:29:30: f4:3f:8c:f6:39:a9:32:35:2c:0b:c7:a6:87:85:04: 65:8e:61:03:87:8f:bd:a6:b0:6d:51:6d:61:5a:c2: d6:0f:34:4a:01:a7:b0:e4:c8:9a:97:27:62:c1:7c: 95:d1:fe:9c:e5:c0:fc:d4:08:ce:72:b2:28:31:8c: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DD:DD:0A:3D:39:ED:78:52:DB:15:28:5C:A1:62:E3:7B:9A:F1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7aac637-3854-3257-b4f0-a3e97991c3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.226.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:b2:a4:09:e7:1f:40:e7:44:b9:f0:c8:26:df:9f:b5:39:00: 8a:86:12:00:1a:00:91:bb:7c:33:e4:8d:e7:2e:3e:8e:92:67: ed:9d:8b:0e:e3:5c:42:eb:56:01:a7:35:4c:46:bd:87:09:4f: 46:e9:46:19:74:75:a9:01:ad:d7:ce:f0:d6:2b:6a:42:5f:e5: 3d:5b:1f:db:a6:36:f1:42:16:b7:a1:e0:77:bc:21:37:50:94: d1:d7:c3:65:c7:81:b7:00:06:58:89:50:20:7a:b3:a6:48:1d: 46:cb:ed:f2:be:01:1b:db:27:80:10:97:5c:73:0a:38:05:3f: 60:e1:c1:dd:f0:38:3f:e2:11:82:ea:94:48:a8:26:6f:59:03: c8:b2:01:ba:6f:0c:71:cf:f4:0c:65:e1:78:39:a9:57:17:7c: 6d:c3:65:c4:b2:dc:6c:47:9b:ec:50:23:93:83:44:0a:51:ad: ba:8d:58:8c:8e:de:be:83:c8:ab:e1:99:3b:c2:55:cc:eb:c8: ce:7f:90:58:e7:a5:b2:25:92:af:c3:1e:2a:80:9a:14:e0:22: 1b:64:8c:5d:48:2e:50:4c:81:f9:8c:6d:7f:fd:1e:b8:6a:84: 30:38:10:07:68:13:cb:78:43:93:53:4c:df:39:ad:7a:d1:7d: df:49:43:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw7DvofjTgcSOoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDk4ZDhiZWEtNTdkOC00OTg2LTk4YjQtM2JjMTM2MjRiNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPDXgQpsUxrcbaCN1nx//tPyM6PrcvLb+kPD cH2V/SboQ4LDjqvRaeF/JSIRnptJnpMtiN+oZZz0do2poDjqz0AuPteooS5s2yqo Aq6INcckPAyqVIdtkry6FNK8AKSqyDMmtSmBfMM1hC5rPeS2ZXMrgSEirx9sTHZO dx4uGMMs3MAsWKquRUNi7Jv7RXkE0IKzuBTF/lFamfzd18JbH7y4DyAWq4antTpl +hIUWKmYko42b8OcqMJbmlV48RntKTD0P4z2OakyNSwLx6aHhQRljmEDh4+9prBt UW1hWsLWDzRKAaew5MialydiwXyV0f6c5cD81AjOcrIoMYx3MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTd3Qo9Oe14UtsVKFyhYuN7mvG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdhYWM2MzctMzg1NC0z MjU3LWI0ZjAtYTNlOTc5OTFjM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSeIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqypAnnH0DnRLnwyCbfn7U5AIqGEgAaAJG7fDPkjecuPo6SZ+2diw7j XELrVgGnNUxGvYcJT0bpRhl0dakBrdfO8NYrakJf5T1bH9umNvFCFreh4He8ITdQ lNHXw2XHgbcABliJUCB6s6ZIHUbL7fK+ARvbJ4AQl1xzCjgFP2Dhwd3wOD/iEYLq lEioJm9ZA8iyAbpvDHHP9Axl4Xg5qVcXfG3DZcSy3GxHm+xQI5ODRApRrbqNWIyO 3r6DyKvhmTvCVczryM5/kFjnpbIlkq/DHiqAmhTgIhtkjF1ILlBMgfmMbX/9Hrhq hDA4EAdoE8t4Q5NTTN85rXrRfd9JQyc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:54:25 2025 by rpki-client