$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7cad9e-45c9-3d3e-be2f-e81a6fd01ace.roa File: bd7cad9e-45c9-3d3e-be2f-e81a6fd01ace.roa (raw, json) Hash identifier: Y2kl81PDZqe6CyimJgumoZsV2f03xbrjqZ3mDV10dPo= Subject key identifier: 70:E4:DA:21:DD:44:67:C2:D9:D7:95:93:FA:68:C5:95:EB:04:7B:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC25A807633715EF4135040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7cad9e-45c9-3d3e-be2f-e81a6fd01ace.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.146.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:5a:80:76:33:71:5e:f4:13:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7b22b78f-027b-428a-a7d8-ee37489235c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8d:0d:7a:08:7d:a2:08:17:19:c4:50:39:76: d8:a5:cf:c6:0a:49:b7:73:6e:67:9e:d3:20:75:7d: 01:8c:f2:28:32:da:c3:4b:08:99:03:3e:62:b8:5f: 0e:ac:dd:7e:9c:60:78:e8:fb:27:99:7c:ba:11:18: 11:59:f4:cf:85:4e:0b:eb:2a:0a:d7:c4:48:e4:6e: 8e:ae:36:e2:e4:67:ab:5a:a7:e2:72:4c:e7:99:ff: 2c:ae:63:d1:fb:6b:44:e4:87:60:b7:9c:32:e0:ea: 9a:63:2e:4c:d9:01:d3:29:95:1e:2f:d2:da:cd:cb: 46:25:76:d9:01:45:c3:cb:40:d5:ab:31:9b:f3:58: ab:8b:d0:71:57:78:20:f0:20:67:1d:a1:e6:3f:a7: a5:bb:a2:d6:5a:a2:cd:3e:a9:42:cd:fd:2f:7e:72: 51:55:dc:03:3d:64:3f:77:49:a3:15:90:90:37:bd: bc:a6:16:c1:e6:bc:70:e1:e1:2a:53:14:41:43:b0: a9:9f:a1:60:c6:7b:2c:33:63:22:44:c8:d3:21:18: 9c:a9:ed:9d:ba:28:97:76:12:02:b3:cb:9f:7f:7a: e9:e1:1b:27:45:48:6c:e2:20:0c:1a:41:d5:5b:5c: b5:66:4b:f8:82:75:0e:5d:7e:2e:6d:08:aa:b0:4e: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:DA:21:DD:44:67:C2:D9:D7:95:93:FA:68:C5:95:EB:04:7B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7cad9e-45c9-3d3e-be2f-e81a6fd01ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.146.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:66:e4:d9:5d:86:14:ea:93:6e:04:99:7e:8f:d1:fb:f2:ba: d2:40:2e:6a:1f:ee:5e:d0:85:a6:c5:b8:94:2a:a9:82:be:ab: 93:50:10:9d:81:b6:29:5d:80:f2:be:42:c3:1f:aa:8a:70:2d: 64:f7:fd:88:8c:90:ec:b4:bc:12:20:4e:4f:d6:83:48:2f:4f: bc:6b:08:00:1f:29:fe:cf:c8:00:a8:6b:65:21:f3:c9:81:4b: 61:c9:da:5e:a9:32:32:26:dd:d9:8a:00:e7:9c:26:66:66:42: 59:f6:6e:75:e0:c4:36:a0:f2:38:53:9b:a7:84:dd:49:6c:b4: a0:1a:40:a9:6d:17:54:69:19:79:11:e2:c3:b2:cc:56:dd:e1: bc:44:24:b7:31:82:ed:d3:e9:57:e5:1a:3c:4b:f3:37:b8:a1: 8f:dd:7b:b0:df:d3:39:c7:9e:89:64:f6:87:ff:47:fc:9b:53: fc:4a:1d:f2:73:c7:21:01:f0:1a:2a:1f:01:eb:ab:65:b8:76: cc:74:1b:4e:dd:a1:38:0a:5a:52:1a:00:96:fe:97:1c:68:41: f5:8d:bf:ba:06:27:55:b0:58:bd:18:55:35:48:65:bc:e3:42: 91:ba:ff:b7:1e:e7:79:16:15:78:41:2e:e9:9a:91:1b:a2:d0: 6e:f5:3f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswlqAdjNxXvQTUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2IyMmI3OGYtMDI3Yi00MjhhLWE3ZDgtZWUzNzQ4OTIzNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY0Negh9oggXGcRQOXbYpc/GCkm3c25nntMg dX0BjPIoMtrDSwiZAz5iuF8OrN1+nGB46PsnmXy6ERgRWfTPhU4L6yoK18RI5G6O rjbi5GerWqfickznmf8srmPR+2tE5Idgt5wy4OqaYy5M2QHTKZUeL9LazctGJXbZ AUXDy0DVqzGb81iri9BxV3gg8CBnHaHmP6elu6LWWqLNPqlCzf0vfnJRVdwDPWQ/ d0mjFZCQN728phbB5rxw4eEqUxRBQ7Cpn6FgxnssM2MiRMjTIRicqe2duiiXdhIC s8uff3rp4RsnRUhs4iAMGkHVW1y1Zkv4gnUOXX4ubQiqsE78SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDk2iHdRGfC2deVk/poxZXrBHvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ3Y2FkOWUtNDVjOS0z ZDNlLWJlMmYtZTgxYTZmZDAxYWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZm5NldhhTqk24EmX6P0fvyutJALmof7l7QhabFuJQqqYK+q5NQEJ2B tildgPK+QsMfqopwLWT3/YiMkOy0vBIgTk/Wg0gvT7xrCAAfKf7PyACoa2Uh88mB S2HJ2l6pMjIm3dmKAOecJmZmQln2bnXgxDag8jhTm6eE3UlstKAaQKltF1RpGXkR 4sOyzFbd4bxEJLcxgu3T6VflGjxL8ze4oY/de7Df0znHnolk9of/R/ybU/xKHfJz xyEB8BoqHwHrq2W4dsx0G07doTgKWlIaAJb+lxxoQfWNv7oGJ1WwWL0YVTVIZbzj QpG6/7ce53kWFXhBLumakRui0G71P+E= -----END CERTIFICATE-----Generated at Sat Aug 23 22:53:23 2025 by rpki-client