$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf128436-e8ce-3a1d-b089-331de67eaa10.roa File: bf128436-e8ce-3a1d-b089-331de67eaa10.roa (raw, json) Hash identifier: ADf6QlurUe0y/SYJDK4h6+LO115PAyRbMTfxR2eGBUw= Subject key identifier: C7:6D:0B:E1:12:5E:52:8B:A3:5C:4C:A9:8C:F7:E7:14:75:94:71:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC45C4F508A0595C6470DA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf128436-e8ce-3a1d-b089-331de67eaa10.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.103.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:5c:4f:50:8a:05:95:c6:47:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=23d93eb3-2c30-4d40-b42a-e6b2dfa773da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:79:33:7a:13:c3:33:7c:34:bc:94:c0:37: a2:e2:a4:c6:21:b8:ba:e9:85:de:c7:8c:0a:fd:54: 43:96:d7:fe:20:8f:2b:1d:1b:f9:c3:70:58:09:76: b2:f2:cb:db:f5:d4:e9:89:31:c3:80:71:fe:40:23: 6a:4b:ff:e2:6e:2b:f6:f5:47:d5:7c:cb:f4:d4:02: 2a:79:c5:7e:21:2d:92:16:e5:67:29:31:f0:22:b1: 73:e5:c8:ed:e1:68:85:07:e8:d0:ff:78:fb:db:c8: 3c:ba:6d:6a:ef:15:cc:14:b7:39:cc:51:e9:09:06: 50:fb:67:e5:68:ba:2d:d7:4a:bb:0e:b8:c4:cd:1d: ea:2e:5d:e5:c3:d7:3a:3c:09:48:2f:b9:51:e2:56: 0c:e3:fc:01:6d:7b:83:83:96:01:93:69:cf:bd:b9: 17:a8:8a:29:0e:42:21:68:d9:71:98:cf:5a:4d:78: 1b:f0:73:d4:9a:11:ea:05:85:83:e0:9d:64:61:06: 95:d9:c6:25:d3:e0:68:8f:f5:9d:7b:2f:1d:ad:c6: f9:50:39:0d:d3:15:fa:44:db:fc:bb:86:8c:d9:c5: 2b:2a:37:17:44:2e:68:92:58:ba:9e:1d:3b:a0:0f: 31:d8:5e:aa:d2:c2:50:46:22:07:78:6b:16:bd:09: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6D:0B:E1:12:5E:52:8B:A3:5C:4C:A9:8C:F7:E7:14:75:94:71:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf128436-e8ce-3a1d-b089-331de67eaa10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.103.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e8:dc:f4:74:2a:06:37:bd:52:b6:f2:9b:79:e7:a8:8f:c7: f2:6e:76:a9:0f:ff:65:94:66:54:0a:f5:53:9b:a9:3c:f0:22: 42:ed:ce:72:f2:3b:91:75:e3:1b:76:0d:fe:8d:b6:d8:84:40: 24:b6:d8:bc:ba:ee:70:5d:4e:e5:34:a0:e8:58:92:ae:b3:0d: ab:19:b2:62:3c:5f:ed:13:61:ad:ff:e1:11:35:89:6f:8f:a8: 5f:a3:b2:c6:5d:ce:e4:06:5f:0a:5d:a7:64:e8:7b:bb:3d:fb: 4c:59:96:16:b4:17:ed:9f:6d:24:13:85:78:e7:84:c3:f6:d9: 4a:37:ed:06:98:51:72:23:8b:c4:cd:bc:c8:4a:61:d0:ae:c1: 11:8a:0c:f5:5c:83:4e:b4:03:aa:df:8b:49:e0:74:1b:67:f6: b9:c7:ac:c7:f5:d6:ee:9d:4f:cd:62:9a:7f:4c:f4:c2:06:74: f5:e8:ef:0d:75:98:70:95:c5:f1:f6:71:14:66:b5:3b:4d:24: c8:69:05:fd:70:d8:51:bd:b6:96:5c:82:4d:3c:db:4d:07:c1: b3:48:dc:38:1b:08:5e:cf:00:81:a9:f3:76:46:44:db:d0:aa: a2:ba:b9:83:4b:5e:99:f9:8c:b1:b1:8a:82:29:a9:82:d8:01: b3:8c:85:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxFxPUIoFlcZHDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjNkOTNlYjMtMmMzMC00ZDQwLWI0MmEtZTZiMmRmYTc3M2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC15M3oTwzN8NLyUwDei4qTGIbi66YXex4wK /VRDltf+II8rHRv5w3BYCXay8svb9dTpiTHDgHH+QCNqS//ibiv29UfVfMv01AIq ecV+IS2SFuVnKTHwIrFz5cjt4WiFB+jQ/3j728g8um1q7xXMFLc5zFHpCQZQ+2fl aLot10q7DrjEzR3qLl3lw9c6PAlIL7lR4lYM4/wBbXuDg5YBk2nPvbkXqIopDkIh aNlxmM9aTXgb8HPUmhHqBYWD4J1kYQaV2cYl0+Boj/Wdey8drcb5UDkN0xX6RNv8 u4aM2cUrKjcXRC5okli6nh07oA8x2F6q0sJQRiIHeGsWvQmGgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdtC+ESXlKLo1xMqYz35xR1lHH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYxMjg0MzYtZThjZS0z YTFkLWIwODktMzMxZGU2N2VhYTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfo3PR0KgY3vVK28pt556iPx/JudqkP/2WUZlQK9VObqTzwIkLtznLy O5F14xt2Df6NttiEQCS22Ly67nBdTuU0oOhYkq6zDasZsmI8X+0TYa3/4RE1iW+P qF+jssZdzuQGXwpdp2Toe7s9+0xZlha0F+2fbSQThXjnhMP22Uo37QaYUXIji8TN vMhKYdCuwRGKDPVcg060A6rfi0ngdBtn9rnHrMf11u6dT81imn9M9MIGdPXo7w11 mHCVxfH2cRRmtTtNJMhpBf1w2FG9tpZcgk08200HwbNI3DgbCF7PAIGp83ZGRNvQ qqK6uYNLXpn5jLGxioIpqYLYAbOMhXM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:28:26 2025 by rpki-client