$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bff952f4-86bd-33a4-86db-f776c9cc533e.roa File: bff952f4-86bd-33a4-86db-f776c9cc533e.roa (raw, json) Hash identifier: gF9a5gfz/dy0jDH9fD0QC5o/52o24qGQy6T1CbyWt9M= Subject key identifier: B9:15:49:AB:91:17:D9:8E:E2:EC:73:46:EF:94:2A:A0:12:FC:3F:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3A37A939D5E6BCA021E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bff952f4-86bd-33a4-86db-f776c9cc533e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.196.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:a3:7a:93:9d:5e:6b:ca:02:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=12730e57-c082-423e-bfbf-67c1342e2bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:15:8f:71:c7:57:45:f0:06:9f:aa:28:ea: 0d:83:4f:07:cd:3a:1b:f5:85:ed:39:c0:68:ac:49: 79:4f:80:6e:9b:23:c7:c3:66:97:8c:8f:db:0c:c4: 61:6b:e2:15:11:ae:00:c9:77:6b:a4:b2:62:28:35: 9b:cd:47:73:bf:9f:b5:e4:9e:e5:e2:8b:22:c4:bc: 46:bb:74:87:8d:a2:cc:a1:59:77:c1:62:59:4d:ce: 94:e0:73:21:2c:2a:dd:0d:8a:5e:81:6d:c4:2e:34: 3c:3e:b9:fb:87:47:1d:55:7b:69:eb:c1:52:38:b7: a8:b0:82:cf:b0:9a:59:fe:5c:1a:6b:a0:7d:14:80: ad:43:4e:91:81:73:f9:a7:85:75:c0:0b:ba:fb:f1: 0f:4a:6e:67:62:43:a5:a3:d7:c7:1c:7b:7b:29:37: 18:fa:9c:98:3b:0d:a4:b8:bd:8b:96:38:b4:68:08: 3a:eb:45:3b:21:bb:ba:d5:cf:46:36:99:da:32:ee: 98:3b:e9:be:d8:5a:81:84:7b:1d:83:1c:74:1d:b4: b6:a8:40:ec:f1:7e:29:13:e3:bf:4b:fd:e0:cb:ad: 5b:41:c9:c2:c7:20:31:8a:8b:c4:c8:fc:21:a7:4b: 14:96:8d:93:d1:ab:15:ff:21:81:01:ac:c7:55:43: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:15:49:AB:91:17:D9:8E:E2:EC:73:46:EF:94:2A:A0:12:FC:3F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bff952f4-86bd-33a4-86db-f776c9cc533e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:43:65:ce:6d:db:97:23:6f:52:10:67:6c:ce:b5:c1:41:a0: 81:b8:8e:25:b1:6f:ac:e8:54:88:1e:15:c2:8e:fe:47:b3:93: bf:d4:a6:44:e9:cc:75:70:e8:e8:2f:7f:64:4f:57:5a:6e:f9: b8:1f:fe:07:60:e4:6a:af:6b:53:6f:3e:aa:79:cf:0c:24:88: b3:18:c2:55:f8:31:ca:6d:cd:ca:ed:3a:f6:0c:60:78:5a:44: c6:a8:34:87:de:7d:5f:45:f6:a3:bb:4f:21:40:fb:b8:e1:67: 11:70:8e:eb:ef:bd:39:9f:70:1f:95:8b:68:77:69:f1:96:de: b0:76:cf:ef:1f:43:e2:ed:93:e3:28:9f:9f:72:34:e2:87:71: fd:e3:f8:7d:6e:16:f8:5a:67:83:19:75:0d:8c:94:33:64:0a: 09:09:db:0b:bb:9b:7d:cb:4a:c0:18:da:ff:9b:6b:cc:2d:c5: 3e:c1:88:3e:f2:c4:36:4a:53:18:e8:46:e8:d0:9c:7c:81:48: bf:4a:6a:a2:95:97:a2:fe:05:84:58:fc:40:f6:49:bf:a9:cd: 70:71:f0:4b:2e:fd:71:83:5e:ec:b9:c2:7c:32:0f:64:ef:da: ac:12:94:fc:0e:c2:d8:93:d2:61:03:d2:89:54:96:d1:62:66: 95:fd:5e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw6N6k51ea8oCHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTI3MzBlNTctYzA4Mi00MjNlLWJmYmYtNjdjMTM0MmUyYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPQVj3HHV0XwBp+qKOoNg08HzTob9YXtOcBo rEl5T4BumyPHw2aXjI/bDMRha+IVEa4AyXdrpLJiKDWbzUdzv5+15J7l4osixLxG u3SHjaLMoVl3wWJZTc6U4HMhLCrdDYpegW3ELjQ8Prn7h0cdVXtp68FSOLeosILP sJpZ/lwaa6B9FICtQ06RgXP5p4V1wAu6+/EPSm5nYkOlo9fHHHt7KTcY+pyYOw2k uL2Llji0aAg660U7Ibu61c9GNpnaMu6YO+m+2FqBhHsdgxx0HbS2qEDs8X4pE+O/ S/3gy61bQcnCxyAxiovEyPwhp0sUlo2T0asV/yGBAazHVUOhVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkVSauRF9mO4uxzRu+UKqAS/D9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZmOTUyZjQtODZiZC0z M2E0LTg2ZGItZjc3NmM5Y2M1MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZDZc5t25cjb1IQZ2zOtcFBoIG4jiWxb6zoVIgeFcKO/kezk7/UpkTp zHVw6Ogvf2RPV1pu+bgf/gdg5Gqva1NvPqp5zwwkiLMYwlX4McptzcrtOvYMYHha RMaoNIfefV9F9qO7TyFA+7jhZxFwjuvvvTmfcB+Vi2h3afGW3rB2z+8fQ+Ltk+Mo n59yNOKHcf3j+H1uFvhaZ4MZdQ2MlDNkCgkJ2wu7m33LSsAY2v+ba8wtxT7BiD7y xDZKUxjoRujQnHyBSL9KaqKVl6L+BYRY/ED2Sb+pzXBx8Esu/XGDXuy5wnwyD2Tv 2qwSlPwOwtiT0mED0olUltFiZpX9Xmg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:15:00 2025 by rpki-client