$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c09bc917-859a-3dcc-96af-5cd34af59af0.roa File: c09bc917-859a-3dcc-96af-5cd34af59af0.roa (raw, json) Hash identifier: o5tCgnpDetRbl25EWhvCVriKiHNj2fSNbPFon1diwNc= Subject key identifier: 91:E4:AA:4A:4E:70:29:B5:A4:E8:FC:A5:9B:E6:7E:96:CC:C1:1C:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC53A2B3D02A5BFC842C9B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c09bc917-859a-3dcc-96af-5cd34af59af0.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.223.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:3a:2b:3d:02:a5:bf:c8:42:c9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a2cd876a-6b77-419a-aad6-40ecc5ec240d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7a:42:60:c8:ae:1f:73:b6:0c:54:fb:5b:54: 04:3a:cc:bb:37:e2:8b:e3:64:35:73:2c:f0:57:4a: 30:c9:ad:42:f2:4a:fb:ff:dd:d7:36:56:5f:a1:11: 6a:17:b3:76:dd:cf:e6:c3:28:35:9d:ef:1d:36:6e: 08:c8:a8:9a:c2:c7:c8:d3:49:31:ab:09:38:43:1d: 7d:df:50:3a:df:1e:d9:f4:a7:65:b2:42:3c:2c:53: 13:17:f8:63:52:59:21:2d:f4:b9:45:96:01:f2:28: 89:f3:3b:ab:5e:46:5d:6a:6d:61:8a:df:2d:c4:84: 19:1e:d9:b3:07:39:86:bc:31:d1:97:0f:4a:83:01: 0b:a8:a2:cf:af:f3:bb:8e:18:03:f0:fd:71:b0:f3: 59:92:cd:80:30:10:52:5c:f7:01:82:04:6d:4b:12: f8:ec:e2:63:de:40:00:b0:05:f1:27:78:c4:fa:b6: 55:b8:e7:2b:28:5c:d6:aa:41:d7:e0:64:c4:cf:5f: b3:e0:b9:f6:18:5f:70:4d:d2:55:50:c3:43:7c:8b: dc:ab:86:60:85:6c:e1:52:d4:b0:a6:78:43:04:a6: ec:2d:8f:2e:bf:49:00:a8:f9:d5:86:14:7c:6d:b4: 46:90:42:d6:76:2f:ca:5b:89:90:91:8e:9f:b1:8f: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:AA:4A:4E:70:29:B5:A4:E8:FC:A5:9B:E6:7E:96:CC:C1:1C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c09bc917-859a-3dcc-96af-5cd34af59af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ad:09:9b:cb:73:34:c6:fd:18:79:54:f8:9b:6d:8d:85:7b: 9d:55:8d:99:8e:9a:56:91:21:5d:93:25:d1:31:c5:bd:c9:c2: 9d:6a:fa:9e:d9:ef:0e:ec:ba:2f:e5:1e:0e:47:27:f4:e1:22: 76:39:61:8a:ff:1c:15:a4:d3:de:b3:90:2a:78:d0:f8:b1:05: ea:7f:00:a8:96:1d:90:97:07:6d:05:17:2b:e4:93:ad:22:19: 9e:9d:bb:c1:7f:09:3e:db:ba:2a:8c:73:8a:5b:b7:cc:89:1a: 60:50:26:40:d9:df:f5:d2:ec:bc:68:0b:15:07:b0:48:c5:da: 4c:02:92:48:1a:a5:73:e1:a2:2d:f7:a5:11:77:0a:c3:c3:f4: ca:08:ab:87:cf:78:2b:21:dd:d9:dd:29:0a:bf:f0:45:2e:05: 2a:73:50:fb:6c:01:ee:73:ff:d5:71:47:d9:ce:92:9b:da:0c: 2a:09:6f:b4:3c:61:9d:c4:05:98:29:bd:07:bf:f2:e2:cd:88: 9f:32:68:19:7c:ad:33:63:e9:26:4f:ff:41:58:1b:a8:b2:47: 33:95:6f:d9:04:9c:a7:52:9e:c3:b7:7f:c4:96:0c:c3:32:0a: 94:3b:4f:31:f2:aa:4c:84:cc:12:66:2f:29:39:72:0b:28:39: 41:4b:2b:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxTorPQKlv8hCybAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTJjZDg3NmEtNmI3Ny00MTlhLWFhZDYtNDBlY2M1ZWMyNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HpCYMiuH3O2DFT7W1QEOsy7N+KL42Q1cyzw V0owya1C8kr7/93XNlZfoRFqF7N23c/mwyg1ne8dNm4IyKiawsfI00kxqwk4Qx19 31A63x7Z9KdlskI8LFMTF/hjUlkhLfS5RZYB8iiJ8zurXkZdam1hit8txIQZHtmz BzmGvDHRlw9KgwELqKLPr/O7jhgD8P1xsPNZks2AMBBSXPcBggRtSxL47OJj3kAA sAXxJ3jE+rZVuOcrKFzWqkHX4GTEz1+z4Ln2GF9wTdJVUMNDfIvcq4ZghWzhUtSw pnhDBKbsLY8uv0kAqPnVhhR8bbRGkELWdi/KW4mQkY6fsY+tEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHkqkpOcCm1pOj8pZvmfpbMwRyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzA5YmM5MTctODU5YS0z ZGNjLTk2YWYtNWNkMzRhZjU5YWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd9iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmtCZvLczTG/Rh5VPibbY2Fe51VjZmOmlaRIV2TJdExxb3Jwp1q+p7Z 7w7sui/lHg5HJ/ThInY5YYr/HBWk096zkCp40PixBep/AKiWHZCXB20FFyvkk60i GZ6du8F/CT7buiqMc4pbt8yJGmBQJkDZ3/XS7LxoCxUHsEjF2kwCkkgapXPhoi33 pRF3CsPD9MoIq4fPeCsh3dndKQq/8EUuBSpzUPtsAe5z/9VxR9nOkpvaDCoJb7Q8 YZ3EBZgpvQe/8uLNiJ8yaBl8rTNj6SZP/0FYG6iyRzOVb9kEnKdSnsO3f8SWDMMy CpQ7TzHyqkyEzBJmLyk5cgsoOUFLKwc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:19:34 2025 by rpki-client