$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b23505-994b-36d1-853a-a3275125fa25.roa File: c2b23505-994b-36d1-853a-a3275125fa25.roa (raw, json) Hash identifier: wCKZP/mho4g3urit80fiYRrSwUGrtCXcIIwOic2B+Hs= Subject key identifier: 42:64:B7:75:86:52:3D:5F:26:4E:80:91:20:6A:50:2A:13:CB:07:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5388EB6B27BFA9D540480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b23505-994b-36d1-853a-a3275125fa25.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.223.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:38:8e:b6:b2:7b:fa:9d:54:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9da24569-f05c-46b8-8ce1-16a69c865144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:15:06:43:7a:d5:2b:01:d1:82:e7:f0:26: e7:88:d1:2b:e0:71:e6:19:4c:26:f7:50:78:59:27: a9:9e:e9:24:ca:9a:f3:91:cb:55:3e:8e:db:d5:13: b8:02:23:82:ad:33:b6:10:5b:ae:0d:b2:d8:49:25: f8:bf:f6:23:3e:cd:32:25:d2:33:72:34:f1:94:c2: a3:a6:9c:2c:58:16:4d:9a:90:ea:6d:bf:5e:9f:f4: df:14:33:35:ef:38:77:1d:29:fa:99:93:83:d2:c2: 9a:15:f9:44:36:04:20:4a:4b:25:dd:b4:58:46:93: f9:68:21:40:37:56:5d:59:dd:b4:95:06:57:c6:08: 58:a4:ab:a2:19:3e:63:01:ea:d8:69:d4:5b:15:62: 5d:bf:11:cf:ed:a7:41:d6:19:9e:fb:bc:ea:f1:58: 3a:f5:5f:15:0b:0e:41:9b:52:51:45:c4:49:a0:9f: fb:97:32:e2:52:73:a1:0a:75:a4:35:8b:2e:25:69: 3c:0a:b7:a4:5a:f6:fb:78:b8:ef:27:4a:ce:be:f8: 19:74:73:1e:11:c1:ca:f6:76:9f:07:b3:33:b7:f1: 70:9c:63:c5:b4:cf:4a:34:75:13:7e:28:32:a9:76: 5c:eb:f2:39:3b:03:98:cb:67:d2:22:1c:8b:72:54: 90:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:64:B7:75:86:52:3D:5F:26:4E:80:91:20:6A:50:2A:13:CB:07:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b23505-994b-36d1-853a-a3275125fa25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f4:54:63:02:ef:d2:b7:b0:0a:07:9b:d9:19:e0:18:8e:ab: 7e:2d:ed:bb:a8:d9:b7:42:d5:40:63:f3:37:b8:5e:37:65:00: bc:ba:e0:f2:76:a3:bc:fb:02:49:a1:4e:4e:53:b8:b1:bf:86: 63:b2:0c:03:ca:73:7d:b0:a7:e5:31:e7:ec:18:4f:60:ea:99: 85:d1:cd:d4:4e:bc:4a:8f:e8:6d:1d:ce:1e:9d:69:90:1f:22: 1f:e8:77:f1:37:4d:94:26:93:a1:7d:22:74:06:2b:fc:74:f9: 39:99:69:94:c6:53:cd:29:fb:b0:5f:1d:7b:41:8b:89:82:b5: 36:1a:64:69:f7:43:51:a7:09:5a:34:c6:83:c0:ee:4e:6b:e0: d8:93:be:3e:3f:a9:83:10:8b:61:09:af:be:c9:42:fb:b3:58: bf:d3:4c:c0:6f:a0:58:03:a4:cb:ff:d4:95:ec:69:3e:86:47: 7b:bb:ae:d1:20:f3:d2:cc:ac:87:80:d1:02:7e:cf:00:8d:b3: c4:8d:ab:37:74:18:4a:03:76:94:79:5e:20:b5:aa:94:0a:07: 65:22:99:19:b6:10:c2:1f:f8:fb:53:7d:2b:33:c5:4d:07:70: 72:46:d4:8c:12:6b:b6:a7:49:75:c2:43:32:3a:98:06:c7:38: 1d:a9:ac:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxTiOtrJ7+p1UBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWRhMjQ1NjktZjA1Yy00NmI4LThjZTEtMTZhNjljODY1MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom0VBkN61SsB0YLn8CbniNEr4HHmGUwm91B4 WSepnukkyprzkctVPo7b1RO4AiOCrTO2EFuuDbLYSSX4v/YjPs0yJdIzcjTxlMKj ppwsWBZNmpDqbb9en/TfFDM17zh3HSn6mZOD0sKaFflENgQgSksl3bRYRpP5aCFA N1ZdWd20lQZXxghYpKuiGT5jAerYadRbFWJdvxHP7adB1hme+7zq8Vg69V8VCw5B m1JRRcRJoJ/7lzLiUnOhCnWkNYsuJWk8CrekWvb7eLjvJ0rOvvgZdHMeEcHK9naf B7Mzt/FwnGPFtM9KNHUTfigyqXZc6/I5OwOYy2fSIhyLclSQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJkt3WGUj1fJk6AkSBqUCoTyweFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzJiMjM1MDUtOTk0Yi0z NmQxLTg1M2EtYTMyNzUxMjVmYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ30VGMC79K3sAoHm9kZ4BiOq34t7buo2bdC1UBj8ze4XjdlALy64PJ2 o7z7AkmhTk5TuLG/hmOyDAPKc32wp+Ux5+wYT2DqmYXRzdROvEqP6G0dzh6daZAf Ih/od/E3TZQmk6F9InQGK/x0+TmZaZTGU80p+7BfHXtBi4mCtTYaZGn3Q1GnCVo0 xoPA7k5r4NiTvj4/qYMQi2EJr77JQvuzWL/TTMBvoFgDpMv/1JXsaT6GR3u7rtEg 89LMrIeA0QJ+zwCNs8SNqzd0GEoDdpR5XiC1qpQKB2UimRm2EMIf+PtTfSszxU0H cHJG1IwSa7anSXXCQzI6mAbHOB2prL8= -----END CERTIFICATE-----Generated at Sat Aug 23 23:36:26 2025 by rpki-client