$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c683c1a2-0779-391c-850c-ce70f6c0222a.roa File: c683c1a2-0779-391c-850c-ce70f6c0222a.roa (raw, json) Hash identifier: 1xVnuH2W4eYKkuH20MUJdElOAgQSyd3g23XFd8jevEo= Subject key identifier: 5A:0A:16:B8:D8:1E:F9:9B:4B:C8:76:84:62:EE:95:5E:07:DC:69:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1BCE71FC0250E514D0CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c683c1a2-0779-391c-850c-ce70f6c0222a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.248.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:bc:e7:1f:c0:25:0e:51:4d:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fec9b7c6-4027-42ad-9bea-81e10ba93e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:62:f8:0f:ab:20:04:c4:70:78:f8:14:8f:4b: 46:9c:c2:15:f8:e2:a2:e2:80:f3:6a:2f:60:fc:fb: 84:d4:76:a5:26:44:0a:ae:76:7d:68:86:c2:58:98: 63:8b:6b:40:ad:af:af:49:27:95:d6:79:35:18:0b: 68:6a:c5:a2:a7:ec:1b:a6:00:fe:da:69:f1:b5:98: 12:e5:e3:c5:26:87:0a:70:75:6e:ab:e1:e7:1a:1e: 54:a8:3f:eb:1c:1b:65:d7:33:01:ec:9c:92:62:f3: 05:d3:f0:64:5f:c7:78:7c:25:53:b6:95:8f:dc:39: f7:f8:03:47:a7:06:da:ea:65:50:9d:25:02:41:f0: a4:08:a8:c3:21:d8:f8:1d:95:e8:ff:7d:fd:2d:b5: b3:f6:4d:9d:56:05:5f:3d:55:71:07:89:db:d8:b3: b9:03:b3:4f:5c:22:6b:15:3b:c8:b2:24:ae:5d:64: 3a:d5:21:80:7c:92:4c:0b:ea:49:a6:c8:ce:07:28: dd:12:2e:01:55:47:2c:8b:8a:68:fe:9f:e3:93:76: 1f:70:f3:65:c3:c6:39:0c:79:13:a7:20:55:df:ce: 6a:a9:86:b8:da:bc:dd:a8:9a:4c:84:39:ce:72:35: 59:62:99:15:57:cb:72:65:04:97:14:29:56:7a:93: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:16:B8:D8:1E:F9:9B:4B:C8:76:84:62:EE:95:5E:07:DC:69:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c683c1a2-0779-391c-850c-ce70f6c0222a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:c7:43:65:82:87:fd:44:1f:bd:22:fd:c1:5e:d3:00:10:65: cf:12:b0:86:0a:80:11:26:8b:a8:d4:00:ff:66:8e:04:c6:af: 27:7d:28:a0:ff:69:86:ca:60:6b:17:e0:f9:b1:5f:b3:53:00: 66:d5:c1:4d:19:3b:75:08:02:66:fa:1c:05:22:76:ba:86:6d: 4b:85:eb:b4:27:14:26:18:76:45:9b:ab:2d:f4:93:3e:b8:5e: b7:07:40:ab:de:bc:c2:04:de:2d:5f:98:7e:6a:47:70:83:b4: d6:a6:00:5c:eb:3c:8e:b2:cf:9d:70:84:a4:07:66:2a:86:7d: 27:1c:81:97:0d:83:b1:2b:33:41:02:5f:30:60:9b:1d:6e:c5: a8:96:fd:81:d3:2a:49:ad:fd:bb:24:e0:16:0e:6a:68:bb:e1: 7a:fa:41:c0:a6:e3:cc:6d:a4:55:58:76:77:7c:ba:c4:a8:c6: 7e:5d:eb:0d:a3:1b:61:71:4b:b9:ec:26:d5:40:f0:cb:17:28: 21:50:14:a0:95:51:bd:42:39:ac:06:2a:50:a8:4d:59:b0:3c: 06:29:34:7e:3e:36:ce:85:77:ba:72:d9:6b:ee:2a:dd:52:8b: 4f:af:02:6c:63:7a:d2:30:fe:43:83:5d:d0:50:8d:be:d2:b8: ec:f6:e3:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswbznH8AlDlFNDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmVjOWI3YzYtNDAyNy00MmFkLTliZWEtODFlMTBiYTkzZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mL4D6sgBMRwePgUj0tGnMIV+OKi4oDzai9g /PuE1HalJkQKrnZ9aIbCWJhji2tAra+vSSeV1nk1GAtoasWip+wbpgD+2mnxtZgS 5ePFJocKcHVuq+HnGh5UqD/rHBtl1zMB7JySYvMF0/BkX8d4fCVTtpWP3Dn3+ANH pwba6mVQnSUCQfCkCKjDIdj4HZXo/339LbWz9k2dVgVfPVVxB4nb2LO5A7NPXCJr FTvIsiSuXWQ61SGAfJJMC+pJpsjOByjdEi4BVUcsi4po/p/jk3YfcPNlw8Y5DHkT pyBV385qqYa42rzdqJpMhDnOcjVZYpkVV8tyZQSXFClWepNZJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoKFrjYHvmbS8h2hGLulV4H3GnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzY4M2MxYTItMDc3OS0z OTFjLTg1MGMtY2U3MGY2YzAyMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfi6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHHQ2WCh/1EH70i/cFe0wAQZc8SsIYKgBEmi6jUAP9mjgTGryd9KKD/ aYbKYGsX4PmxX7NTAGbVwU0ZO3UIAmb6HAUidrqGbUuF67QnFCYYdkWbqy30kz64 XrcHQKvevMIE3i1fmH5qR3CDtNamAFzrPI6yz51whKQHZiqGfSccgZcNg7ErM0EC XzBgmx1uxaiW/YHTKkmt/bsk4BYOami74Xr6QcCm48xtpFVYdnd8usSoxn5d6w2j G2FxS7nsJtVA8MsXKCFQFKCVUb1COawGKlCoTVmwPAYpNH4+Ns6Fd7py2WvuKt1S i0+vAmxjetIw/kODXdBQjb7SuOz24yw= -----END CERTIFICATE-----Generated at Sat Aug 23 23:10:27 2025 by rpki-client