$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb400b11-c615-3a77-b551-e8171432c2a4.roa File: cb400b11-c615-3a77-b551-e8171432c2a4.roa (raw, json) Hash identifier: hhHNiv+1V3kdyTjw6wDzpILbMZvl4+h3Odnfqra3xG0= Subject key identifier: CE:C2:57:86:16:E8:57:9E:17:BC:5C:D1:09:2A:21:EC:51:41:F9:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC52B26ADE45E1C8DCE9480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb400b11-c615-3a77-b551-e8171432c2a4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.189.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:2b:26:ad:e4:5e:1c:8d:ce:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=08f060a7-fafc-4cc6-8aa7-69d41f1048fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:21:9f:b4:29:a4:e2:6c:b5:f4:f9:34:47: 7e:7b:dd:3a:ae:4f:06:a8:5f:cb:2c:d7:ae:2b:3e: 52:56:dc:dc:6f:1c:c9:09:e2:b2:62:51:db:5d:b3: 02:0e:62:f3:ce:91:40:5a:38:d7:db:6b:ad:61:38: f4:11:f5:99:bc:e1:15:19:8e:e0:52:00:5c:f1:a0: 48:04:6a:be:cd:d4:34:68:35:76:b6:53:1c:9a:9a: 83:97:d7:d7:5c:b2:bc:ca:97:02:ec:57:30:ae:cf: 58:30:60:d1:d8:c8:b3:48:d7:b1:4b:e3:7d:14:35: c2:20:67:e9:66:f7:77:62:47:bb:95:12:58:c4:49: 83:40:ef:cd:72:ef:5d:45:27:a4:2b:4f:a8:d9:f0: 40:35:58:27:80:8b:2d:b5:fc:b1:79:84:34:86:b7: 20:bc:bb:ae:24:30:f2:4d:be:30:af:81:43:fc:4f: 2b:e1:4a:74:56:e6:ce:82:d1:7f:79:1d:6d:91:59: e3:1b:6d:8f:45:c7:dd:d6:c8:24:69:41:b7:6f:cc: f0:f6:a4:bb:43:75:51:fa:d3:7d:cf:9a:9e:60:bd: 83:5d:ba:95:e8:bd:fd:4e:fd:5e:c5:3e:24:32:cb: ca:d1:20:83:0d:2b:e1:39:a5:94:a3:3f:f9:0a:08: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C2:57:86:16:E8:57:9E:17:BC:5C:D1:09:2A:21:EC:51:41:F9:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb400b11-c615-3a77-b551-e8171432c2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.189.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e4:21:ef:1a:08:e4:59:22:0c:93:8f:84:88:d5:de:84:2f: 89:30:71:f0:66:fa:b8:b2:74:8f:13:f3:9f:53:c4:21:c5:93: 6e:53:07:71:4c:2c:fa:e9:b9:cc:58:2f:c6:ff:aa:92:74:1d: 39:24:c4:24:27:fa:95:48:01:51:5a:6b:46:f4:2c:b1:ef:2a: 31:a8:41:10:5d:7f:3e:4d:c7:5f:95:d2:e6:59:aa:f3:20:dc: 29:ce:f6:3d:39:eb:bd:09:37:f0:9b:84:fc:ff:ef:4b:3d:d0: 0e:4f:76:d2:c8:79:c1:ed:92:3d:b7:fd:6b:4b:02:cc:55:70: ee:0f:cf:19:12:68:de:7a:33:6b:26:c0:1a:ea:3d:8f:f5:60: e8:f3:b7:b5:23:f7:b8:23:31:34:86:95:f9:73:6b:ba:57:f8: ab:00:c0:a4:a7:95:4a:5d:ef:d7:45:53:69:63:55:0c:cf:b2: 27:a5:5e:2b:3c:ff:ab:2e:6b:58:46:23:10:cb:bd:e3:40:73: bc:61:7b:7f:e0:70:d2:ca:11:d9:70:5e:9e:57:88:c8:dd:9f: 2a:f0:9c:b5:60:63:95:33:aa:42:41:46:ff:46:96:7d:28:41: a3:55:dc:d4:63:a0:69:82:04:1e:62:1b:e2:01:95:f4:e9:33: 0d:3d:73:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxSsmreReHI3OlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDhmMDYwYTctZmFmYy00Y2M2LThhYTctNjlkNDFmMTA0OGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Mhn7QppOJstfT5NEd+e906rk8GqF/LLNeu Kz5SVtzcbxzJCeKyYlHbXbMCDmLzzpFAWjjX22utYTj0EfWZvOEVGY7gUgBc8aBI BGq+zdQ0aDV2tlMcmpqDl9fXXLK8ypcC7Fcwrs9YMGDR2MizSNexS+N9FDXCIGfp Zvd3Yke7lRJYxEmDQO/Ncu9dRSekK0+o2fBANVgngIsttfyxeYQ0hrcgvLuuJDDy Tb4wr4FD/E8r4Up0VubOgtF/eR1tkVnjG22PRcfd1sgkaUG3b8zw9qS7Q3VR+tN9 z5qeYL2DXbqV6L39Tv1exT4kMsvK0SCDDSvhOaWUoz/5Cgi9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7CV4YW6FeeF7xc0QkqIexRQfmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I0MDBiMTEtYzYxNS0z YTc3LWI1NTEtZTgxNzE0MzJjMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDkIe8aCORZIgyTj4SI1d6EL4kwcfBm+riydI8T859TxCHFk25TB3FM LPrpucxYL8b/qpJ0HTkkxCQn+pVIAVFaa0b0LLHvKjGoQRBdfz5Nx1+V0uZZqvMg 3CnO9j05670JN/CbhPz/70s90A5PdtLIecHtkj23/WtLAsxVcO4PzxkSaN56M2sm wBrqPY/1YOjzt7Uj97gjMTSGlflza7pX+KsAwKSnlUpd79dFU2ljVQzPsielXis8 /6sua1hGIxDLveNAc7xhe3/gcNLKEdlwXp5XiMjdnyrwnLVgY5UzqkJBRv9Gln0o QaNV3NRjoGmCBB5iG+IBlfTpMw09cw0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:38:41 2025 by rpki-client