$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d090d32c-498e-32da-9ce7-b278f186aaa9.roa File: d090d32c-498e-32da-9ce7-b278f186aaa9.roa (raw, json) Hash identifier: Kr5cOIGrGccnjbIo7BiZ4n4CTEYCXmh55XKIjKb8Jm0= Subject key identifier: B8:D7:A1:D0:56:99:31:C7:69:9D:B2:39:70:CF:70:AE:07:56:6C:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3A00F9FC374B4E776B1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d090d32c-498e-32da-9ce7-b278f186aaa9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.195.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:a0:0f:9f:c3:74:b4:e7:76:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1f73cdd9-0df8-4112-8fdd-e5ba3e002abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:ad:26:07:88:f7:08:2e:71:18:2d:63:10: b0:72:4c:69:b4:26:79:3a:c6:5a:67:15:34:db:d5: d1:db:53:2b:43:1e:14:a4:13:00:a2:58:ae:33:ad: 00:f8:14:85:93:e9:44:de:c5:1c:61:6e:19:49:ea: 57:9b:83:eb:e2:c5:48:c5:da:aa:d3:55:f7:46:7e: f6:3d:b5:2e:df:71:e8:7e:e7:61:d5:43:6b:15:ca: 08:50:28:f3:82:90:48:83:2c:fe:9f:1a:65:e3:86: 30:a3:07:ef:59:74:f4:37:51:64:22:89:35:a9:34: 31:90:a5:ca:12:75:38:58:b7:70:3b:4a:60:f7:62: 45:19:a4:a3:c1:69:d4:6f:8c:a9:6b:5e:ab:60:16: b1:cb:7d:63:cc:36:eb:8c:64:30:a8:09:fb:cc:79: 53:61:bb:e9:fb:40:e8:38:d3:08:a7:fd:17:00:ee: fc:c8:71:8f:cf:7f:d4:00:40:cc:3d:2a:a3:f1:c8: d4:af:de:4d:57:a3:39:11:b0:15:84:a6:1a:d3:b5: 9b:0c:bd:b9:32:7d:7b:40:be:84:e2:f3:69:49:f5: 4b:15:de:31:52:2f:84:6c:e4:b8:dd:e0:d2:7a:18: 93:73:69:85:37:0e:3a:ee:bf:07:17:9e:c5:72:9c: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D7:A1:D0:56:99:31:C7:69:9D:B2:39:70:CF:70:AE:07:56:6C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d090d32c-498e-32da-9ce7-b278f186aaa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.195.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:77:6b:93:60:00:8e:cc:ef:0c:ae:98:36:56:40:7c:97:46: e9:e1:e2:63:49:77:7d:2e:5c:ed:13:81:74:86:1b:4d:2e:e5: 60:db:58:24:f0:66:80:a9:db:d8:60:8a:50:6b:7e:2f:11:9a: bb:cd:68:20:4d:f4:cd:a2:68:ba:0f:0e:fe:16:35:f8:8d:fd: 41:d4:5b:23:e9:8e:7e:f0:4f:16:e8:37:89:79:19:03:2c:69: 2f:c9:95:25:57:30:fc:c7:12:05:b9:46:2b:bd:46:91:40:4e: a6:ee:c9:f1:99:55:91:65:f7:51:12:88:06:2c:f7:db:68:f0: 69:6d:d8:38:f2:b9:07:69:94:fb:c3:d1:2c:fb:6f:20:07:20: 70:10:68:46:9e:e7:e3:11:52:45:08:fc:d3:0e:aa:f4:b5:31: 03:aa:40:de:cf:8f:5a:01:a5:2e:1e:43:b1:2a:44:de:62:85: 63:ff:df:cb:5d:da:be:7d:43:03:c5:8c:ba:91:a5:80:00:b5: ca:ae:4a:ad:1f:8a:0f:91:6b:8f:9a:e6:bb:9e:c5:77:b2:20: e6:77:d7:44:a0:84:b5:28:a0:20:8d:65:a6:8e:5f:88:0c:ff: b7:68:cf:d7:ba:22:af:96:45:7f:0f:5c:65:b7:f8:49:ff:dc: eb:d3:0b:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw6APn8N0tOd2scAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWY3M2NkZDktMGRmOC00MTEyLThmZGQtZTViYTNlMDAyYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9etJgeI9wgucRgtYxCwckxptCZ5OsZaZxU0 29XR21MrQx4UpBMAoliuM60A+BSFk+lE3sUcYW4ZSepXm4Pr4sVIxdqq01X3Rn72 PbUu33Hofudh1UNrFcoIUCjzgpBIgyz+nxpl44YwowfvWXT0N1FkIok1qTQxkKXK EnU4WLdwO0pg92JFGaSjwWnUb4ypa16rYBaxy31jzDbrjGQwqAn7zHlTYbvp+0Do ONMIp/0XAO78yHGPz3/UAEDMPSqj8cjUr95NV6M5EbAVhKYa07WbDL25Mn17QL6E 4vNpSfVLFd4xUi+EbOS43eDSehiTc2mFNw467r8HF57Fcpw/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjXodBWmTHHaZ2yOXDPcK4HVmw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA5MGQzMmMtNDk4ZS0z MmRhLTljZTctYjI3OGYxODZhYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScOuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl3a5NgAI7M7wyumDZWQHyXRunh4mNJd30uXO0TgXSGG00u5WDbWCTw ZoCp29hgilBrfi8RmrvNaCBN9M2iaLoPDv4WNfiN/UHUWyPpjn7wTxboN4l5GQMs aS/JlSVXMPzHEgW5Riu9RpFATqbuyfGZVZFl91ESiAYs99to8Glt2DjyuQdplPvD 0Sz7byAHIHAQaEae5+MRUkUI/NMOqvS1MQOqQN7Pj1oBpS4eQ7EqRN5ihWP/38td 2r59QwPFjLqRpYAAtcquSq0fig+Ra4+a5ruexXeyIOZ310SghLUooCCNZaaOX4gM /7doz9e6Iq+WRX8PXGW3+En/3OvTC4I= -----END CERTIFICATE-----Generated at Sun Aug 24 09:36:39 2025 by rpki-client