$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d31ec845-0b1d-36f2-980f-ab5202d5a201.roa File: d31ec845-0b1d-36f2-980f-ab5202d5a201.roa (raw, json) Hash identifier: FzyBy+IqgWPBrLbouU+BAK87Z/SI3XLffLvuevsptn4= Subject key identifier: 7A:D1:84:FF:6B:B9:42:49:7A:64:A1:77:BB:AE:78:BF:0E:61:F9:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC26A1C44ED728EE2220580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d31ec845-0b1d-36f2-980f-ab5202d5a201.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.209.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:6a:1c:44:ed:72:8e:e2:22:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7cf15a24-d198-4938-b098-3bb652e59d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:15:18:e0:9a:1b:6d:f6:ef:58:2f:14:b2: 5e:a7:2e:ed:04:cd:46:78:21:20:c3:d1:26:4f:e4: 34:b5:cf:1f:b5:9e:2d:4a:4f:28:a7:6c:e9:7f:60: 08:2f:f0:45:c3:92:43:d9:bb:7b:81:c0:a9:1c:de: 03:02:3b:a7:67:8c:dd:68:a8:f0:f2:f8:9b:91:09: 19:1b:13:d5:2b:41:52:bb:fd:9a:ca:80:d0:2b:60: b5:98:0b:24:11:ca:65:a8:f5:6e:d6:7c:46:d9:71: 40:8d:05:93:e9:43:2e:96:b3:4c:e2:ab:d7:d4:44: a5:62:7c:7d:69:7c:8d:1f:a3:40:4f:af:25:03:c8: 78:36:85:b3:60:71:51:b7:9c:84:25:b3:12:06:57: 95:e1:2f:d5:47:c1:f9:49:09:d1:52:91:d3:bc:29: 89:9d:4f:49:0f:4c:0d:58:e2:08:64:a3:7c:cf:7a: d6:fb:d8:ff:05:b4:3d:81:ce:c1:1e:ba:00:04:44: c4:b4:b0:87:a5:84:65:61:19:b6:ea:bd:fb:9d:b0: da:bf:9c:a2:9f:e1:2a:7d:58:db:4f:1d:11:09:8c: 9b:88:97:16:df:6c:f9:e2:69:89:e4:d4:8a:3a:0f: 46:0e:f2:25:6c:05:87:ef:c3:cb:89:d3:ed:3a:46: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D1:84:FF:6B:B9:42:49:7A:64:A1:77:BB:AE:78:BF:0E:61:F9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d31ec845-0b1d-36f2-980f-ab5202d5a201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:95:75:07:c3:e3:92:30:99:cb:66:bd:1d:02:8f:c0:ee:ff: 9a:15:b6:cf:53:4e:e8:72:81:3c:16:4f:df:78:b8:93:e5:6d: f1:96:9b:9b:ce:24:69:0c:88:f0:cf:96:fa:9e:49:97:a4:50: bd:4d:17:b4:65:f6:25:cd:8d:98:f8:98:a3:77:ec:72:7d:fb: 29:c7:16:c7:a5:f4:f2:0b:c8:8c:4c:f4:9b:06:c5:bf:83:b3: 63:26:72:fa:f1:0c:f5:16:f3:03:fe:f6:6f:04:26:09:65:c9: b4:54:74:f7:2f:7b:34:c4:e2:b5:bf:45:a6:8c:26:6e:e8:7b: 5c:42:fc:db:47:4f:9a:66:28:ad:5e:68:d2:52:34:f7:1b:1d: 26:6a:75:85:19:32:6b:d3:65:a4:37:c2:f1:d0:47:bf:2d:e9: bf:1f:06:eb:6d:7b:68:55:75:9b:62:7c:01:0a:f7:e2:2c:d8: 9b:4c:14:69:dc:58:54:02:17:ad:c7:d4:2f:de:f9:e7:33:16: 35:4e:71:08:29:07:e6:eb:87:69:5c:aa:10:05:8e:48:6d:d2: d4:28:05:f3:29:12:9e:6c:02:80:c7:4c:25:d7:b5:fe:dd:a1: 44:d5:48:8b:cb:ab:e9:7c:31:5a:ae:cc:cc:23:cf:50:9a:b1: d6:aa:34:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswmocRO1yjuIiBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2NmMTVhMjQtZDE5OC00OTM4LWIwOTgtM2JiNjUyZTU5ZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzIVGOCaG23271gvFLJepy7tBM1GeCEgw9Em T+Q0tc8ftZ4tSk8op2zpf2AIL/BFw5JD2bt7gcCpHN4DAjunZ4zdaKjw8vibkQkZ GxPVK0FSu/2ayoDQK2C1mAskEcplqPVu1nxG2XFAjQWT6UMulrNM4qvX1ESlYnx9 aXyNH6NAT68lA8h4NoWzYHFRt5yEJbMSBleV4S/VR8H5SQnRUpHTvCmJnU9JD0wN WOIIZKN8z3rW+9j/BbQ9gc7BHroABETEtLCHpYRlYRm26r37nbDav5yin+EqfVjb Tx0RCYybiJcW32z54mmJ5NSKOg9GDvIlbAWH78PLidPtOkYIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrRhP9ruUJJemShd7uueL8OYfkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDMxZWM4NDUtMGIxZC0z NmYyLTk4MGYtYWI1MjAyZDVhMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqVdQfD45IwmctmvR0Cj8Du/5oVts9TTuhygTwWT994uJPlbfGWm5vO JGkMiPDPlvqeSZekUL1NF7Rl9iXNjZj4mKN37HJ9+ynHFsel9PILyIxM9JsGxb+D s2MmcvrxDPUW8wP+9m8EJgllybRUdPcvezTE4rW/RaaMJm7oe1xC/NtHT5pmKK1e aNJSNPcbHSZqdYUZMmvTZaQ3wvHQR78t6b8fButte2hVdZtifAEK9+Is2JtMFGnc WFQCF63H1C/e+eczFjVOcQgpB+brh2lcqhAFjkht0tQoBfMpEp5sAoDHTCXXtf7d oUTVSIvLq+l8MVquzMwjz1CasdaqNLY= -----END CERTIFICATE-----Generated at Sun Aug 24 01:35:34 2025 by rpki-client