$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa File: d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa (raw, json) Hash identifier: neftBoAFQ6uQs+etRIeVHOmtiTQ4PfQnwgvYjLg5snw= Subject key identifier: D5:83:B9:AD:A0:55:E2:17:17:37:83:C8:A6:08:B5:FC:F7:90:A9:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2FDC0A6248F45F18BCD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.158.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:fd:c0:a6:24:8f:45:f1:8b:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3e7c18c8-6750-4485-92ca-4906a3922d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:11:69:27:34:c3:79:95:19:9e:6b:ad:3a: 60:3b:42:88:9a:12:8c:a1:65:bb:57:52:6d:84:1d: c1:34:a7:0c:36:1a:c6:0d:4b:a7:95:dd:55:86:29: 40:5e:d2:09:6c:1b:59:a8:0c:d7:a7:2b:cc:92:19: 79:3f:43:09:50:9c:12:77:be:11:a3:38:78:90:57: 8d:0d:66:ce:53:a6:63:06:1d:13:18:e6:e3:ab:1d: ef:73:53:b3:c3:3c:31:a4:f7:b8:1f:1c:ad:a1:db: 2c:95:46:da:bc:b8:b9:57:cf:79:12:e7:1b:15:f2: 58:20:f1:fd:20:e2:da:2f:d8:9e:53:02:7d:8d:9c: 2c:3e:be:35:4b:cc:6e:1a:e0:26:cb:08:f8:7c:ed: 16:9e:5d:18:a9:28:92:41:0c:69:af:d0:bc:e5:64: 63:d6:51:f9:a4:f9:cd:4c:0c:bb:35:5d:62:61:92: 97:e3:5b:63:0b:cd:ee:cc:de:80:4d:e4:32:7d:79: f9:68:d2:20:73:d5:d1:d2:01:58:3f:6e:58:50:48: 0f:10:fb:76:19:f6:b2:67:92:66:07:8c:43:7d:61: 09:67:81:8e:bb:f8:2f:8d:40:85:58:1e:19:46:0f: 10:98:8b:f8:47:e7:0c:de:32:af:91:44:4d:e4:ce: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:83:B9:AD:A0:55:E2:17:17:37:83:C8:A6:08:B5:FC:F7:90:A9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b5:97:36:00:70:7e:32:dc:8f:7e:fc:9f:57:72:0a:c5:4c: a0:ab:ae:b7:0e:6c:4d:84:e9:57:0a:f4:9c:dc:16:c5:dc:5f: 6b:6f:10:a3:f4:92:13:9c:9d:57:13:6c:a1:94:70:df:a8:f2: fe:0f:70:1d:28:24:45:17:6e:cb:89:32:ac:0b:14:cb:54:74: 55:9f:20:da:1d:f8:0b:da:5f:3b:00:f7:ea:fc:34:f3:d2:86: b5:ac:67:5d:75:dd:a1:9a:28:c1:79:4d:c5:42:2d:0e:da:ad: 30:92:57:5f:76:a1:b3:01:46:1c:ed:12:28:6b:d4:c7:ef:e4: ba:cf:d1:64:f5:bb:70:ce:ed:cf:c8:98:7a:7b:cd:36:79:c8: a9:a0:4d:ec:a5:27:3b:ce:da:74:ee:65:e0:0f:a1:6c:3b:9e: 9f:ba:5e:eb:08:59:68:89:6d:9d:fe:53:45:df:6c:ea:b7:63: aa:94:22:62:1c:2e:73:41:78:83:47:ad:b0:9b:9d:47:86:1c: 0a:73:d2:5a:a2:32:2c:f9:41:bd:f1:ed:e7:98:8a:a2:e8:e3: 01:a9:21:1c:11:15:1c:18:4f:3d:40:e9:56:b1:b2:a6:ae:2e: 65:9c:ad:35:42:20:47:80:93:2e:b2:f0:1d:eb:b0:fe:53:31: d6:a7:47:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswv3ApiSPRfGLzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2U3YzE4YzgtNjc1MC00NDg1LTkyY2EtNDkwNmEzOTIyZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiIRaSc0w3mVGZ5rrTpgO0KImhKMoWW7V1Jt hB3BNKcMNhrGDUunld1VhilAXtIJbBtZqAzXpyvMkhl5P0MJUJwSd74Rozh4kFeN DWbOU6ZjBh0TGObjqx3vc1OzwzwxpPe4HxytodsslUbavLi5V895EucbFfJYIPH9 IOLaL9ieUwJ9jZwsPr41S8xuGuAmywj4fO0Wnl0YqSiSQQxpr9C85WRj1lH5pPnN TAy7NV1iYZKX41tjC83uzN6ATeQyfXn5aNIgc9XR0gFYP25YUEgPEPt2GfayZ5Jm B4xDfWEJZ4GOu/gvjUCFWB4ZRg8QmIv4R+cM3jKvkURN5M5hxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWDua2gVeIXFzeDyKYItfz3kKkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRmOWMyZmQtZGIyZS0z MjA3LTg5MzAtZGUxOGI4M2VmM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC1lzYAcH4y3I9+/J9XcgrFTKCrrrcObE2E6VcK9JzcFsXcX2tvEKP0 khOcnVcTbKGUcN+o8v4PcB0oJEUXbsuJMqwLFMtUdFWfINod+AvaXzsA9+r8NPPS hrWsZ1113aGaKMF5TcVCLQ7arTCSV192obMBRhztEihr1Mfv5LrP0WT1u3DO7c/I mHp7zTZ5yKmgTeylJzvO2nTuZeAPoWw7np+6XusIWWiJbZ3+U0XfbOq3Y6qUImIc LnNBeINHrbCbnUeGHApz0lqiMiz5Qb3x7eeYiqLo4wGpIRwRFRwYTz1A6Vaxsqau LmWcrTVCIEeAky6y8B3rsP5TMdanR/4= -----END CERTIFICATE-----Generated at Sat Aug 23 22:56:05 2025 by rpki-client