$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d50bf8bc-b0c1-33b5-9b24-b8738356e4eb.roa File: d50bf8bc-b0c1-33b5-9b24-b8738356e4eb.roa (raw, json) Hash identifier: NIcbeL134ZjtxaZExOmXBZ9BfZDk9AJCBzNU49OItIM= Subject key identifier: 42:F8:43:C0:DE:7A:59:1D:85:7C:A2:0A:A4:5E:A4:95:15:1A:25:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC30AD6DA1C94D830A75080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d50bf8bc-b0c1-33b5-9b24-b8738356e4eb.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.189.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:0a:d6:da:1c:94:d8:30:a7:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f4e0d148-21ea-467f-94dd-d7eb8c78c0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:02:b7:2b:11:ce:ac:fb:1c:6b:8f:ac:c8:47: 82:a8:de:3f:ba:3b:e4:a5:7a:59:f6:ca:1e:50:32: 1c:5d:b4:29:56:82:e7:30:59:80:2c:c4:dd:f4:08: d3:e5:29:aa:21:f3:f7:f1:34:72:60:f4:2e:20:9e: 1c:ca:66:6f:da:79:fb:28:81:41:cf:ec:3e:34:c9: d3:0a:95:2e:13:74:15:f2:35:51:9e:88:2f:39:ce: 69:88:5c:d1:d6:41:83:a6:61:71:96:73:f6:66:1e: 5f:a3:e0:e5:aa:4b:0a:cf:87:e6:34:f2:4b:da:ac: c3:b1:51:59:e7:53:4d:6f:7d:ed:41:75:20:e0:7e: 2f:10:40:9e:0d:3c:11:34:30:70:bf:b8:72:76:91: 16:2b:4b:68:d2:08:4d:f1:d7:23:28:38:10:c2:23: c1:58:a2:5e:5d:39:e0:92:8f:68:89:b2:68:8a:3b: 9a:83:99:1a:62:1c:03:52:c8:ac:cd:92:8a:74:97: bd:26:38:57:3a:95:22:84:7f:fb:a5:41:c8:41:83: 3a:34:7f:a8:ef:47:7c:e2:28:bb:dc:58:a3:e2:75: d2:75:08:a5:4a:b2:d3:45:1c:6e:77:c7:18:a6:b3: 02:0f:77:8c:77:35:42:2e:c6:bc:a3:14:98:42:0c: c8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F8:43:C0:DE:7A:59:1D:85:7C:A2:0A:A4:5E:A4:95:15:1A:25:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d50bf8bc-b0c1-33b5-9b24-b8738356e4eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.189.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:10:ea:98:85:13:23:16:bc:77:36:19:c8:1c:b9:03:74:3c: 2c:47:41:21:f1:2c:fb:ee:a5:80:47:73:30:47:a6:1e:fd:41: 4a:df:dd:65:a0:cb:ce:dc:0a:8c:ca:f5:22:40:c9:4b:f8:a8: 24:4d:c6:e6:14:f7:4c:d3:07:9a:a5:9f:66:ca:94:ca:7c:57: e1:c8:1c:d8:59:df:50:2a:f2:93:11:d2:23:26:40:8d:d9:3d: d4:60:62:c8:6c:6d:81:f9:c1:dc:aa:98:00:01:4c:90:7a:06: 6d:46:53:9f:c5:2a:dd:a4:3a:d9:b8:04:fc:b4:1e:55:66:4f: d1:1e:8b:f0:30:3b:73:d4:7e:75:ec:b7:5b:26:68:88:f1:00: 2c:15:5d:05:b7:5d:ad:02:dd:59:15:76:ba:a3:21:aa:52:a8: c4:83:4a:fe:3a:22:d8:23:6c:3a:94:96:b7:c3:86:0b:96:2d: a6:2f:2e:0f:8b:f6:e8:2b:f9:4b:26:73:85:4e:d2:68:1d:a8: 07:7f:83:a1:3c:e3:5f:20:36:19:7e:77:21:24:11:22:50:12: 98:e5:71:93:76:16:cd:9b:be:02:f1:66:01:78:91:14:66:6b: 8d:a3:d8:ae:f3:ee:68:36:c7:d3:2d:d1:4f:4d:e7:53:5f:be: 2d:ee:e2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswwrW2hyU2DCnUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjRlMGQxNDgtMjFlYS00NjdmLTk0ZGQtZDdlYjhjNzhjMGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwK3KxHOrPsca4+syEeCqN4/ujvkpXpZ9soe UDIcXbQpVoLnMFmALMTd9AjT5SmqIfP38TRyYPQuIJ4cymZv2nn7KIFBz+w+NMnT CpUuE3QV8jVRnogvOc5piFzR1kGDpmFxlnP2Zh5fo+DlqksKz4fmNPJL2qzDsVFZ 51NNb33tQXUg4H4vEECeDTwRNDBwv7hydpEWK0to0ghN8dcjKDgQwiPBWKJeXTng ko9oibJoijuag5kaYhwDUsiszZKKdJe9JjhXOpUihH/7pUHIQYM6NH+o70d84ii7 3Fij4nXSdQilSrLTRRxud8cYprMCD3eMdzVCLsa8oxSYQgzIXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEL4Q8DeelkdhXyiCqRepJUVGiVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDUwYmY4YmMtYjBjMS0z M2I1LTliMjQtYjg3MzgzNTZlNGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQQ6piFEyMWvHc2GcgcuQN0PCxHQSHxLPvupYBHczBHph79QUrf3WWg y87cCozK9SJAyUv4qCRNxuYU90zTB5qln2bKlMp8V+HIHNhZ31Aq8pMR0iMmQI3Z PdRgYshsbYH5wdyqmAABTJB6Bm1GU5/FKt2kOtm4BPy0HlVmT9Eei/AwO3PUfnXs t1smaIjxACwVXQW3Xa0C3VkVdrqjIapSqMSDSv46ItgjbDqUlrfDhguWLaYvLg+L 9ugr+Usmc4VO0mgdqAd/g6E8418gNhl+dyEkESJQEpjlcZN2Fs2bvgLxZgF4kRRm a42j2K7z7mg2x9Mt0U9N51Nfvi3u4vI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:25:51 2025 by rpki-client