$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99ef928-8eaa-38f5-a9e9-9675c820fcf3.roa File: d99ef928-8eaa-38f5-a9e9-9675c820fcf3.roa (raw, json) Hash identifier: kMh6q4E6mQbiGtizC/LqryIEbAmF9yuVGk5yyJ+KZ/E= Subject key identifier: EA:FB:6C:96:D3:8C:E2:98:68:7A:A7:84:99:4F:C4:98:91:10:2E:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4845C1161F859B48347E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99ef928-8eaa-38f5-a9e9-9675c820fcf3.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.22.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:84:5c:11:61:f8:59:b4:83:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8ddf2f90-2f64-4550-a6c6-da54a1974535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:1a:32:54:d8:2e:81:3d:b2:18:1c:47:01: bd:d9:ef:35:c6:2d:18:0a:3c:40:26:93:e8:06:66: 6a:a8:63:97:33:0d:0b:f6:5e:c9:c2:7b:cb:ba:e0: 93:f0:29:37:bc:ef:6c:c5:c3:7e:97:42:6f:8e:b9: 21:2f:d9:fe:eb:78:02:f5:3c:92:7a:24:4f:f6:82: ef:7a:3f:5e:b1:3e:74:b0:56:9a:63:54:ff:eb:da: 2a:f8:61:61:e2:2e:d6:19:49:84:63:6f:e4:06:f2: 5c:d7:6b:08:69:f9:03:a0:6b:42:57:f1:47:a4:b7: 4b:12:0e:b4:e2:57:43:d7:f3:ef:03:c5:8e:cd:6f: 54:85:52:a4:2b:ef:13:0d:1e:61:a0:a3:12:4c:eb: 61:85:44:61:92:0d:e8:cc:24:c0:bc:18:68:a7:2b: 05:db:a1:dd:b5:ab:97:81:15:e2:b1:5b:da:ae:cf: 12:fd:17:4b:3a:0a:f5:19:0f:f8:36:62:32:e6:79: 3b:00:2c:3b:14:ef:a9:de:03:80:0d:d7:07:a6:dd: 0c:4f:ca:f8:3c:de:1e:03:50:53:ec:29:50:dd:64: 5e:d4:f1:94:0c:68:74:55:fa:23:6f:ab:5f:1d:c5: de:50:57:97:be:d2:16:52:ef:0e:1e:1d:3e:eb:02: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:6C:96:D3:8C:E2:98:68:7A:A7:84:99:4F:C4:98:91:10:2E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d99ef928-8eaa-38f5-a9e9-9675c820fcf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.22.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d2:14:3a:64:50:7f:2f:ce:a7:d7:e6:36:a2:38:77:0a:68: b2:70:a1:f3:ef:ab:26:26:67:96:ef:fe:50:b3:a5:62:28:4c: 12:8c:44:f8:6f:5a:7a:ac:49:da:29:06:8f:8e:d3:85:64:f3: d6:2b:86:8b:d0:fc:bb:3f:38:2c:8c:82:00:8c:1f:e5:db:ae: bd:fb:0c:a9:7f:c2:a5:0d:b8:f1:71:ea:b7:0b:6e:c9:65:42: 98:a8:3b:aa:da:3a:b2:64:ce:2c:47:45:28:36:0d:05:db:77: 89:9f:a9:d7:6f:a5:8c:c4:0f:68:79:fe:8c:86:8d:c4:21:04: 63:2a:75:5a:64:b7:3a:9f:f2:97:3f:6f:62:b8:c1:2e:09:8a: 69:02:7d:e8:a1:1e:04:6d:41:0b:4d:20:fa:18:6b:8b:7f:2e: d1:c3:a7:2d:85:10:6a:9d:2c:dd:ca:e6:a2:a6:68:8f:86:c8: 54:45:80:47:9a:23:ec:96:88:da:c2:b6:f9:8f:52:73:b6:a0: be:79:82:13:9f:d6:40:1b:89:7e:98:bc:49:0b:33:5b:9a:7d: 15:d6:1f:a3:ba:40:c5:23:69:ea:51:04:71:75:d5:c2:35:3f: 31:ce:ee:85:91:68:6f:66:fd:83:25:f0:aa:96:c1:b7:51:06: 21:0f:74:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxIRcEWH4WbSDR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGRkZjJmOTAtMmY2NC00NTUwLWE2YzYtZGE1NGExOTc0NTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOsaMlTYLoE9shgcRwG92e81xi0YCjxAJpPo BmZqqGOXMw0L9l7JwnvLuuCT8Ck3vO9sxcN+l0JvjrkhL9n+63gC9TySeiRP9oLv ej9esT50sFaaY1T/69oq+GFh4i7WGUmEY2/kBvJc12sIafkDoGtCV/FHpLdLEg60 4ldD1/PvA8WOzW9UhVKkK+8TDR5hoKMSTOthhURhkg3ozCTAvBhopysF26HdtauX gRXisVvars8S/RdLOgr1GQ/4NmIy5nk7ACw7FO+p3gOADdcHpt0MT8r4PN4eA1BT 7ClQ3WRe1PGUDGh0Vfojb6tfHcXeUFeXvtIWUu8OHh0+6wLMZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr7bJbTjOKYaHqnhJlPxJiREC7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk5ZWY5MjgtOGVhYS0z OGY1LWE5ZTktOTY3NWM4MjBmY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3SFDpkUH8vzqfX5jaiOHcKaLJwofPvqyYmZ5bv/lCzpWIoTBKMRPhv WnqsSdopBo+O04Vk89YrhovQ/Ls/OCyMggCMH+Xbrr37DKl/wqUNuPFx6rcLbsll QpioO6raOrJkzixHRSg2DQXbd4mfqddvpYzED2h5/oyGjcQhBGMqdVpktzqf8pc/ b2K4wS4JimkCfeihHgRtQQtNIPoYa4t/LtHDpy2FEGqdLN3K5qKmaI+GyFRFgEea I+yWiNrCtvmPUnO2oL55ghOf1kAbiX6YvEkLM1uafRXWH6O6QMUjaepRBHF11cI1 PzHO7oWRaG9m/YMl8KqWwbdRBiEPdN4= -----END CERTIFICATE-----Generated at Sun Aug 24 01:19:28 2025 by rpki-client