$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db4a78c0-6458-3322-b50a-22219e360b9e.roa File: db4a78c0-6458-3322-b50a-22219e360b9e.roa (raw, json) Hash identifier: vmaibBJmdske7xoDNoI0QxBzXUlB7MEl8LRpzt7mtSw= Subject key identifier: 51:60:C9:C1:79:54:42:3D:78:47:1A:DF:EB:97:C4:44:7E:56:92:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC195E9F2159D215D5044E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db4a78c0-6458-3322-b50a-22219e360b9e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.150.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:95:e9:f2:15:9d:21:5d:50:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e020b82b-11b6-495d-bf4e-7634726bd88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:e6:32:7a:5c:9c:56:ef:74:51:00:81:ea: 3b:ba:85:a9:3a:25:76:37:7a:cb:eb:ea:ff:bc:e6: 2b:56:4f:0d:fc:3c:9f:e8:5c:e7:01:eb:94:7c:ae: e9:dc:b0:21:b1:ba:88:78:80:ad:1b:8e:62:08:9e: 99:62:b8:ad:81:86:2b:84:5e:03:5a:64:f1:bb:a9: 5a:ef:e1:8a:63:1d:f1:23:55:f2:5a:fd:cc:e6:0c: 8f:52:a1:d9:3c:a7:37:e9:f2:24:da:31:fc:a6:ec: 13:2b:7c:07:e8:c9:c4:b6:8a:21:18:75:fb:fa:86: 64:9f:fa:0f:7d:ed:99:7f:d3:f1:f4:1f:44:70:44: 9d:d8:ea:e0:3b:48:d7:e7:64:97:89:c8:4b:0a:f4: 40:81:80:63:1b:55:c7:d3:22:d0:85:0b:36:38:f4: 96:41:3e:7c:62:bf:7f:53:85:1f:03:0f:9d:4e:52: ba:5c:85:f6:1c:77:3c:a8:4d:8d:24:42:e5:d5:d2: 3b:d5:ac:13:12:3e:63:ea:3f:87:1c:8e:a0:a8:8d: c9:65:d8:c7:13:c5:5f:a7:51:9d:53:37:e4:34:65: 44:e2:36:2a:ad:1e:64:19:5b:e7:ae:81:ab:d2:4e: b4:9a:ad:96:41:ca:6a:fc:9a:81:58:56:29:4a:d0: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:60:C9:C1:79:54:42:3D:78:47:1A:DF:EB:97:C4:44:7E:56:92:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db4a78c0-6458-3322-b50a-22219e360b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.150.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ef:f1:6b:6d:2f:a3:c9:04:c6:f7:e4:83:a3:05:f1:ba:62: be:d3:e2:02:21:9f:53:63:8c:a7:0f:d6:54:5f:19:b7:9b:fe: ea:52:5e:27:ec:99:d3:df:68:87:2e:45:bd:f3:20:4e:56:e2: 28:4f:3c:93:28:4d:19:58:48:0d:aa:8b:95:1c:3a:86:5f:0f: da:d3:07:32:68:23:6c:88:f8:a6:74:44:62:01:77:e3:1a:2b: 91:0c:aa:23:d2:86:cd:35:17:c4:1d:65:a1:78:03:18:53:cf: 8f:a1:f6:9e:8f:1b:e7:65:cf:eb:f9:a5:0c:de:eb:22:14:08: 83:0d:f4:31:60:d3:e0:f1:d1:05:90:e7:63:22:e2:18:11:1a: e7:00:52:db:1e:4a:de:ba:11:20:00:18:28:6a:84:08:7d:02: b2:4c:15:78:28:61:d3:79:c2:a5:d6:0e:43:04:9c:0a:3b:d0: 52:66:ee:7b:0e:ae:cc:5a:9e:ca:82:97:10:34:e5:30:d4:f5: d0:ea:a9:64:ec:4f:18:29:16:5b:ba:5e:d5:9e:8e:ac:73:57: 7c:b4:4f:33:ac:bf:de:7e:33:6d:4d:62:ce:84:41:d1:6a:d8: a4:63:c9:a2:ac:4d:e0:9d:70:d0:5d:08:98:af:01:9b:fc:2e: 05:b9:e0:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswZXp8hWdIV1QROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTAyMGI4MmItMTFiNi00OTVkLWJmNGUtNzYzNDcyNmJkODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzrmMnpcnFbvdFEAgeo7uoWpOiV2N3rL6+r/ vOYrVk8N/Dyf6FznAeuUfK7p3LAhsbqIeICtG45iCJ6ZYritgYYrhF4DWmTxu6la 7+GKYx3xI1XyWv3M5gyPUqHZPKc36fIk2jH8puwTK3wH6MnEtoohGHX7+oZkn/oP fe2Zf9Px9B9EcESd2OrgO0jX52SXichLCvRAgYBjG1XH0yLQhQs2OPSWQT58Yr9/ U4UfAw+dTlK6XIX2HHc8qE2NJELl1dI71awTEj5j6j+HHI6gqI3JZdjHE8Vfp1Gd UzfkNGVE4jYqrR5kGVvnroGr0k60mq2WQcpq/JqBWFYpStCmTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFgycF5VEI9eEca3+uXxER+VpJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGI0YTc4YzAtNjQ1OC0z MzIyLWI1MGEtMjIyMTllMzYwYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSZawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfv8WttL6PJBMb35IOjBfG6Yr7T4gIhn1NjjKcP1lRfGbeb/upSXifs mdPfaIcuRb3zIE5W4ihPPJMoTRlYSA2qi5UcOoZfD9rTBzJoI2yI+KZ0RGIBd+Ma K5EMqiPShs01F8QdZaF4AxhTz4+h9p6PG+dlz+v5pQze6yIUCIMN9DFg0+Dx0QWQ 52Mi4hgRGucAUtseSt66ESAAGChqhAh9ArJMFXgoYdN5wqXWDkMEnAo70FJm7nsO rsxansqClxA05TDU9dDqqWTsTxgpFlu6XtWejqxzV3y0TzOsv95+M21NYs6EQdFq 2KRjyaKsTeCdcNBdCJivAZv8LgW54HQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:25:40 2025 by rpki-client