$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6daf2b2-b1d8-3b07-b4ee-679f88e93249.roa File: e6daf2b2-b1d8-3b07-b4ee-679f88e93249.roa (raw, json) Hash identifier: j0+n12vR+TrB9T8Jpgax8xBcOHhO+8UOTzusSxVqW68= Subject key identifier: A0:6E:2E:92:83:97:B3:0F:B0:3B:2E:03:55:68:CE:DC:3B:D5:45:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1E878503DC7635EFF2D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6daf2b2-b1d8-3b07-b4ee-679f88e93249.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 73.141.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:e8:78:50:3d:c7:63:5e:ff:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fcd6ded8-5bd7-4290-bb74-6b4e85bc2462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:5d:84:1d:56:bf:7f:1e:c8:5f:39:ad:69: a4:d4:b3:b6:28:9a:fc:6c:4f:e4:c1:e0:50:50:3b: 26:a1:51:ae:35:9a:9c:1d:4f:86:92:26:32:0f:4c: 80:de:06:83:cf:67:34:bf:4c:d5:ee:6f:59:ab:8e: 5a:e1:67:9d:cc:57:a8:f0:63:2d:0d:3b:92:47:6d: 28:47:37:79:2d:c2:74:b1:47:5d:61:a4:e0:2f:f3: 25:8d:3a:54:be:f4:bc:19:3a:b1:7e:0f:ff:8e:af: f6:31:71:46:96:bc:21:e8:48:d4:79:43:82:a3:d2: 5b:36:ed:08:cb:86:2c:43:2f:b7:f5:6e:87:4c:ca: be:df:3c:86:da:43:92:76:b9:7b:8c:72:12:1d:f9: 78:3c:34:aa:bf:6f:38:d7:ca:95:94:66:df:f1:12: 67:16:c8:f2:d5:88:3f:72:1a:96:3c:04:59:6e:c6: 68:8c:7e:30:cf:8c:d1:84:8d:10:53:58:aa:11:90: 96:61:4a:5e:29:10:2b:eb:88:eb:78:a3:2c:ca:90: 70:36:e2:4e:1f:ed:a6:5b:70:ca:d3:e9:04:1f:ee: 14:25:29:46:09:c4:67:df:41:c1:ee:f2:63:25:37: 99:c5:61:69:c0:d1:ad:e1:98:35:7c:3c:cc:38:f0: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6E:2E:92:83:97:B3:0F:B0:3B:2E:03:55:68:CE:DC:3B:D5:45:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6daf2b2-b1d8-3b07-b4ee-679f88e93249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.141.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c3:fb:3b:f5:36:d4:e3:ef:e0:e3:de:e7:93:b2:69:71:76: b1:b8:9e:db:0a:b4:f9:82:24:c8:55:9c:30:0b:20:0d:23:42: b1:ad:af:1d:67:63:34:73:1f:00:e9:a7:bc:eb:f4:f3:ef:83: 99:8d:b7:d6:4f:8a:1d:33:a3:ce:9f:83:66:1b:6e:30:19:f5: 74:f8:35:85:b5:89:5f:75:58:56:de:4d:be:d3:e4:ee:79:53: 3c:a6:3f:b6:f4:87:e6:a8:16:72:75:87:b8:e8:e6:21:82:73: c6:ef:a1:87:ab:27:0c:9a:27:76:20:44:96:c0:05:11:47:05: 1f:e6:ba:84:e4:c0:ea:23:cf:e1:12:be:8c:c6:a8:65:b6:31: 23:53:29:f4:cc:fd:03:13:b0:a1:07:8d:02:21:d1:d0:d1:38: 97:eb:6b:f8:5d:e9:10:25:9d:8c:ed:95:b8:cf:ae:b5:a0:d8: b0:92:61:92:96:07:d6:b1:22:83:9b:90:ee:36:9d:d7:05:28: e8:65:f1:7c:18:82:c9:49:bd:d4:d2:60:5f:cd:e6:dc:80:5a: f0:3c:b8:06:96:65:3c:a1:87:41:4b:15:01:6d:75:01:f1:58: 39:2e:1b:95:e4:51:69:9b:ff:94:a6:76:36:6e:b0:a2:6a:2c: ef:7e:e1:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsweh4UD3HY17/LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmNkNmRlZDgtNWJkNy00MjkwLWJiNzQtNmI0ZTg1YmMyNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcldhB1Wv38eyF85rWmk1LO2KJr8bE/kweBQ UDsmoVGuNZqcHU+GkiYyD0yA3gaDz2c0v0zV7m9Zq45a4WedzFeo8GMtDTuSR20o Rzd5LcJ0sUddYaTgL/MljTpUvvS8GTqxfg//jq/2MXFGlrwh6EjUeUOCo9JbNu0I y4YsQy+39W6HTMq+3zyG2kOSdrl7jHISHfl4PDSqv28418qVlGbf8RJnFsjy1Yg/ chqWPARZbsZojH4wz4zRhI0QU1iqEZCWYUpeKRAr64jreKMsypBwNuJOH+2mW3DK 0+kEH+4UJSlGCcRn30HB7vJjJTeZxWFpwNGt4Zg1fDzMOPBXtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBuLpKDl7MPsDsuA1Voztw71UUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTZkYWYyYjItYjFkOC0z YjA3LWI0ZWUtNjc5Zjg4ZTkzMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSY1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3D+zv1NtTj7+Dj3ueTsmlxdrG4ntsKtPmCJMhVnDALIA0jQrGtrx1n YzRzHwDpp7zr9PPvg5mNt9ZPih0zo86fg2YbbjAZ9XT4NYW1iV91WFbeTb7T5O55 UzymP7b0h+aoFnJ1h7jo5iGCc8bvoYerJwyaJ3YgRJbABRFHBR/muoTkwOojz+ES vozGqGW2MSNTKfTM/QMTsKEHjQIh0dDROJfra/hd6RAlnYztlbjPrrWg2LCSYZKW B9axIoObkO42ndcFKOhl8XwYgslJvdTSYF/N5tyAWvA8uAaWZTyhh0FLFQFtdQHx WDkuG5XkUWmb/5SmdjZusKJqLO9+4Yo= -----END CERTIFICATE-----Generated at Sat Aug 23 23:06:56 2025 by rpki-client