$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdad3ef-7d49-3c7a-b04c-3a0497b71107.roa File: ffdad3ef-7d49-3c7a-b04c-3a0497b71107.roa (raw, json) Hash identifier: PNKxZuRmpTOHBk+7G2cJFtu0V0et1j53YYphE40FtQ8= Subject key identifier: A8:A9:11:17:D6:53:83:11:C8:F9:72:7E:0C:72:23:4C:D8:0B:FE:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC51B62C2B8EECDA381FE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdad3ef-7d49-3c7a-b04c-3a0497b71107.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.158.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:1b:62:c2:b8:ee:cd:a3:81:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b06c73fb-dea3-4cb4-97b8-b6f56bd779a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:89:b4:cd:77:4a:5e:e2:e4:57:cb:c5:a4: 16:32:06:b3:ec:21:a7:f1:82:62:97:53:df:c8:c8: e9:fa:58:5f:f5:f5:42:6e:d1:a8:7c:da:01:72:30: bc:d8:54:2a:2b:31:f2:54:21:ba:52:7f:c9:64:df: 72:bd:db:52:8a:fa:6e:80:14:f4:02:82:ea:0d:56: 26:07:5d:a6:bf:f9:53:3d:3c:c3:1e:5e:42:cb:34: 63:6d:12:73:04:bd:d0:bb:7a:a7:d7:ba:74:61:7b: 14:4e:17:3a:cc:c4:d6:1c:b2:c8:01:ba:4e:68:ea: 5b:5f:4b:d3:a6:9e:20:08:1c:da:3b:31:41:ba:d8: 78:35:1c:15:e0:77:42:7e:b3:31:98:12:ab:d3:42: b1:e4:51:e5:73:07:be:3b:a9:9b:eb:21:02:48:62: fb:3d:af:e4:21:f3:f8:1a:f3:57:be:f0:8c:5b:4b: 22:b8:7a:14:7f:36:dd:04:48:d1:89:a5:09:56:ba: 04:ee:c1:f0:7c:35:b3:ad:7e:2e:b4:7c:64:4d:c6: ff:95:42:78:2d:72:28:1c:0f:82:7a:a0:aa:fa:9b: f4:b4:c7:1e:9c:a7:97:56:47:6f:8e:42:ef:1c:10: b9:92:92:e5:22:5a:ab:21:5e:37:d9:7b:a0:42:3b: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A9:11:17:D6:53:83:11:C8:F9:72:7E:0C:72:23:4C:D8:0B:FE:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffdad3ef-7d49-3c7a-b04c-3a0497b71107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c1:51:1f:ba:fd:2b:c7:52:02:46:cd:ac:2f:e8:d2:5b:ad: 9a:1f:25:93:a0:48:73:2a:3d:ad:82:d5:36:b5:70:e1:5b:2e: d1:90:4f:48:c4:7d:0b:8b:4e:3b:60:2c:4a:de:16:16:29:77: bf:ab:de:59:4e:79:79:8d:74:f4:55:eb:00:92:73:9a:3b:a2: ee:44:b4:c7:18:37:ae:ce:0c:30:cd:98:f7:b3:21:54:9f:76: 38:bc:00:2a:d0:a5:e8:7c:36:c3:cf:d0:99:23:5c:bb:5c:80: 0d:31:25:42:ca:e8:80:ba:5a:e8:5e:86:44:2b:23:b9:3f:49: 2c:f7:e1:b1:13:6b:c5:33:dc:33:39:ea:9c:75:2a:f9:a2:8a: bc:1a:0b:fa:e6:45:ec:d5:4d:dd:55:98:5d:31:c1:40:77:a4: ae:25:a6:90:53:88:12:2a:61:86:60:1d:89:ec:44:07:0f:12: 51:74:70:0e:97:91:48:ba:cc:cd:1b:bf:17:05:e2:a1:f3:2d: 8d:82:45:b8:7e:4f:76:4f:0f:ac:65:6e:d0:4e:aa:6a:66:21: 87:ce:15:4a:6b:73:f6:3a:22:4f:b0:cb:2b:93:9c:97:b4:35: 18:b4:64:c7:36:ef:ba:e0:b0:24:b5:97:86:79:51:6a:02:02: e2:ef:0f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxRtiwrjuzaOB/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjA2YzczZmItZGVhMy00Y2I0LTk3YjgtYjZmNTZiZDc3OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDiJtM13Sl7i5FfLxaQWMgaz7CGn8YJil1Pf yMjp+lhf9fVCbtGofNoBcjC82FQqKzHyVCG6Un/JZN9yvdtSivpugBT0AoLqDVYm B12mv/lTPTzDHl5CyzRjbRJzBL3Qu3qn17p0YXsUThc6zMTWHLLIAbpOaOpbX0vT pp4gCBzaOzFButh4NRwV4HdCfrMxmBKr00Kx5FHlcwe+O6mb6yECSGL7Pa/kIfP4 GvNXvvCMW0siuHoUfzbdBEjRiaUJVroE7sHwfDWzrX4utHxkTcb/lUJ4LXIoHA+C eqCq+pv0tMcenKeXVkdvjkLvHBC5kpLlIlqrIV432XugQjuSeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKipERfWU4MRyPlyfgxyI0zYC/5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmZkYWQzZWYtN2Q0OS0z YzdhLWIwNGMtM2EwNDk3YjcxMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ6uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXBUR+6/SvHUgJGzawv6NJbrZofJZOgSHMqPa2C1Ta1cOFbLtGQT0jE fQuLTjtgLEreFhYpd7+r3llOeXmNdPRV6wCSc5o7ou5EtMcYN67ODDDNmPezIVSf dji8ACrQpeh8NsPP0JkjXLtcgA0xJULK6IC6WuhehkQrI7k/SSz34bETa8Uz3DM5 6px1KvmiirwaC/rmRezVTd1VmF0xwUB3pK4lppBTiBIqYYZgHYnsRAcPElF0cA6X kUi6zM0bvxcF4qHzLY2CRbh+T3ZPD6xlbtBOqmpmIYfOFUprc/Y6Ik+wyyuTnJe0 NRi0ZMc277rgsCS1l4Z5UWoCAuLvD/w= -----END CERTIFICATE-----Generated at Sun Aug 24 09:33:44 2025 by rpki-client