$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04a51d3b-e730-32fa-a795-3de7eb713357.roa File: 04a51d3b-e730-32fa-a795-3de7eb713357.roa (raw, json) Hash identifier: pldMrPCwcGGplW6Z7ez5so1WnBZ59xb8wEDFtE1wK2Q= Subject key identifier: 5A:15:9C:8D:99:D5:7C:EE:FF:74:0F:6A:16:D9:25:DF:A6:F9:50:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC526A7C97ECBB63C1ECD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04a51d3b-e730-32fa-a795-3de7eb713357.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.170.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:26:a7:c9:7e:cb:b6:3c:1e:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0f0969de-f233-481a-acfd-d75df987d28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:b8:61:64:ee:f1:6a:c4:cb:4d:96:b0:fa: 91:a4:b9:b9:3d:66:b3:9a:65:89:9e:46:47:b0:d5: ea:70:1f:e9:64:d7:4a:19:ef:47:43:ed:a3:9a:c9: 95:34:e7:0f:b4:af:6b:9b:16:06:84:1e:cb:4a:6c: 95:40:6a:6f:41:33:29:63:56:20:80:32:29:89:84: 8b:51:db:36:fd:13:ea:8c:bd:60:76:cb:54:46:7b: 47:2e:5b:64:d5:92:e4:a0:3d:bf:c1:4a:66:f1:70: 65:c6:15:3e:4b:fe:3d:3a:6e:42:42:82:d8:0a:43: e9:90:26:b3:c9:64:65:82:17:49:02:79:da:cd:3f: 57:64:77:8b:e8:1b:5f:63:50:24:4e:0b:82:39:2b: 40:0a:c0:8d:9d:b7:2a:c1:1f:7c:4f:15:3b:b4:21: 8f:08:d6:c3:1e:89:83:80:cf:e2:41:c8:93:11:44: 30:f4:aa:ef:84:01:75:c6:8a:ef:59:05:95:e2:a3: 4e:d3:89:6b:45:9e:bc:73:69:a2:09:81:3b:56:b4: e1:e1:75:c3:35:32:92:8e:e8:93:2e:8e:8c:52:82: 71:9f:2f:3d:b1:11:c7:41:fb:51:ba:7e:f6:e2:9f: 27:55:e1:be:cf:ea:d7:8b:05:a0:36:52:bc:e4:8f: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:15:9C:8D:99:D5:7C:EE:FF:74:0F:6A:16:D9:25:DF:A6:F9:50:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04a51d3b-e730-32fa-a795-3de7eb713357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:97:54:67:7a:a6:2f:25:4e:0f:c2:3d:dd:b0:03:95:34:66: 6b:b9:7c:00:a8:46:37:bc:39:86:eb:8f:ec:15:c3:a2:f1:c8: bf:4a:6b:93:8f:a9:c7:1f:a5:36:8a:e5:9d:19:f3:d3:26:67: e9:f1:13:a9:5f:a3:ce:75:ee:48:b6:75:09:41:76:37:be:89: 86:f8:c2:a7:12:a0:7c:21:7b:25:75:a5:03:59:a7:bc:b2:20: e1:8d:0c:4a:5a:e0:c3:3d:0b:e7:3d:a3:a3:0f:e4:75:f4:a6: 70:f5:b3:4c:5c:2f:67:11:f9:d4:08:ef:be:d4:c2:91:e9:84: 0a:4f:b9:f7:15:f9:71:aa:a3:45:1f:c6:f8:d0:d5:71:1a:96: 5f:2b:34:fe:78:47:ba:0d:83:9d:30:5d:d1:c4:30:41:c8:a4: a1:d1:28:da:7d:3c:65:bf:20:c8:eb:86:9e:fc:86:b2:b6:46: 5f:ba:00:46:d6:51:04:78:cc:ad:9a:80:d6:2c:77:89:e7:5c: c4:fd:bd:2f:4a:df:06:46:fd:b9:6e:20:dd:72:f0:0e:03:93: b7:dd:00:9e:3a:b6:67:ee:51:69:de:ce:9d:6d:d1:21:72:33: 7f:c3:3b:b6:cb:f5:39:18:8c:1e:77:68:f5:01:54:54:04:2d: 5a:55:9c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxSanyX7LtjwezYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGYwOTY5ZGUtZjIzMy00ODFhLWFjZmQtZDc1ZGY5ODdkMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteG4YWTu8WrEy02WsPqRpLm5PWazmmWJnkZH sNXqcB/pZNdKGe9HQ+2jmsmVNOcPtK9rmxYGhB7LSmyVQGpvQTMpY1YggDIpiYSL Uds2/RPqjL1gdstURntHLltk1ZLkoD2/wUpm8XBlxhU+S/49Om5CQoLYCkPpkCaz yWRlghdJAnnazT9XZHeL6BtfY1AkTguCOStACsCNnbcqwR98TxU7tCGPCNbDHomD gM/iQciTEUQw9KrvhAF1xorvWQWV4qNO04lrRZ68c2miCYE7VrTh4XXDNTKSjuiT Lo6MUoJxny89sRHHQftRun724p8nVeG+z+rXiwWgNlK85I+RbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoVnI2Z1Xzu/3QPahbZJd+m+VCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDRhNTFkM2ItZTczMC0z MmZhLWE3OTUtM2RlN2ViNzEzMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSapKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmXVGd6pi8lTg/CPd2wA5U0Zmu5fACoRje8OYbrj+wVw6LxyL9Ka5OP qccfpTaK5Z0Z89MmZ+nxE6lfo8517ki2dQlBdje+iYb4wqcSoHwheyV1pQNZp7yy IOGNDEpa4MM9C+c9o6MP5HX0pnD1s0xcL2cR+dQI777UwpHphApPufcV+XGqo0Uf xvjQ1XEall8rNP54R7oNg50wXdHEMEHIpKHRKNp9PGW/IMjrhp78hrK2Rl+6AEbW UQR4zK2agNYsd4nnXMT9vS9K3wZG/bluIN1y8A4Dk7fdAJ46tmfuUWnezp1t0SFy M3/DO7bL9TkYjB53aPUBVFQELVpVnFI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:43:10 2025 by rpki-client