$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05fd8068-da5b-37b9-b4b0-e94379e32ce2.roa File: 05fd8068-da5b-37b9-b4b0-e94379e32ce2.roa (raw, json) Hash identifier: 1axwZYT9vfCOJhJbYCkBSjOZUpU+fOdpEVhKuPDPuiM= Subject key identifier: 4A:28:0B:85:9F:2D:1B:79:3B:6D:85:51:B3:05:56:A2:9C:B7:84:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC5214D7CF1FCCB5162580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05fd8068-da5b-37b9-b4b0-e94379e32ce2.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 73.47.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:52:14:d7:cf:1f:cc:b5:16:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=dff6122e-d75d-49ba-895c-85940f828b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:f4:e6:6a:bb:00:05:ef:e4:32:b2:4a:7c: c2:3e:51:64:4f:82:2b:92:24:f5:68:88:79:d1:92: d1:3f:a5:ee:e2:f9:3f:31:94:8a:0d:53:58:39:c2: b6:dd:9f:3c:d9:d9:90:c6:84:fb:d2:f3:50:ae:74: 99:99:fc:2f:59:1a:99:02:a3:bd:f3:af:1b:4f:3a: 13:b8:59:06:9d:9b:c1:23:bc:97:ee:7c:ba:70:03: ab:dd:1d:69:77:8f:40:72:41:e3:bc:d8:10:74:f0: 11:8c:9b:d4:2b:99:12:78:1e:fe:7d:00:0e:3a:ac: 7b:37:51:48:d8:0d:6f:5e:27:d8:32:19:4e:63:6a: c2:d6:df:33:ec:ba:5e:41:7d:eb:af:4d:d1:45:98: be:35:df:dc:b5:d5:c5:5c:5c:91:76:c1:15:74:31: d6:9a:05:38:9e:23:ab:51:41:e6:e2:1f:42:1f:8c: 03:a7:c4:2d:dd:7b:1f:e0:3c:e6:44:89:63:8f:f1: 87:c9:b6:1a:1c:81:ca:4d:9b:21:79:94:e2:47:af: 81:fc:a6:c8:66:75:1a:1b:79:eb:50:fb:ac:82:70: b1:9c:1c:59:a1:16:ca:4e:47:44:fe:aa:c7:d6:06: b7:e5:36:8b:02:23:09:56:23:8d:13:06:aa:82:9f: f5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:0B:85:9F:2D:1B:79:3B:6D:85:51:B3:05:56:A2:9C:B7:84:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05fd8068-da5b-37b9-b4b0-e94379e32ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.47.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d4:d8:c7:55:0e:28:4e:ec:ce:c2:b1:9f:3f:cb:d3:ad:92: 12:36:d9:28:79:89:bd:f8:29:d1:96:fb:83:fd:6a:41:0a:8a: 1c:9f:6d:04:26:ce:de:40:59:94:81:18:ad:cd:5e:8a:9a:8b: 12:f7:bb:cb:75:8d:5a:06:62:22:48:fe:34:a2:6c:ca:d0:03: 45:5f:e1:53:86:e2:b3:ef:4d:51:9a:a3:c1:0e:4c:d8:21:bc: 51:8f:ce:6f:24:ac:3b:a6:df:5f:76:61:c4:59:f1:f6:86:a0: 81:6c:22:97:35:3d:0b:af:ca:95:77:da:94:bd:c0:3e:c0:c6: 0f:87:56:1c:f1:5a:c8:0c:a3:df:50:86:0c:eb:e7:7c:49:eb: bd:2b:ab:ed:5c:9e:38:3e:c5:32:03:38:ee:7c:08:d4:aa:d6: bb:d7:63:d8:79:d2:8b:e7:29:c3:e8:4d:63:aa:48:0b:a2:18: 91:b3:f9:b1:63:78:b1:f0:a2:ee:ee:78:d9:f2:24:31:72:ec: 25:f6:58:8a:1a:8f:c6:76:db:96:dc:4d:b5:0a:c0:40:73:76: df:0a:86:db:76:c9:ea:15:07:62:0e:b3:19:20:78:71:50:96: a3:65:c3:4e:9d:a0:f9:7a:15:51:1c:3c:d6:33:be:fc:f6:76: be:78:43:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07FIU188fzLUWJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZGZmNjEyMmUtZDc1ZC00OWJhLTg5NWMtODU5NDBmODI4YjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZv05mq7AAXv5DKySnzCPlFkT4IrkiT1aIh5 0ZLRP6Xu4vk/MZSKDVNYOcK23Z882dmQxoT70vNQrnSZmfwvWRqZAqO9868bTzoT uFkGnZvBI7yX7ny6cAOr3R1pd49AckHjvNgQdPARjJvUK5kSeB7+fQAOOqx7N1FI 2A1vXifYMhlOY2rC1t8z7LpeQX3rr03RRZi+Nd/ctdXFXFyRdsEVdDHWmgU4niOr UUHm4h9CH4wDp8Qt3Xsf4DzmRIljj/GHybYaHIHKTZsheZTiR6+B/KbIZnUaG3nr UPusgnCxnBxZoRbKTkdE/qrH1ga35TaLAiMJViONEwaqgp/1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEooC4WfLRt5O22FUbMFVqKct4RcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDVmZDgwNjgtZGE1Yi0z N2I5LWI0YjAtZTk0Mzc5ZTMyY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSS/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbU2MdVDihO7M7CsZ8/y9OtkhI22Sh5ib34KdGW+4P9akEKihyfbQQm zt5AWZSBGK3NXoqaixL3u8t1jVoGYiJI/jSibMrQA0Vf4VOG4rPvTVGao8EOTNgh vFGPzm8krDum3192YcRZ8faGoIFsIpc1PQuvypV32pS9wD7Axg+HVhzxWsgMo99Q hgzr53xJ670rq+1cnjg+xTIDOO58CNSq1rvXY9h50ovnKcPoTWOqSAuiGJGz+bFj eLHwou7ueNnyJDFy7CX2WIoaj8Z225bcTbUKwEBzdt8Khtt2yeoVB2IOsxkgeHFQ lqNlw06doPl6FVEcPNYzvvz2dr54Q0c= -----END CERTIFICATE-----Generated at Thu Aug 7 02:10:11 2025 by rpki-client