$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09523a2a-ee66-3a93-8544-15eb20819dc8.roa File: 09523a2a-ee66-3a93-8544-15eb20819dc8.roa (raw, json) Hash identifier: UUmAKId9Z1JjOeU0RdrlYS1Z6KDFcn0PnsyQHDkmlPw= Subject key identifier: F5:BD:3E:60:5B:16:30:1E:F4:1E:50:E6:D8:FB:85:13:74:25:38:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EDF62D073B33095F8EF000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09523a2a-ee66-3a93-8544-15eb20819dc8.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 73.238.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:f6:2d:07:3b:33:09:5f:8e:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9c34daa8-8e33-4030-bec4-444a47bb8df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:17:ff:81:f3:24:13:86:a5:36:8e:cd:79: 4a:f0:76:6b:ca:b7:3d:c2:7c:98:51:aa:73:00:19: a0:b6:44:eb:3d:c8:2d:67:c3:c1:01:d6:6c:d9:f9: ff:fe:c7:2c:99:8a:4b:00:55:9f:10:d8:61:43:36: f8:88:27:56:0c:31:b0:66:0c:b6:e5:b2:b6:e6:60: 7e:d0:ed:12:60:c5:74:e0:4d:5d:b7:ca:93:6a:0a: a3:d6:e2:bb:e7:a7:14:f9:50:45:4c:d0:06:4e:25: 21:d3:87:ad:db:4c:6e:e3:43:2e:73:16:46:21:00: 23:65:5e:7f:be:d6:5b:3b:2e:b1:26:38:38:a5:71: f8:39:1d:78:9e:68:4a:c9:91:dc:b5:cc:0c:63:10: 28:f8:3b:8e:f0:2d:05:4b:2e:f3:be:80:83:ee:cb: 56:42:e4:37:39:bf:a4:01:c9:97:ef:29:e1:01:22: 5a:ac:04:09:a0:8c:47:a6:e1:72:91:46:76:c1:cc: fc:4a:f3:03:9b:4b:3b:51:4a:8d:76:43:14:db:74: 25:b0:ae:ed:c2:df:86:ae:79:a1:5f:ad:40:e9:de: b6:1b:e7:48:f2:be:e1:20:7b:c6:cf:54:76:f4:ad: 92:c9:fc:75:cb:3c:ee:b6:e1:93:ee:e4:d5:b6:63: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BD:3E:60:5B:16:30:1E:F4:1E:50:E6:D8:FB:85:13:74:25:38:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09523a2a-ee66-3a93-8544-15eb20819dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.238.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:9a:23:33:12:bc:fc:cb:1d:54:b3:83:0f:49:6c:5d:c0:6e: c8:de:45:73:f5:85:10:b6:14:a3:f7:7a:a3:f5:e8:0d:db:85: 7e:28:62:13:d0:1a:d4:81:3b:fa:66:13:93:18:65:ea:97:fe: 4e:08:79:27:fd:22:bd:12:d1:24:01:03:d8:3b:52:36:4b:c4: 1e:a7:8e:3e:d0:8f:e0:5f:5b:ef:1a:d9:28:6b:63:d9:9d:d3: 91:88:b8:46:23:6b:c5:28:04:9c:c6:6e:ce:3a:5f:cb:ee:a4: 77:e6:58:f8:71:93:cf:6d:5e:af:5e:9a:2a:0b:85:b4:7a:7a: c5:0c:04:c6:4f:49:68:c2:12:9b:36:48:5f:94:93:86:b9:5d: 8b:67:65:32:2e:19:a5:8f:00:8f:95:9b:55:7b:07:ce:b6:84: bd:41:0a:0e:0d:45:40:61:21:07:3c:85:c6:50:60:94:56:c4: 1a:23:18:6e:16:97:8e:be:12:70:54:ed:65:2d:eb:83:39:46: 32:3b:54:12:ba:ad:ef:85:1f:c6:b1:e3:2b:48:fd:72:86:f4: ee:7e:6f:2e:53:ef:93:8f:6d:81:df:3b:3f:4e:6b:11:c9:0d: 28:ce:c1:5f:2d:51:a4:5e:09:b3:58:40:ed:6e:1a:97:15:9a: 46:ce:9e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07fYtBzszCV+O8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWMzNGRhYTgtOGUzMy00MDMwLWJlYzQtNDQ0YTQ3YmI4ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8cX/4HzJBOGpTaOzXlK8HZryrc9wnyYUapz ABmgtkTrPcgtZ8PBAdZs2fn//scsmYpLAFWfENhhQzb4iCdWDDGwZgy25bK25mB+ 0O0SYMV04E1dt8qTagqj1uK756cU+VBFTNAGTiUh04et20xu40MucxZGIQAjZV5/ vtZbOy6xJjg4pXH4OR14nmhKyZHctcwMYxAo+DuO8C0FSy7zvoCD7stWQuQ3Ob+k AcmX7ynhASJarAQJoIxHpuFykUZ2wcz8SvMDm0s7UUqNdkMU23QlsK7twt+Grnmh X61A6d62G+dI8r7hIHvGz1R29K2Syfx1yzzutuGT7uTVtmOkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW9PmBbFjAe9B5Q5tj7hRN0JTgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDk1MjNhMmEtZWU2Ni0z YTkzLTg1NDQtMTVlYjIwODE5ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSe6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmaIzMSvPzLHVSzgw9JbF3AbsjeRXP1hRC2FKP3eqP16A3bhX4oYhPQ GtSBO/pmE5MYZeqX/k4IeSf9Ir0S0SQBA9g7UjZLxB6njj7Qj+BfW+8a2ShrY9md 05GIuEYja8UoBJzGbs46X8vupHfmWPhxk89tXq9emioLhbR6esUMBMZPSWjCEps2 SF+Uk4a5XYtnZTIuGaWPAI+Vm1V7B862hL1BCg4NRUBhIQc8hcZQYJRWxBojGG4W l46+EnBU7WUt64M5RjI7VBK6re+FH8ax4ytI/XKG9O5+by5T75OPbYHfOz9OaxHJ DSjOwV8tUaReCbNYQO1uGpcVmkbOnkc= -----END CERTIFICATE-----Generated at Fri Aug 8 00:47:32 2025 by rpki-client