$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c4a58fe-5b99-38ac-81b4-de146f61c91e.roa File: 0c4a58fe-5b99-38ac-81b4-de146f61c91e.roa (raw, json) Hash identifier: QNLAsno8jrc06onx2hMjS9SMDgcMsvXG6k7YFzI3em0= Subject key identifier: DF:DD:5C:3C:8C:26:EC:A8:1A:DB:FE:50:4C:68:07:F2:83:AE:99:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC30C29A58581C7E8C9FD20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c4a58fe-5b99-38ac-81b4-de146f61c91e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.202.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:0c:29:a5:85:81:c7:e8:c9:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2824ffa1-74bb-48c5-baa4-ee65c516520e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:3a:cd:4e:66:c0:fb:50:3d:26:3a:f5:12: 61:5e:55:e6:40:13:23:ea:dc:e9:2c:e3:7a:28:05: d3:87:01:b7:7b:43:6f:96:09:99:35:4c:1d:76:b5: fe:73:82:9b:fc:4a:67:6e:8e:4d:a7:65:9f:1a:a4: b5:a9:88:71:81:fa:5d:e3:74:d1:69:01:53:36:63: 92:89:90:a9:f3:94:ee:c8:68:56:87:69:c8:31:d5: cc:ed:bc:16:9f:82:c2:b7:6d:38:9e:14:53:4d:16: 36:1d:51:3a:48:34:53:23:38:00:81:df:e8:31:3f: f3:90:bd:9e:59:83:08:a2:08:f6:15:3b:fa:4c:52: 5d:de:a9:1b:bf:4a:b7:83:38:5d:f1:5c:11:fb:f8: 6a:a6:4d:3a:af:b7:94:f3:a1:1e:32:4f:fa:5c:e6: 93:21:5b:8a:7e:5b:8c:98:7e:b1:ab:51:f6:e9:eb: 3f:3c:7a:9b:e5:53:82:14:8d:25:18:1f:48:87:75: da:c9:ab:70:b1:b8:12:df:b4:38:b3:2b:bc:84:32: d4:ed:0f:e7:83:56:a4:b3:44:4f:20:d1:2c:c9:85: 5f:a4:29:98:34:67:e4:58:4c:9d:b4:0f:c0:3d:13: 61:7a:70:99:24:98:97:12:4a:cd:e6:01:e7:59:c1: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:5C:3C:8C:26:EC:A8:1A:DB:FE:50:4C:68:07:F2:83:AE:99:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c4a58fe-5b99-38ac-81b4-de146f61c91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:81:ec:63:66:2a:42:1a:83:00:ea:6e:c0:5e:1f:81:c3:2d: 7e:5a:30:74:22:4b:1a:50:54:71:31:68:9f:4f:ab:16:e4:1c: ca:0d:e4:ec:f8:22:1e:ea:46:e9:f1:bd:59:f5:07:d8:9f:3c: 0c:59:6b:d2:49:fe:01:93:49:88:0e:71:df:f4:1d:e7:ad:1b: 7f:5e:8b:2d:13:67:9b:c4:95:c4:d8:31:a0:79:ff:99:96:46: 5d:ff:c3:1b:56:cc:c2:33:83:d2:6d:b7:05:67:bf:e7:3d:87: 17:48:c2:9a:15:9f:8d:e1:b0:28:57:5e:56:42:7a:38:93:15: 74:f4:c7:cc:10:84:4b:b5:fc:b3:4e:d2:7b:f5:2e:59:82:8e: ce:1c:41:da:ba:c7:6f:85:40:bd:8d:b3:dc:1d:2d:38:4c:f1: fd:ca:f2:83:23:ad:15:46:d0:6a:49:30:ac:b7:08:82:ac:98: 33:5c:f8:4b:30:d1:e6:48:a1:67:b9:ef:d2:ca:6e:28:64:a8: ec:96:ff:79:c1:56:09:62:17:d7:15:52:1d:44:01:5a:ca:d2: 10:1f:01:be:bc:ca:40:c9:10:ee:28:76:74:1e:16:7d:e9:cb: 2f:da:2c:df:50:9a:63:e8:11:ce:c9:98:71:b2:17:2a:c6:43: 41:d3:cc:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswwwppYWBx+jJ/SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjgyNGZmYTEtNzRiYi00OGM1LWJhYTQtZWU2NWM1MTY1MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i46zU5mwPtQPSY69RJhXlXmQBMj6tzpLON6 KAXThwG3e0NvlgmZNUwddrX+c4Kb/Epnbo5Np2WfGqS1qYhxgfpd43TRaQFTNmOS iZCp85TuyGhWh2nIMdXM7bwWn4LCt204nhRTTRY2HVE6SDRTIzgAgd/oMT/zkL2e WYMIogj2FTv6TFJd3qkbv0q3gzhd8VwR+/hqpk06r7eU86EeMk/6XOaTIVuKfluM mH6xq1H26es/PHqb5VOCFI0lGB9Ih3XayatwsbgS37Q4syu8hDLU7Q/ng1aks0RP INEsyYVfpCmYNGfkWEydtA/APRNhenCZJJiXEkrN5gHnWcHVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/dXDyMJuyoGtv+UExoB/KDrpm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGM0YTU4ZmUtNWI5OS0z OGFjLTgxYjQtZGUxNDZmNjFjOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScqSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmB7GNmKkIagwDqbsBeH4HDLX5aMHQiSxpQVHExaJ9PqxbkHMoN5Oz4 Ih7qRunxvVn1B9ifPAxZa9JJ/gGTSYgOcd/0HeetG39eiy0TZ5vElcTYMaB5/5mW Rl3/wxtWzMIzg9JttwVnv+c9hxdIwpoVn43hsChXXlZCejiTFXT0x8wQhEu1/LNO 0nv1LlmCjs4cQdq6x2+FQL2Ns9wdLThM8f3K8oMjrRVG0GpJMKy3CIKsmDNc+Esw 0eZIoWe579LKbihkqOyW/3nBVgliF9cVUh1EAVrK0hAfAb68ykDJEO4odnQeFn3p yy/aLN9QmmPoEc7JmHGyFyrGQ0HTzKI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:17:49 2025 by rpki-client