$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fb80d3-17e0-36b6-aec2-35d1153db4b4.roa File: 29fb80d3-17e0-36b6-aec2-35d1153db4b4.roa (raw, json) Hash identifier: wBRyAhIJoT/XmIr10s4iRPg2N1F50RGSc2pJjGtFYNg= Subject key identifier: 29:70:AA:19:D1:FB:D5:B4:C4:A8:B4:EF:31:30:82:48:D3:6C:9B:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EBB697FEB655238BBC1B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fb80d3-17e0-36b6-aec2-35d1153db4b4.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 73.67.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:b6:97:fe:b6:55:23:8b:bc:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9eda83ff-2cd0-4aa3-bb24-deb80b2c7cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:ae:95:c7:85:c4:6a:38:60:a1:14:05:12: c5:57:54:0c:c7:0b:7a:7a:7e:03:66:64:76:3d:dc: b3:a5:1e:26:f0:ba:74:4e:b1:0f:d4:f7:3a:35:99: a5:b9:b6:75:f9:24:5f:4b:ca:a8:d9:d0:29:52:67: 64:53:67:04:65:9f:c0:82:04:87:bb:6e:ac:c0:f9: 16:c7:6e:90:54:02:26:6b:fe:70:e4:c6:d5:52:b3: 7a:0a:99:b5:90:46:e9:7c:3f:14:37:fb:01:b6:2b: 3c:79:7f:92:4d:76:b6:50:a3:fa:ec:f8:7e:3f:64: b1:e2:5e:84:ca:d8:b4:de:61:a3:c6:4a:ab:50:1e: ab:34:f9:6d:e0:23:ce:0c:41:a7:4d:92:e0:99:be: 62:67:91:e1:ca:0f:22:a7:f7:cd:ef:9b:9f:33:08: 50:a5:70:e8:b5:94:c1:b5:b9:91:d3:56:a7:53:4a: 5e:23:20:d9:90:b5:53:ab:7f:f9:fa:18:a7:34:24: 44:be:b1:99:07:d6:83:3d:26:c4:3b:26:08:98:75: 0d:6f:95:99:c9:ec:37:64:7e:81:4c:46:01:00:d2: 2a:cd:69:02:2a:45:86:c5:e2:ca:1d:49:34:71:ca: 2b:7a:96:14:55:c7:37:60:16:26:3a:90:e9:ad:3b: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:AA:19:D1:FB:D5:B4:C4:A8:B4:EF:31:30:82:48:D3:6C:9B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29fb80d3-17e0-36b6-aec2-35d1153db4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.67.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e7:4a:43:18:1a:bd:18:60:9b:7a:46:ac:c8:0b:ff:87:6c: ac:8e:e2:c6:31:0e:a9:e2:71:fe:fc:21:8b:23:22:7f:69:07: 14:33:8d:19:62:a9:79:5a:0c:21:0b:c8:05:e5:dc:c5:20:1a: 99:a0:cb:04:94:0a:5f:3b:d2:89:05:33:82:fa:17:3e:4c:95: 21:4f:05:c1:73:70:41:01:fe:55:77:f7:30:c5:b0:af:82:c2: ee:f0:e1:49:f7:e3:d6:ea:ca:98:03:95:52:9b:e2:ad:dc:1c: 2f:94:63:15:24:23:a0:19:1b:c1:1b:5f:96:a1:5a:0c:2e:79: e6:4e:65:77:bb:bd:78:f3:73:f0:95:b3:ec:82:e8:c3:c3:b1: 4a:42:fc:c5:ec:4c:6d:82:8c:02:47:85:da:ad:4e:04:f7:e6: 36:f4:d2:cd:c4:da:b1:d8:20:fe:49:e1:c5:90:79:3f:45:6f: 05:e9:a1:48:46:f2:75:75:02:2e:db:4e:2c:12:83:d3:ee:92: 48:27:be:a9:30:d3:36:74:91:c6:8a:81:44:55:b4:52:31:9e: 53:2c:06:3b:be:4c:50:9d:c9:00:6c:92:b0:9a:f0:f7:6d:4a: 9f:c5:fa:4c:80:ff:ab:7d:63:54:d3:40:3e:fb:8e:3c:cc:fa: 60:d7:f9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq067aX/rZVI4u8GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWVkYTgzZmYtMmNkMC00YWEzLWJiMjQtZGViODBiMmM3Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SeulceFxGo4YKEUBRLFV1QMxwt6en4DZmR2 PdyzpR4m8Lp0TrEP1Pc6NZmlubZ1+SRfS8qo2dApUmdkU2cEZZ/AggSHu26swPkW x26QVAIma/5w5MbVUrN6Cpm1kEbpfD8UN/sBtis8eX+STXa2UKP67Ph+P2Sx4l6E yti03mGjxkqrUB6rNPlt4CPODEGnTZLgmb5iZ5Hhyg8ip/fN75ufMwhQpXDotZTB tbmR01anU0peIyDZkLVTq3/5+hinNCREvrGZB9aDPSbEOyYImHUNb5WZyew3ZH6B TEYBANIqzWkCKkWGxeLKHUk0ccorepYUVcc3YBYmOpDprTvWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClwqhnR+9W0xKi07zEwgkjTbJuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjlmYjgwZDMtMTdlMC0z NmI2LWFlYzItMzVkMTE1M2RiNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUOiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3nSkMYGr0YYJt6RqzIC/+HbKyO4sYxDqnicf78IYsjIn9pBxQzjRli qXlaDCELyAXl3MUgGpmgywSUCl870okFM4L6Fz5MlSFPBcFzcEEB/lV39zDFsK+C wu7w4Un349bqypgDlVKb4q3cHC+UYxUkI6AZG8EbX5ahWgwueeZOZXe7vXjzc/CV s+yC6MPDsUpC/MXsTG2CjAJHhdqtTgT35jb00s3E2rHYIP5J4cWQeT9FbwXpoUhG 8nV1Ai7bTiwSg9Pukkgnvqkw0zZ0kcaKgURVtFIxnlMsBju+TFCdyQBskrCa8Pdt Sp/F+kyA/6t9Y1TTQD77jjzM+mDX+YY= -----END CERTIFICATE-----Generated at Wed Aug 6 09:32:04 2025 by rpki-client