$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3279ca81-310f-33e5-94ce-3ce019eab145.roa File: 3279ca81-310f-33e5-94ce-3ce019eab145.roa (raw, json) Hash identifier: b3xB6cw67tP/lOE+Kb3C51/si3SkpTdso2FkIPgyIZY= Subject key identifier: F9:4E:26:59:1F:27:E5:43:61:51:E3:47:B4:9F:53:B6:50:B7:0E:A4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC26A5F883EE501739B2280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3279ca81-310f-33e5-94ce-3ce019eab145.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.209.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:6a:5f:88:3e:e5:01:73:9b:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3d953ef3-389b-46a6-9372-f0b21fc5d133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:a0:c7:fd:84:71:fa:c6:17:50:80:e2:38: 8e:6f:11:ee:bb:95:3d:c4:a4:ee:59:3b:68:7e:60: 55:92:0d:49:36:28:91:c7:b9:e4:e2:55:12:11:e8: 74:02:d2:91:60:fc:bc:cf:ad:40:40:9f:bf:56:ed: 92:b9:70:cc:c5:72:bc:cb:0b:e6:68:a7:87:38:0d: 72:3d:6a:1b:ba:4b:39:d6:e0:25:14:96:9e:0d:d7: fe:20:55:1d:06:a8:7a:32:07:3c:5a:58:98:34:70: 64:ff:54:f1:e5:07:b1:ce:84:c4:bf:9b:c5:40:ea: 4c:c9:6c:c7:6d:03:c1:f0:da:3a:3e:0a:fa:48:0a: ec:40:a3:fa:99:b8:95:93:2b:98:9c:66:e0:03:71: 54:00:a9:71:9a:e7:70:6f:9a:92:80:fe:30:24:00: dc:3b:e7:6d:f4:66:08:a3:5e:5e:af:4e:18:ba:a2: b3:be:b2:64:68:68:9a:04:f4:49:9b:8a:ac:c0:53: 45:c5:b6:3e:94:b9:f6:79:1c:64:88:27:75:85:6e: 2c:e9:e9:72:77:12:b0:6f:0e:0b:77:27:5e:5e:73: 23:ba:6b:36:5e:f6:9c:6b:05:43:07:2a:2c:2a:81: d1:f8:16:96:60:a1:98:01:4b:14:54:ea:f2:93:b7: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4E:26:59:1F:27:E5:43:61:51:E3:47:B4:9F:53:B6:50:B7:0E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3279ca81-310f-33e5-94ce-3ce019eab145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:13:47:ef:bc:61:39:22:4d:fc:07:6a:d5:74:a2:f9:20:0c: eb:b7:5f:18:05:ab:32:22:b5:b0:90:3c:34:70:4c:6d:e3:15: f8:47:f7:67:b0:96:b7:a7:d4:e6:72:99:ba:43:04:f3:97:9f: ed:60:30:17:cb:d9:cd:98:b7:ac:77:e6:80:b4:0c:c9:44:af: e7:7a:ae:6d:8a:67:dc:0d:71:68:9c:89:d6:51:71:c8:57:b4: 00:f1:a2:17:dd:5f:c7:e7:24:fa:32:19:50:0c:df:d7:3b:99: 89:a1:bd:2a:91:f1:cd:dc:68:ab:c5:ad:19:d8:45:b6:5b:b3: bc:76:94:b6:93:ad:49:72:03:a9:55:13:af:24:26:e6:05:45: b2:b7:26:5d:29:82:9c:42:82:3a:7d:f6:a9:e6:2f:ad:a9:f8: 54:be:95:8e:bf:d8:8e:0d:2f:4a:bb:bd:3b:3a:2e:7a:ad:2c: 47:fb:75:12:a9:1f:69:27:31:fc:64:59:6b:7e:35:ea:d5:7d: 78:f1:d1:70:8a:c1:09:c6:cf:d9:8b:13:fc:d9:e8:29:1a:bc: ae:42:9c:95:e9:ad:16:e8:44:e9:2c:a1:20:4b:5a:61:96:d1: 5d:42:f9:b3:ef:87:1f:e2:df:30:17:1d:ab:e2:3a:1c:b6:07: 40:cc:e6:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswmpfiD7lAXObIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2Q5NTNlZjMtMzg5Yi00NmE2LTkzNzItZjBiMjFmYzVkMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHygx/2EcfrGF1CA4jiObxHuu5U9xKTuWTto fmBVkg1JNiiRx7nk4lUSEeh0AtKRYPy8z61AQJ+/Vu2SuXDMxXK8ywvmaKeHOA1y PWobuks51uAlFJaeDdf+IFUdBqh6Mgc8WliYNHBk/1Tx5QexzoTEv5vFQOpMyWzH bQPB8No6Pgr6SArsQKP6mbiVkyuYnGbgA3FUAKlxmudwb5qSgP4wJADcO+dt9GYI o15er04YuqKzvrJkaGiaBPRJm4qswFNFxbY+lLn2eRxkiCd1hW4s6elydxKwbw4L dydeXnMjums2XvacawVDByosKoHR+BaWYKGYAUsUVOryk7f/qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlOJlkfJ+VDYVHjR7SfU7ZQtw6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI3OWNhODEtMzEwZi0z M2U1LTk0Y2UtM2NlMDE5ZWFiMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoTR++8YTkiTfwHatV0ovkgDOu3XxgFqzIitbCQPDRwTG3jFfhH92ew lren1OZymbpDBPOXn+1gMBfL2c2Yt6x35oC0DMlEr+d6rm2KZ9wNcWicidZRcchX tADxohfdX8fnJPoyGVAM39c7mYmhvSqR8c3caKvFrRnYRbZbs7x2lLaTrUlyA6lV E68kJuYFRbK3Jl0pgpxCgjp99qnmL62p+FS+lY6/2I4NL0q7vTs6LnqtLEf7dRKp H2knMfxkWWt+NerVfXjx0XCKwQnGz9mLE/zZ6CkavK5CnJXprRboROksoSBLWmGW 0V1C+bPvhx/i3zAXHaviOhy2B0DM5i0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:09:45 2025 by rpki-client