$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538a5b74-e498-3e07-a0e9-86c582461e30.roa File: 538a5b74-e498-3e07-a0e9-86c582461e30.roa (raw, json) Hash identifier: EaPD51CaZV/xCasGwAZYR3N/LdFGiVxLm70/K9FkbPA= Subject key identifier: BC:7B:9D:53:D5:79:80:58:DB:F2:C7:2F:2F:DD:56:6E:6B:2F:7E:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC265D5C4D9FD20054AEE20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538a5b74-e498-3e07-a0e9-86c582461e30.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.208.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:65:d5:c4:d9:fd:20:05:4a:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1e69dd0c-8a04-42fa-a250-f01129b2873b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3e:b7:71:b9:cc:a8:50:d9:f1:a5:b8:f6:d4: a5:47:9f:65:71:3d:8b:d7:ef:a4:d7:2d:e3:71:a5: f1:6c:9e:08:cf:f8:af:8e:02:34:f6:44:7a:b3:92: 3a:3a:e8:a4:55:ff:b2:b2:a0:1b:b6:58:b4:c6:11: 3b:aa:71:6b:3e:75:50:be:06:84:db:fc:b8:29:0c: f7:ea:89:31:12:b9:b8:40:dc:16:d7:98:47:56:a0: e2:fa:7c:f8:f7:45:eb:81:20:9a:8f:45:95:8c:70: 40:63:5e:e5:3e:03:19:a8:19:93:7d:89:4c:c1:42: 13:f0:db:78:d6:05:aa:7e:4c:2b:c0:e5:cb:5a:8b: f8:4d:d5:2f:ac:1d:30:e1:ca:e5:17:c2:c8:ef:63: c5:70:48:e4:0d:44:27:fb:f0:73:5a:94:8d:d2:20: 9f:08:dc:b8:64:b2:84:9c:93:03:85:11:3b:f5:18: 2f:45:db:72:93:93:84:a0:da:77:ef:4c:88:88:a4: 59:a6:ad:53:f0:17:ba:f6:75:b3:ae:0a:36:0a:e3: c5:9a:65:4e:29:6a:c6:c9:24:43:4b:a2:12:69:d8: a5:7d:e3:c3:43:06:37:80:d4:68:b4:37:44:04:c9: b7:6a:c1:a2:c4:65:8e:e6:b1:e3:28:7f:d4:c9:cc: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7B:9D:53:D5:79:80:58:DB:F2:C7:2F:2F:DD:56:6E:6B:2F:7E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/538a5b74-e498-3e07-a0e9-86c582461e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.208.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:53:4e:95:ed:a7:bd:c7:94:cd:18:af:0d:50:bf:77:ba:f1: b4:65:11:96:20:1c:76:49:2f:39:91:e1:03:f3:57:34:46:b1: 2f:02:26:d5:49:ef:4c:fb:34:2c:32:9d:52:37:ea:05:6f:d3: df:de:e9:17:b2:ca:8a:47:38:7a:dc:98:9b:97:74:5a:35:a4: 5b:5e:3a:b8:7d:a1:38:0f:e2:c7:3d:21:be:e1:71:ba:ec:de: 40:5d:51:cc:f6:45:7a:64:e3:9d:85:1b:c9:e2:4a:78:8f:b8: 4d:96:6e:f3:df:58:8a:68:5a:4e:72:e5:04:1e:b2:70:e3:f2: 96:6c:f9:8c:69:0b:2d:2c:d5:48:9a:d9:38:79:01:ef:54:9c: d0:9a:59:84:af:50:2f:f9:3d:5d:54:4a:5a:5a:15:2a:7f:6f: 0e:ee:21:a9:1d:01:42:e8:46:a0:b5:d1:ae:2f:37:57:6c:78: 2b:20:9e:fc:73:6c:26:c8:ad:ce:4d:12:f0:b0:07:25:b0:97: 97:89:1f:8a:e3:fc:32:a7:b4:62:f0:80:e5:3d:48:be:82:92: d0:a5:30:78:d7:da:4e:7e:ec:bd:e9:5f:42:e5:0f:63:2e:70: 72:8c:b0:0a:d2:cb:1e:04:dd:23:91:44:36:e2:7e:58:fd:e5: 22:5e:4e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswmXVxNn9IAVK7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWU2OWRkMGMtOGEwNC00MmZhLWEyNTAtZjAxMTI5YjI4NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT63cbnMqFDZ8aW49tSlR59lcT2L1++k1y3j caXxbJ4Iz/ivjgI09kR6s5I6OuikVf+ysqAbtli0xhE7qnFrPnVQvgaE2/y4KQz3 6okxErm4QNwW15hHVqDi+nz490XrgSCaj0WVjHBAY17lPgMZqBmTfYlMwUIT8Nt4 1gWqfkwrwOXLWov4TdUvrB0w4crlF8LI72PFcEjkDUQn+/BzWpSN0iCfCNy4ZLKE nJMDhRE79RgvRdtyk5OEoNp370yIiKRZpq1T8Be69nWzrgo2CuPFmmVOKWrGySRD S6ISadilfePDQwY3gNRotDdEBMm3asGixGWO5rHjKH/Uycyb+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx7nVPVeYBY2/LHLy/dVm5rL351MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM4YTViNzQtZTQ5OC0z ZTA3LWEwZTktODZjNTgyNDYxZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSdCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJTTpXtp73HlM0Yrw1Qv3e68bRlEZYgHHZJLzmR4QPzVzRGsS8CJtVJ 70z7NCwynVI36gVv09/e6ReyyopHOHrcmJuXdFo1pFteOrh9oTgP4sc9Ib7hcbrs 3kBdUcz2RXpk452FG8niSniPuE2WbvPfWIpoWk5y5QQesnDj8pZs+YxpCy0s1Uia 2Th5Ae9UnNCaWYSvUC/5PV1USlpaFSp/bw7uIakdAULoRqC10a4vN1dseCsgnvxz bCbIrc5NEvCwByWwl5eJH4rj/DKntGLwgOU9SL6CktClMHjX2k5+7L3pX0LlD2Mu cHKMsArSyx4E3SORRDbiflj95SJeTg4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:11:38 2025 by rpki-client