$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5436a3fc-4fc0-3d25-b794-c0f731a01dc3.roa File: 5436a3fc-4fc0-3d25-b794-c0f731a01dc3.roa (raw, json) Hash identifier: 6a6nSAQpw9IfzAF6OHnxTbrX3kwr7fHNrUvN15BKmf8= Subject key identifier: 40:14:88:BA:FA:E1:8F:71:54:F7:E5:37:E5:45:42:AC:C0:65:7B:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED76788725CE2AD0C81E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5436a3fc-4fc0-3d25-b794-c0f731a01dc3.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 73.96.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:76:78:87:25:ce:2a:d0:c8:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=68a808b2-b41e-4bef-a98f-141ac4c007ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:eb:7c:bb:cc:1d:c0:e7:87:3f:ba:dd:26:d2: d4:a7:29:1a:a6:6c:ed:b1:23:83:a4:84:14:0e:41: 6b:30:11:5f:3b:43:b2:d7:ab:b0:d5:b5:16:ea:76: 60:ab:2d:0f:36:aa:94:6f:6c:e5:d9:ff:64:36:53: c9:b8:0d:84:55:0c:24:e7:5e:c9:a2:20:c2:da:54: ba:33:00:d0:d7:a2:01:ac:5e:5d:fd:32:b2:6e:05: 00:54:da:a1:9b:eb:9e:35:e3:ba:62:03:61:6a:67: 84:ce:ce:00:d9:ed:b9:db:6c:0d:26:c3:a7:49:5c: 47:5c:7e:07:6e:c8:6e:4c:d4:6b:ef:8b:9e:bd:cc: 93:5e:44:34:18:98:cb:08:be:69:05:6c:2d:fe:49: 5e:38:b8:26:0e:5c:56:f2:bd:cf:ce:ac:cc:2e:7f: 2a:92:4b:1c:d6:27:b7:11:c0:42:4f:fd:21:15:84: 55:24:67:02:a3:53:cd:84:a1:07:70:c1:e6:c9:92: da:4f:5d:9c:33:5c:40:84:d5:c7:e8:94:0b:0d:0a: db:ea:97:7f:1c:e7:21:cc:ac:85:9a:54:98:cd:37: d6:86:7d:97:f8:0c:10:e7:49:ec:9c:fd:e8:c8:ad: 8a:2d:67:15:18:fd:8a:74:92:08:4a:d6:14:bc:cc: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:14:88:BA:FA:E1:8F:71:54:F7:E5:37:E5:45:42:AC:C0:65:7B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5436a3fc-4fc0-3d25-b794-c0f731a01dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.96.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:e1:45:43:7e:d1:8b:87:2d:a1:f7:92:b4:4d:f0:9c:78:41: 21:7b:b4:08:4a:89:af:1f:02:62:3a:1b:09:4d:e4:8e:37:d2: 10:0c:e3:7b:cd:3e:60:71:57:02:be:d7:99:10:c2:f5:36:81: 0d:70:69:a6:a9:aa:33:53:f5:e3:19:5c:d0:83:69:47:d9:69: 81:3c:c9:44:35:74:7c:72:ca:92:35:7c:d5:86:ad:02:ce:55: c9:98:cb:5a:3c:da:93:c6:63:f1:90:05:42:f6:cf:5d:a7:ba: d5:22:cc:b1:46:81:94:93:ac:f4:96:31:2e:8b:c3:05:33:ff: b7:48:67:a0:26:ed:fe:24:c9:fa:92:ae:f1:a0:85:dd:11:24: 8f:d5:24:a5:02:98:8a:50:b8:7e:07:6c:5a:5e:76:a8:a3:30: 7b:46:cd:4a:76:33:42:dd:b2:fe:c9:53:8a:3a:0d:a2:64:ab: e4:a2:99:85:aa:03:b3:57:31:5d:68:6a:10:b7:f0:1a:93:df: ed:7d:26:66:7b:47:79:f5:37:06:de:78:2f:cd:f6:7b:e8:11: 60:f0:55:bd:91:d9:79:17:d2:3f:af:04:89:d8:97:8d:7b:ae: c7:84:f9:02:7d:1f:aa:ae:da:d4:96:f4:c1:4c:2b:51:c1:89: 7b:fd:ce:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07XZ4hyXOKtDIHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjhhODA4YjItYjQxZS00YmVmLWE5OGYtMTQxYWM0YzAwN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ot8u8wdwOeHP7rdJtLUpykapmztsSODpIQU DkFrMBFfO0Oy16uw1bUW6nZgqy0PNqqUb2zl2f9kNlPJuA2EVQwk517JoiDC2lS6 MwDQ16IBrF5d/TKybgUAVNqhm+ueNeO6YgNhameEzs4A2e2522wNJsOnSVxHXH4H bshuTNRr74uevcyTXkQ0GJjLCL5pBWwt/kleOLgmDlxW8r3PzqzMLn8qkksc1ie3 EcBCT/0hFYRVJGcCo1PNhKEHcMHmyZLaT12cM1xAhNXH6JQLDQrb6pd/HOchzKyF mlSYzTfWhn2X+AwQ50nsnP3oyK2KLWcVGP2KdJIIStYUvMzAFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAUiLr64Y9xVPflN+VFQqzAZXvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQzNmEzZmMtNGZjMC0z ZDI1LWI3OTQtYzBmNzMxYTAxZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSWCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbhRUN+0YuHLaH3krRN8Jx4QSF7tAhKia8fAmI6GwlN5I430hAM43vN PmBxVwK+15kQwvU2gQ1waaapqjNT9eMZXNCDaUfZaYE8yUQ1dHxyypI1fNWGrQLO VcmYy1o82pPGY/GQBUL2z12nutUizLFGgZSTrPSWMS6LwwUz/7dIZ6Am7f4kyfqS rvGghd0RJI/VJKUCmIpQuH4HbFpedqijMHtGzUp2M0Ldsv7JU4o6DaJkq+SimYWq A7NXMV1oahC38BqT3+19JmZ7R3n1NwbeeC/N9nvoEWDwVb2R2XkX0j+vBInYl417 rseE+QJ9H6qu2tSW9MFMK1HBiXv9zsA= -----END CERTIFICATE-----Generated at Mon Aug 4 16:11:39 2025 by rpki-client