$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d87a4bc-300c-38a2-a611-519288f9414b.roa File: 5d87a4bc-300c-38a2-a611-519288f9414b.roa (raw, json) Hash identifier: 96dkYyHLPOZN/rKIW+GKuIhVKw7R8rbG0MDXm7HhkxE= Subject key identifier: 9D:D3:FB:5C:19:66:29:72:24:43:D6:FF:14:60:26:4F:28:23:D0:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE7DAB579C92B32B7CAFC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d87a4bc-300c-38a2-a611-519288f9414b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 73.191.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:7d:ab:57:9c:92:b3:2b:7c:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=64d4b52c-67b6-4b59-9ef1-328cd3427af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b9:11:2f:3b:93:5e:4e:fd:dc:60:de:76:cd: 52:1b:f4:dc:6e:b0:a2:9a:ef:15:b0:ae:70:4b:a0: ef:12:f6:43:d5:f5:95:18:cb:dc:c9:33:ae:e9:84: fe:71:f2:1d:83:0b:9a:f2:f6:16:c8:3d:fe:5f:5e: 5f:64:4c:20:a5:be:12:fa:ef:7d:c1:f1:4f:00:51: 1e:a3:cb:a5:ab:c8:37:4f:34:11:a3:4c:b5:dd:4a: a8:8b:2f:33:0e:fa:b2:f6:36:03:07:23:e3:60:3f: f5:7f:30:de:dd:df:28:c8:73:70:b4:55:47:75:4d: ad:f3:b9:46:bd:ba:14:78:2d:97:62:ee:fa:6c:3a: 78:1f:44:a9:c7:f0:e3:57:ce:98:82:02:3a:37:63: ee:ec:67:28:4c:cf:94:5b:72:bc:e0:4b:5b:1e:8f: 8b:4b:53:a4:0b:aa:b3:5a:a3:95:76:92:d9:4b:8f: bd:8d:ef:a5:47:c5:87:9a:5c:a9:74:88:08:0b:46: 34:1c:c8:d8:8c:32:dd:d6:41:24:37:6d:7c:3f:ca: 5f:5e:0b:52:73:93:36:69:89:eb:e8:62:1b:85:fd: 16:93:41:5c:8f:15:65:6e:07:14:d9:46:30:bf:a5: bc:54:7c:55:1d:f3:45:0e:36:5e:41:3c:0f:cc:25: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D3:FB:5C:19:66:29:72:24:43:D6:FF:14:60:26:4F:28:23:D0:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d87a4bc-300c-38a2-a611-519288f9414b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3b:ed:95:a4:d0:51:fe:a7:72:f6:2b:57:d7:67:e8:b6:40: 6a:7e:90:20:8d:b1:bb:02:a6:41:ed:31:07:0c:de:b9:61:a9: f9:c2:5c:a7:9b:bb:d0:01:53:e6:7a:c2:f8:1a:0a:cf:1f:e7: a7:cf:4f:71:44:73:7d:78:14:92:36:86:a5:7c:53:89:fd:69: 8b:3c:d1:0d:25:ce:37:46:46:c9:c6:9b:52:11:75:82:c3:ba: 85:45:82:22:5f:9b:a5:4e:cb:41:77:7f:0e:5b:f2:0e:54:84: 0b:8e:96:22:31:00:c4:b4:85:73:f5:3e:f2:5a:5e:2d:69:b9: 60:01:b2:97:65:2f:c4:94:11:b7:dd:b4:a1:ae:cf:ab:29:e4: 62:25:b4:6d:04:3e:be:c3:dd:93:94:31:a5:05:08:62:84:0b: ef:43:8e:f8:b1:01:d8:3b:5d:0c:d8:2a:94:bb:ce:68:6d:28: 96:a7:d0:ac:24:cc:c8:c5:f7:80:83:d2:ee:aa:2e:aa:9a:28: 65:37:7c:7f:f3:1e:dd:3a:53:f3:9f:f7:b8:f9:31:26:56:96: 09:00:e8:3d:4f:7b:a2:ef:37:18:1b:ad:13:10:b3:36:e2:57: 17:64:f8:e5:2e:b8:3c:c3:32:e7:30:6d:34:42:3d:b0:3c:b8: 04:1e:d4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07n2rV5ySsyt8r8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NjRkNGI1MmMtNjdiNi00YjU5LTllZjEtMzI4Y2QzNDI3YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrkRLzuTXk793GDeds1SG/TcbrCimu8VsK5w S6DvEvZD1fWVGMvcyTOu6YT+cfIdgwua8vYWyD3+X15fZEwgpb4S+u99wfFPAFEe o8ulq8g3TzQRo0y13Uqoiy8zDvqy9jYDByPjYD/1fzDe3d8oyHNwtFVHdU2t87lG vboUeC2XYu76bDp4H0Spx/DjV86YggI6N2Pu7GcoTM+UW3K84EtbHo+LS1OkC6qz WqOVdpLZS4+9je+lR8WHmlypdIgIC0Y0HMjYjDLd1kEkN218P8pfXgtSc5M2aYnr 6GIbhf0Wk0FcjxVlbgcU2UYwv6W8VHxVHfNFDjZeQTwPzCWkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3T+1wZZilyJEPW/xRgJk8oI9DeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQ4N2E0YmMtMzAwYy0z OGEyLWE2MTEtNTE5Mjg4Zjk0MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASb+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE77ZWk0FH+p3L2K1fXZ+i2QGp+kCCNsbsCpkHtMQcM3rlhqfnCXKeb u9ABU+Z6wvgaCs8f56fPT3FEc314FJI2hqV8U4n9aYs80Q0lzjdGRsnGm1IRdYLD uoVFgiJfm6VOy0F3fw5b8g5UhAuOliIxAMS0hXP1PvJaXi1puWABspdlL8SUEbfd tKGuz6sp5GIltG0EPr7D3ZOUMaUFCGKEC+9DjvixAdg7XQzYKpS7zmhtKJan0Kwk zMjF94CD0u6qLqqaKGU3fH/zHt06U/Of97j5MSZWlgkA6D1Pe6LvNxgbrRMQszbi Vxdk+OUuuDzDMucwbTRCPbA8uAQe1CE= -----END CERTIFICATE-----Generated at Wed Aug 6 13:11:48 2025 by rpki-client