$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/604d42d7-d56e-38e6-a5e2-7b6ac5a8104a.roa File: 604d42d7-d56e-38e6-a5e2-7b6ac5a8104a.roa (raw, json) Hash identifier: QERLx9gx62vxaWcR+Tzm2rLFTAWdyYHxnWZnofQXgQg= Subject key identifier: 40:4F:B8:19:B3:79:0B:B1:0D:E4:B6:B1:9D:FF:76:B3:B3:80:17:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EEAA4855C00799670A8500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/604d42d7-d56e-38e6-a5e2-7b6ac5a8104a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 73.166.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:aa:48:55:c0:07:99:67:0a:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=e90bf7a8-a29b-48d7-8623-573d32f917aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:99:19:19:95:92:00:e6:dd:49:19:79:92: 4e:dc:7e:27:79:98:da:f9:b7:dc:90:c2:79:95:e7: c5:f8:81:8d:c6:21:35:f2:ac:af:6f:b6:68:0a:79: 16:36:1c:40:ef:07:99:5d:82:9a:05:fd:f8:7a:7c: 3e:70:48:13:4a:73:dd:49:06:08:26:f7:14:27:cf: f2:c6:4c:14:d1:f3:79:46:3b:da:2a:08:c6:8b:80: db:96:eb:a6:5f:29:75:57:d7:46:d0:35:3b:8c:1b: 61:68:12:89:ce:58:8a:d2:ee:f6:ca:91:dd:a0:4a: 8b:0c:66:b0:e5:72:af:06:60:e9:45:25:3b:ce:f6: 07:30:62:96:5e:5a:1e:d3:05:86:a0:05:18:fe:db: d0:df:4a:02:fe:b4:19:39:b5:08:dd:09:70:bc:88: c0:cc:01:4d:61:be:35:6c:37:93:c5:dd:56:1a:da: fd:11:b0:0f:cc:ea:b9:3c:fa:0a:9c:b5:1c:f9:da: 48:74:4a:ce:80:46:03:a1:77:08:ec:26:37:c1:66: c4:cd:20:20:77:6b:0a:0e:c0:47:e7:da:36:be:ab: c1:3e:f6:25:8a:12:c8:5f:31:75:d3:94:aa:23:19: 05:18:24:e8:2d:e5:ab:48:02:11:30:83:a5:9f:f7: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:B8:19:B3:79:0B:B1:0D:E4:B6:B1:9D:FF:76:B3:B3:80:17:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/604d42d7-d56e-38e6-a5e2-7b6ac5a8104a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.166.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:3d:5a:08:d3:6b:d9:22:91:5b:ed:6b:63:14:57:12:18:cd: 68:be:c6:d5:db:06:8b:58:57:7c:ac:ba:31:af:e1:d5:62:dc: 9b:e9:62:44:ed:f4:fb:91:a3:e6:1a:67:f5:f7:49:1f:50:5c: a7:2d:03:c9:ed:b3:e9:e8:fb:52:ce:9b:af:48:5a:1f:1d:a0: ec:ed:f3:a2:69:cc:96:bf:fc:4f:05:7f:e7:7e:95:59:20:34: c1:ff:a0:fa:ab:66:df:89:88:d5:60:ce:98:2f:0f:92:a4:32: 63:12:d5:53:27:63:d4:95:88:84:1f:5d:07:75:4d:97:d9:e1: 8a:32:c3:e4:5a:0d:85:13:68:ec:0d:0c:92:e1:1d:83:f6:6c: 36:fa:8d:3d:34:da:7b:3e:ff:ea:76:90:6d:bc:4f:5e:d5:92: aa:a2:7b:1c:15:dc:4a:2c:3e:a8:5a:c2:0f:15:65:f3:e5:1d: e4:4c:c8:84:37:8a:02:27:29:e8:4f:6f:0a:3f:a0:77:9e:6a: 6b:97:67:2e:49:05:89:2a:bc:1c:ab:e1:60:ec:e0:bb:7d:65: 7c:e1:28:4a:ff:ae:63:83:a9:3a:0a:1d:7b:14:21:aa:95:50: ce:ba:f5:8f:5a:2f:ee:41:d4:fa:30:1c:25:e8:f3:fb:53:2a: 5c:a8:98:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07qpIVcAHmWcKhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZTkwYmY3YTgtYTI5Yi00OGQ3LTg2MjMtNTczZDMyZjkxN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsmZGRmVkgDm3UkZeZJO3H4neZja+bfckMJ5 lefF+IGNxiE18qyvb7ZoCnkWNhxA7weZXYKaBf34enw+cEgTSnPdSQYIJvcUJ8/y xkwU0fN5RjvaKgjGi4DbluumXyl1V9dG0DU7jBthaBKJzliK0u72ypHdoEqLDGaw 5XKvBmDpRSU7zvYHMGKWXloe0wWGoAUY/tvQ30oC/rQZObUI3QlwvIjAzAFNYb41 bDeTxd1WGtr9EbAPzOq5PPoKnLUc+dpIdErOgEYDoXcI7CY3wWbEzSAgd2sKDsBH 59o2vqvBPvYlihLIXzF105SqIxkFGCToLeWrSAIRMIOln/e0AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBPuBmzeQuxDeS2sZ3/drOzgBdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA0ZDQyZDctZDU2ZS0z OGU2LWE1ZTItN2I2YWM1YTgxMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSabgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAME9WgjTa9kikVvta2MUVxIYzWi+xtXbBotYV3ysujGv4dVi3JvpYkTt 9PuRo+YaZ/X3SR9QXKctA8nts+no+1LOm69IWh8doOzt86JpzJa//E8Ff+d+lVkg NMH/oPqrZt+JiNVgzpgvD5KkMmMS1VMnY9SViIQfXQd1TZfZ4Yoyw+RaDYUTaOwN DJLhHYP2bDb6jT002ns+/+p2kG28T17VkqqiexwV3EosPqhawg8VZfPlHeRMyIQ3 igInKehPbwo/oHeeamuXZy5JBYkqvByr4WDs4Lt9ZXzhKEr/rmODqToKHXsUIaqV UM669Y9aL+5B1PowHCXo8/tTKlyomBo= -----END CERTIFICATE-----Generated at Wed Aug 6 18:30:20 2025 by rpki-client