$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c2caba4-b5e2-3917-9ae6-f943260a4de9.roa File: 7c2caba4-b5e2-3917-9ae6-f943260a4de9.roa (raw, json) Hash identifier: BGxSYKL6m4H80xVJ7rryWLfVV2KkU7XJ/cAuK0hPtzo= Subject key identifier: 1F:18:EA:21:D9:82:8B:4D:E8:57:59:97:37:D3:6D:77:89:C2:6A:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EDE25FD4B594191DE4AB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c2caba4-b5e2-3917-9ae6-f943260a4de9.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 73.218.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:e2:5f:d4:b5:94:19:1d:e4:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a9e8f5d0-c42d-4a08-80a8-96a0847a22d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:72:36:76:c0:a8:f7:65:0e:d4:ce:bb:14: 98:ed:61:02:fe:37:df:6a:0f:05:e3:75:87:7b:b7: 84:49:c0:df:29:e1:3c:ea:35:c4:df:fa:5f:c0:b4: 32:91:48:cd:b3:a9:22:de:71:21:b5:8c:32:71:44: 40:05:84:97:40:c7:97:ba:f9:1c:db:97:a1:ff:50: 95:40:92:e8:4b:42:39:83:a5:a8:7e:b4:82:a7:09: 64:af:b6:08:7a:2c:33:0e:48:fb:40:f7:bb:ba:67: ef:75:8c:6e:c7:24:88:ed:05:2a:c7:7b:e9:7b:7e: 03:67:40:0f:37:f0:fc:db:d1:8d:8e:c9:17:38:ea: 52:78:53:65:81:7b:2d:fc:5f:d1:3b:61:75:d1:06: e9:8d:eb:98:5f:6d:80:90:f4:40:22:a9:cc:75:e8: dd:2c:d6:07:cf:e5:09:3d:fa:e1:cf:8e:e5:36:c7: 62:df:88:28:1b:a2:7b:6d:8b:4f:c7:0f:c4:b8:e7: 1f:86:cd:16:30:b5:29:ea:4e:bf:36:b0:24:b5:24: b6:f7:d6:02:7d:1b:3c:b0:1d:68:e5:3b:aa:2b:0b: 00:6a:21:49:5b:fb:99:9e:ae:25:99:2a:3f:2e:42: 57:99:fb:a2:05:20:e8:cc:ee:66:df:d2:91:dc:54: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:EA:21:D9:82:8B:4D:E8:57:59:97:37:D3:6D:77:89:C2:6A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c2caba4-b5e2-3917-9ae6-f943260a4de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.218.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:58:f9:25:60:02:bd:80:f5:11:19:1d:94:23:8f:55:56:a6: 5b:d9:cf:2d:47:9d:b6:1c:56:22:92:81:85:9c:1d:0b:bb:6a: 94:42:48:dd:cb:c5:7a:4d:b7:d5:8f:4f:9e:54:a1:a9:45:2d: 55:27:42:1f:a9:97:2a:83:95:30:57:76:63:58:11:e2:68:03: b9:19:22:2e:61:f9:25:77:85:90:af:05:a5:0b:d5:f9:37:25: 46:d8:c5:00:13:e6:e5:a4:15:1d:36:ac:13:9a:25:ae:d8:6c: 2a:76:f5:21:57:14:27:38:7f:43:be:d4:43:da:22:15:1f:18: 29:2b:dc:a5:79:51:26:23:c1:c4:c5:69:fc:81:07:4c:51:f7: 7f:6a:ef:cb:56:98:51:cb:7d:b9:8d:67:26:ae:a6:d9:30:0d: 00:ee:4d:ad:81:ef:1e:14:be:3b:e3:e3:79:cd:bf:93:bb:12: 73:7b:4e:24:98:7a:b7:66:74:cd:ee:21:a0:cf:0a:1f:b6:90: 5f:ab:d9:e0:d4:15:a2:4b:02:c5:e4:49:6d:09:db:d6:10:b0: 0a:b0:1e:e1:8a:e4:3b:8d:66:7f:e8:f7:22:cf:f0:13:61:1c: da:8a:f9:35:fa:5d:24:f8:35:a8:50:e6:74:0d:aa:56:46:11: c5:c8:84:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07eJf1LWUGR3kq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTllOGY1ZDAtYzQyZC00YTA4LTgwYTgtOTZhMDg0N2EyMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJxyNnbAqPdlDtTOuxSY7WEC/jffag8F43WH e7eEScDfKeE86jXE3/pfwLQykUjNs6ki3nEhtYwycURABYSXQMeXuvkc25eh/1CV QJLoS0I5g6WofrSCpwlkr7YIeiwzDkj7QPe7umfvdYxuxySI7QUqx3vpe34DZ0AP N/D829GNjskXOOpSeFNlgXst/F/RO2F10QbpjeuYX22AkPRAIqnMdejdLNYHz+UJ Pfrhz47lNsdi34goG6J7bYtPxw/EuOcfhs0WMLUp6k6/NrAktSS299YCfRs8sB1o 5TuqKwsAaiFJW/uZnq4lmSo/LkJXmfuiBSDozO5m39KR3FQ9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8Y6iHZgotN6FdZlzfTbXeJwmrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2MyY2FiYTQtYjVlMi0z OTE3LTlhZTYtZjk0MzI2MGE0ZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJY+SVgAr2A9REZHZQjj1VWplvZzy1HnbYcViKSgYWcHQu7apRCSN3L xXpNt9WPT55UoalFLVUnQh+plyqDlTBXdmNYEeJoA7kZIi5h+SV3hZCvBaUL1fk3 JUbYxQAT5uWkFR02rBOaJa7YbCp29SFXFCc4f0O+1EPaIhUfGCkr3KV5USYjwcTF afyBB0xR939q78tWmFHLfbmNZyauptkwDQDuTa2B7x4Uvjvj43nNv5O7EnN7TiSY erdmdM3uIaDPCh+2kF+r2eDUFaJLAsXkSW0J29YQsAqwHuGK5DuNZn/o9yLP8BNh HNqK+TX6XST4NahQ5nQNqlZGEcXIhDg= -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:29 2025 by rpki-client