$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9aa6ea5-bad3-3ec4-a273-f43db7ce96b8.roa File: a9aa6ea5-bad3-3ec4-a273-f43db7ce96b8.roa (raw, json) Hash identifier: QmxL698F9to5LiFpTTZUyD/dB0uv9ux0oAQ85VCzPsk= Subject key identifier: AF:6B:38:91:3D:AA:6A:C8:FE:A1:C2:E2:26:31:F1:09:1B:E9:2E:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED008BFCB65DCB45860E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9aa6ea5-bad3-3ec4-a273-f43db7ce96b8.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 73.206.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:00:8b:fc:b6:5d:cb:45:86:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=c8a2ca54-faba-4499-b984-1bf79ad4b59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:09:0a:6f:af:6f:ef:fd:55:bd:e5:da:e1: eb:ab:88:bb:6b:2e:0a:90:bc:57:21:0c:dc:6b:ac: 09:48:b9:21:cc:1b:83:b8:61:a4:cb:6c:ec:40:60: f9:4c:f4:25:59:65:82:d4:ed:ed:e2:6b:c9:70:2c: 38:21:1b:57:0b:34:8a:7a:79:a0:74:c8:53:b9:31: 20:1b:0b:8d:3a:64:e2:b6:25:ce:f1:32:ec:f6:86: c8:f4:2c:96:fa:4b:cd:10:7e:82:dc:5e:b6:e4:f8: be:a6:1a:cd:e3:47:62:07:4a:a4:03:cd:3e:73:de: 32:0b:8d:27:a4:a9:c2:be:74:27:31:b9:95:a5:23: dd:39:7b:01:ae:a1:fd:37:c0:51:97:3f:82:8c:04: 24:f4:c3:f0:7e:03:30:7f:27:24:67:92:7d:15:c6: 47:1b:23:3f:c0:59:3d:ca:01:31:09:34:bd:d3:1f: 09:42:01:df:5d:1b:7e:a3:5e:5e:bc:11:98:de:65: a3:cf:c5:e0:68:f7:81:3d:3b:b5:43:af:99:aa:22: d0:cd:74:f8:59:fc:2e:f4:1a:f8:99:46:32:9a:72: e9:a4:22:95:c1:5b:81:04:35:f6:5a:a2:3c:30:59: d8:af:d6:fa:54:85:cc:13:a0:76:58:f0:de:2a:6e: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6B:38:91:3D:AA:6A:C8:FE:A1:C2:E2:26:31:F1:09:1B:E9:2E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9aa6ea5-bad3-3ec4-a273-f43db7ce96b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.206.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:06:e8:ad:71:9e:8a:3d:0b:86:47:98:8a:61:65:0d:6e:82: d2:9d:7a:60:5c:f5:e5:b3:74:c3:c8:ce:38:1c:be:2f:78:d1: 18:ed:7a:61:c9:a4:f4:e7:14:24:13:d9:5b:d1:0a:34:c8:75: 8b:03:3c:bc:3a:08:59:b3:fe:b6:6e:90:26:17:7b:b4:5c:15: 59:8b:be:0d:73:42:e2:eb:4f:78:a9:08:55:d5:4b:c6:72:5d: 69:4e:a3:fc:aa:81:6c:5d:a2:8c:d8:63:a8:47:fa:57:fb:79: 0d:dc:0e:c4:72:81:c7:00:b1:fb:66:fb:c5:3f:1b:b6:4f:4d: d4:35:e3:07:5e:2c:ab:c3:eb:cb:0f:75:e1:41:c5:e9:1e:21: 1c:3a:c0:21:33:e4:43:3c:b0:5e:3c:cb:b3:3c:74:86:28:e1: 45:75:d9:60:ee:1c:c9:73:e0:a2:2a:6e:10:38:86:96:72:04: 50:b7:1d:c1:bb:14:65:80:ee:77:1d:70:e5:76:2e:80:f9:91: 3a:05:cb:b8:d5:bf:ef:50:9e:dd:a3:35:f2:c8:4b:13:ff:01: ac:d0:f0:80:ea:a8:40:67:2e:69:67:54:c8:1e:08:3a:10:76: 9d:2a:88:b4:f9:27:82:09:db:16:01:97:03:9c:39:99:2c:bd: 75:a0:32:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07QCL/LZdy0WGDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzhhMmNhNTQtZmFiYS00NDk5LWI5ODQtMWJmNzlhZDRiNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2oJCm+vb+/9Vb3l2uHrq4i7ay4KkLxXIQzc a6wJSLkhzBuDuGGky2zsQGD5TPQlWWWC1O3t4mvJcCw4IRtXCzSKenmgdMhTuTEg GwuNOmTitiXO8TLs9obI9CyW+kvNEH6C3F625Pi+phrN40diB0qkA80+c94yC40n pKnCvnQnMbmVpSPdOXsBrqH9N8BRlz+CjAQk9MPwfgMwfyckZ5J9FcZHGyM/wFk9 ygExCTS90x8JQgHfXRt+o15evBGY3mWjz8XgaPeBPTu1Q6+ZqiLQzXT4Wfwu9Br4 mUYymnLppCKVwVuBBDX2WqI8MFnYr9b6VIXME6B2WPDeKm5PUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9rOJE9qmrI/qHC4iYx8Qkb6S51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlhYTZlYTUtYmFkMy0z ZWM0LWEyNzMtZjQzZGI3Y2U5NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSc7KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANMG6K1xnoo9C4ZHmIphZQ1ugtKdemBc9eWzdMPIzjgcvi940RjtemHJ pPTnFCQT2VvRCjTIdYsDPLw6CFmz/rZukCYXe7RcFVmLvg1zQuLrT3ipCFXVS8Zy XWlOo/yqgWxdoozYY6hH+lf7eQ3cDsRygccAsftm+8U/G7ZPTdQ14wdeLKvD68sP deFBxekeIRw6wCEz5EM8sF48y7M8dIYo4UV12WDuHMlz4KIqbhA4hpZyBFC3HcG7 FGWA7ncdcOV2LoD5kToFy7jVv+9Qnt2jNfLISxP/AazQ8IDqqEBnLmlnVMgeCDoQ dp0qiLT5J4IJ2xYBlwOcOZksvXWgMks= -----END CERTIFICATE-----Generated at Wed Aug 6 18:30:10 2025 by rpki-client