$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa55fb67-6ebb-3c6b-88dc-fa5fb285b256.roa File: aa55fb67-6ebb-3c6b-88dc-fa5fb285b256.roa (raw, json) Hash identifier: HEw6D/lOoQyug7aV1wYwiVasYuTHbsKDx48Wei+QJXc= Subject key identifier: E8:1A:4D:8E:B2:3F:47:36:46:F0:34:FA:C9:C4:2D:A9:D1:5A:03:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2FF37C8335FD3236AA840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa55fb67-6ebb-3c6b-88dc-fa5fb285b256.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.158.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:ff:37:c8:33:5f:d3:23:6a:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=521f2aac-d73a-44aa-a4be-d916b217f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:cf:01:52:ae:f6:d4:d9:d8:61:7d:56:0b: 28:ef:f3:58:e6:01:cd:31:2e:82:e2:34:04:09:01: 1f:64:c5:78:e7:f5:19:a7:20:aa:b4:6f:21:9b:27: 4b:7d:75:f6:65:13:3d:76:28:51:c3:23:39:15:a1: f7:f9:b6:8a:60:5d:19:46:69:62:20:9e:29:45:ad: 1c:5c:49:a3:fc:ed:31:cd:9d:6a:62:d2:dc:6d:3e: af:27:53:65:2c:ff:70:e1:d4:e1:4c:df:cd:e7:ac: 37:ae:0a:f6:7e:6c:e2:8f:c2:ed:df:69:a9:7e:13: 90:98:3a:e3:18:8c:46:ec:47:f2:bb:8c:05:56:7a: 52:69:f2:ad:cd:e6:9d:ff:52:da:af:63:4b:9c:7d: 43:8d:62:d7:c5:ff:b5:8d:fe:f3:16:6e:81:16:21: e0:8e:a7:95:b5:c8:f0:e5:66:33:10:16:d5:f2:66: 4f:2a:d8:02:24:73:05:16:bb:90:9a:c8:a4:b0:c2: 99:5e:3a:15:a6:69:88:14:4e:17:9a:cd:8f:8c:26: 9d:93:ea:e1:19:fb:31:ef:ba:34:62:46:18:7a:8f: 4c:53:bd:fd:e7:94:fa:cf:90:a4:a9:58:bc:31:ff: 8f:77:97:83:40:da:35:06:0d:85:f7:b6:00:da:21: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1A:4D:8E:B2:3F:47:36:46:F0:34:FA:C9:C4:2D:A9:D1:5A:03:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa55fb67-6ebb-3c6b-88dc-fa5fb285b256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ef:61:be:8f:4c:fd:da:22:c4:37:7f:08:2c:d4:3b:c4:7c: 50:70:9c:64:90:e7:dd:4a:f7:9b:bf:c7:df:e3:4b:c2:6e:8b: 03:5a:63:5b:00:02:b5:de:50:df:02:08:d8:55:d2:8f:26:47: ea:f3:12:db:b0:e5:b8:66:74:ad:f4:1e:bc:29:57:29:82:91: 31:5d:04:cf:18:26:ef:0e:ad:7c:01:c3:ab:a2:5a:0c:4b:fc: e2:cd:49:51:59:36:ce:a3:8e:55:97:4c:77:9e:83:ec:54:8c: 8f:25:d1:a7:e3:87:a2:5d:0a:2e:94:34:74:33:25:58:61:c6: 22:1f:b9:12:cf:73:46:1a:3d:11:f9:fa:fd:c6:0e:b7:b0:98: 06:eb:63:a8:90:15:eb:69:84:b0:62:5b:f8:5d:08:ac:fb:06: 2f:a4:55:92:ab:e5:04:26:84:f8:67:b9:c3:ef:31:5f:e8:a3: 1d:32:2d:3b:09:0a:18:ab:34:9c:dc:cd:ac:95:cc:b4:c9:26: df:a0:92:88:7f:be:54:18:aa:d0:27:65:9f:e2:d3:b9:0d:85: ef:45:2e:4c:be:b0:15:f2:55:12:c0:63:e7:4e:79:e6:a0:b4: 50:8f:03:f8:d4:64:00:f7:e4:c9:81:3a:93:72:7c:e9:90:c1: 20:4e:15:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswv83yDNf0yNqqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTIxZjJhYWMtZDczYS00NGFhLWE0YmUtZDkxNmIyMTdmNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDjPAVKu9tTZ2GF9Vgso7/NY5gHNMS6C4jQE CQEfZMV45/UZpyCqtG8hmydLfXX2ZRM9dihRwyM5FaH3+baKYF0ZRmliIJ4pRa0c XEmj/O0xzZ1qYtLcbT6vJ1NlLP9w4dThTN/N56w3rgr2fmzij8Lt32mpfhOQmDrj GIxG7Efyu4wFVnpSafKtzead/1Lar2NLnH1DjWLXxf+1jf7zFm6BFiHgjqeVtcjw 5WYzEBbV8mZPKtgCJHMFFruQmsiksMKZXjoVpmmIFE4Xms2PjCadk+rhGfsx77o0 YkYYeo9MU73955T6z5CkqVi8Mf+Pd5eDQNo1Bg2F97YA2iGRRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgaTY6yP0c2RvA0+snELanRWgNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE1NWZiNjctNmViYi0z YzZiLTg4ZGMtZmE1ZmIyODViMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTvYb6PTP3aIsQ3fwgs1DvEfFBwnGSQ591K95u/x9/jS8JuiwNaY1sA ArXeUN8CCNhV0o8mR+rzEtuw5bhmdK30HrwpVymCkTFdBM8YJu8OrXwBw6uiWgxL /OLNSVFZNs6jjlWXTHeeg+xUjI8l0afjh6JdCi6UNHQzJVhhxiIfuRLPc0YaPRH5 +v3GDrewmAbrY6iQFetphLBiW/hdCKz7Bi+kVZKr5QQmhPhnucPvMV/oox0yLTsJ ChirNJzczayVzLTJJt+gkoh/vlQYqtAnZZ/i07kNhe9FLky+sBXyVRLAY+dOeeag tFCPA/jUZAD35MmBOpNyfOmQwSBOFcI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:44 2025 by rpki-client