$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac50c7fa-eedd-3eb6-ae86-5d5aed3f6f80.roa File: ac50c7fa-eedd-3eb6-ae86-5d5aed3f6f80.roa (raw, json) Hash identifier: itK6ZEW3v9mBI/84G26Qqwa69S1kNTgJByvJ4/kOTSA= Subject key identifier: 40:91:30:5E:FD:17:5D:74:A4:03:F2:5B:CF:E4:2C:A9:5F:E7:A5:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECD0CC2685E5B30099AD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac50c7fa-eedd-3eb6-ae86-5d5aed3f6f80.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 73.191.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:d0:cc:26:85:e5:b3:00:99:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=433c215e-de9b-4765-b336-3a0447c6e6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:1a:7d:62:47:13:92:b2:08:a0:47:cb:70: 59:ec:fb:75:57:51:3b:fc:cc:6b:95:e4:c7:8c:8a: 3d:54:b8:98:8b:4c:75:67:c0:a6:54:ba:92:85:71: 94:2d:54:83:e5:19:37:d7:af:43:63:31:52:07:86: ba:a5:b9:12:69:44:51:4f:cf:a5:e8:1c:cb:44:ae: db:1f:4e:e9:fb:93:17:d4:ac:7a:3b:9f:0c:84:16: 20:4d:58:44:15:cb:a8:c9:dd:aa:64:e9:c4:e6:5f: 2a:d0:e7:ec:33:a8:f4:2e:42:d9:51:ad:d8:d3:21: 6f:6d:d0:db:69:e9:85:8f:a3:30:c5:03:0f:ec:b7: bb:cc:2c:e1:06:9d:80:ab:42:e0:1a:59:d6:71:83: f5:3f:2f:57:93:00:c0:0c:e2:30:dc:25:80:84:d1: a0:d7:23:d6:30:71:31:68:f0:34:91:47:71:e1:65: 91:02:a0:c7:ef:10:87:b9:20:03:ac:35:04:2a:89: 25:58:33:2b:a5:22:52:87:f7:ad:e0:8e:b6:f2:11: fb:8e:d8:80:56:e5:9b:91:bd:86:5f:91:78:16:ff: 5b:85:67:07:f8:ad:ec:8b:33:2b:b7:15:47:2e:d8: 60:0d:2f:e7:24:08:e6:54:90:32:ea:79:d4:fb:c5: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:91:30:5E:FD:17:5D:74:A4:03:F2:5B:CF:E4:2C:A9:5F:E7:A5:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac50c7fa-eedd-3eb6-ae86-5d5aed3f6f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:98:a5:f3:56:60:7e:a4:a2:36:2d:2f:db:39:3a:b5:c6:df: f7:09:c7:c2:ae:6d:e8:ec:e8:d9:55:33:91:05:26:b3:a9:a0: 67:e4:0a:45:d2:98:c8:32:55:bc:8e:a5:c4:52:48:04:c8:af: a0:41:56:d1:6c:6f:8d:76:e6:33:7f:90:d2:1d:5a:f5:ba:51: 51:0e:76:39:25:a6:6c:39:b7:71:c4:74:19:85:c2:d4:f6:41: 6a:27:64:a9:a2:fe:3d:5c:7a:ac:f5:86:1d:ca:e4:83:53:fb: dc:38:20:15:d5:7d:7b:94:5a:05:7e:dd:b8:03:ea:78:97:9b: ad:0e:a1:38:de:26:8f:89:9b:b2:68:e8:de:f9:33:37:62:2e: 72:b6:57:b2:57:6f:2c:7d:d3:7b:7f:f2:7a:a1:4c:ed:a0:03: 59:02:5d:7c:cb:1f:b3:ca:71:bf:fb:e7:98:28:da:4a:c9:77: ee:a0:a6:f3:79:29:1d:9e:79:fc:bf:79:6c:cc:e2:4a:56:17: fd:7d:56:92:60:d2:96:a5:be:a6:3e:dd:a9:11:8a:ec:e2:1f: 42:85:8e:65:86:f4:22:ac:2a:26:b9:c8:ac:a8:9f:ff:58:6a: 78:5e:6b:b2:70:d7:09:33:d0:5f:b9:f6:c4:25:6f:43:3e:4a: 8f:87:07:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07NDMJoXlswCZrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDMzYzIxNWUtZGU5Yi00NzY1LWIzMzYtM2EwNDQ3YzZlNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG4afWJHE5KyCKBHy3BZ7Pt1V1E7/MxrleTH jIo9VLiYi0x1Z8CmVLqShXGULVSD5Rk3169DYzFSB4a6pbkSaURRT8+l6BzLRK7b H07p+5MX1Kx6O58MhBYgTVhEFcuoyd2qZOnE5l8q0OfsM6j0LkLZUa3Y0yFvbdDb aemFj6MwxQMP7Le7zCzhBp2Aq0LgGlnWcYP1Py9XkwDADOIw3CWAhNGg1yPWMHEx aPA0kUdx4WWRAqDH7xCHuSADrDUEKoklWDMrpSJSh/et4I628hH7jtiAVuWbkb2G X5F4Fv9bhWcH+K3sizMrtxVHLthgDS/nJAjmVJAy6nnU+8WFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECRMF79F110pAPyW8/kLKlf56W7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWM1MGM3ZmEtZWVkZC0z ZWI2LWFlODYtNWQ1YWVkM2Y2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGYpfNWYH6kojYtL9s5OrXG3/cJx8Kubejs6NlVM5EFJrOpoGfkCkXS mMgyVbyOpcRSSATIr6BBVtFsb4125jN/kNIdWvW6UVEOdjklpmw5t3HEdBmFwtT2 QWonZKmi/j1ceqz1hh3K5INT+9w4IBXVfXuUWgV+3bgD6niXm60OoTjeJo+Jm7Jo 6N75MzdiLnK2V7JXbyx903t/8nqhTO2gA1kCXXzLH7PKcb/755go2krJd+6gpvN5 KR2eefy/eWzM4kpWF/19VpJg0palvqY+3akRiuziH0KFjmWG9CKsKia5yKyon/9Y anhea7Jw1wkz0F+59sQlb0M+So+HB1A= -----END CERTIFICATE-----Generated at Wed Aug 6 06:07:40 2025 by rpki-client