$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af815171-6d33-3c44-ae1a-df61877078e7.roa File: af815171-6d33-3c44-ae1a-df61877078e7.roa (raw, json) Hash identifier: RGo6SOVcwpNYik0N2bDCaIZeFIl4PoAjUdDCGlJiRck= Subject key identifier: 3D:0E:52:48:9B:3F:EE:B4:C8:B5:A1:FA:92:F5:17:75:D7:7D:4E:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB221451EAC0F8428F47BB180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af815171-6d33-3c44-ae1a-df61877078e7.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 22258 IP address blocks: 73.177.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:45:1e:ac:0f:84:28:f4:7b:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=25e65c9b-4f2b-4ab5-a0e2-db8562faa29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:9e:01:a2:11:d5:99:82:42:0e:88:8b:2c: ba:6d:c4:a8:c7:04:9c:59:69:84:a9:c5:11:0d:56: 0c:6a:d8:7f:b0:d6:03:3d:a3:5a:61:e0:83:2c:03: a4:92:60:b0:43:27:b0:a1:c8:3a:71:9d:de:47:f0: 0f:1b:bf:9a:cf:33:8c:06:ec:45:81:84:89:52:c8: e0:28:23:a4:e0:7c:30:92:91:08:ff:a4:73:25:e5: d6:6f:36:0e:fa:d1:67:9d:c0:d4:ee:df:47:4e:8f: 85:5b:a6:38:ca:a6:84:e0:dd:f0:e1:07:b6:55:7b: a7:ba:62:01:50:6a:81:e3:9b:60:22:05:fe:16:27: 37:c5:b6:4d:8b:40:2e:69:d3:e6:fd:f6:1e:f4:c8: a2:ec:64:19:56:66:b5:2d:0c:a3:48:ef:e9:7c:b8: 40:ac:48:e6:f7:07:e0:78:52:33:ee:ec:d2:32:70: 4b:81:5f:91:a6:ed:08:eb:a6:76:00:08:a2:67:f1: a5:8b:00:8f:cf:53:05:cd:92:56:b5:f7:77:56:09: ce:c6:08:fb:a8:20:e9:2e:fb:ca:e3:5b:d6:80:b7: 39:87:12:37:ca:45:b9:37:71:b4:5c:8b:37:a9:0c: 7a:13:39:71:70:45:89:c7:e3:2d:21:16:06:6d:fc: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0E:52:48:9B:3F:EE:B4:C8:B5:A1:FA:92:F5:17:75:D7:7D:4E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af815171-6d33-3c44-ae1a-df61877078e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.177.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e0:71:e5:04:2a:6f:1b:6a:33:00:84:78:b4:07:db:65:eb: 89:3e:f1:d8:89:5d:f0:1e:82:c9:0f:fd:2e:7d:38:e0:2f:fe: 27:b2:30:55:31:b1:0e:c0:e6:f3:06:fd:15:92:c1:71:d4:03: c8:ab:fd:9c:06:30:6e:1e:7f:15:46:72:04:1b:00:a4:6b:cd: 1c:e4:0e:d2:01:31:e4:77:97:67:40:39:ab:e3:a9:75:20:01: 74:07:51:d5:46:9d:c0:97:7a:e2:00:30:d6:d1:e0:23:28:7c: 84:39:4e:39:c3:52:c3:c0:2c:1d:17:65:26:b8:cc:66:94:fe: 44:61:ce:1d:3f:4c:e2:be:28:78:07:35:73:5f:6f:cc:a2:84: b5:58:4e:94:99:14:38:57:9b:eb:fb:66:4e:1f:34:75:17:a9: e3:45:b4:75:fe:a4:0a:72:19:92:40:19:7d:b8:9a:8c:e7:07: 2b:3c:f3:80:38:12:7f:ba:30:f2:3f:c3:6b:aa:d6:62:3d:37: 97:7c:c8:05:9e:e4:0b:e2:5d:36:6c:e5:85:0f:9e:12:11:5f: 32:c3:d4:21:98:c6:b6:fa:ac:d9:5f:74:28:71:57:e0:af:cd: ca:ed:66:8a:82:bf:05:08:3b:1b:03:bc:2a:e2:3c:dc:87:8a: fc:e5:40:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIUUerA+EKPR7sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjVlNjVjOWItNGYyYi00YWI1LWEwZTItZGI4NTYyZmFhMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/6eAaIR1ZmCQg6Iiyy6bcSoxwScWWmEqcUR DVYMath/sNYDPaNaYeCDLAOkkmCwQyewocg6cZ3eR/APG7+azzOMBuxFgYSJUsjg KCOk4HwwkpEI/6RzJeXWbzYO+tFnncDU7t9HTo+FW6Y4yqaE4N3w4Qe2VXunumIB UGqB45tgIgX+Fic3xbZNi0AuadPm/fYe9Mii7GQZVma1LQyjSO/pfLhArEjm9wfg eFIz7uzSMnBLgV+Rpu0I66Z2AAiiZ/GliwCPz1MFzZJWtfd3VgnOxgj7qCDpLvvK 41vWgLc5hxI3ykW5N3G0XIs3qQx6EzlxcEWJx+MtIRYGbfw/8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0OUkibP+60yLWh+pL1F3XXfU6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY4MTUxNzEtNmQzMy0z YzQ0LWFlMWEtZGY2MTg3NzA3OGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbgceUEKm8bajMAhHi0B9tl64k+8diJXfAegskP/S59OOAv/ieyMFUx sQ7A5vMG/RWSwXHUA8ir/ZwGMG4efxVGcgQbAKRrzRzkDtIBMeR3l2dAOavjqXUg AXQHUdVGncCXeuIAMNbR4CMofIQ5TjnDUsPALB0XZSa4zGaU/kRhzh0/TOK+KHgH NXNfb8yihLVYTpSZFDhXm+v7Zk4fNHUXqeNFtHX+pApyGZJAGX24moznBys884A4 En+6MPI/w2uq1mI9N5d8yAWe5AviXTZs5YUPnhIRXzLD1CGYxrb6rNlfdChxV+Cv zcrtZoqCvwUIOxsDvCriPNyHivzlQCQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:05:02 2025 by rpki-client