$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35c7f5d-65ed-3e98-bda5-a43d462d8e16.roa File: c35c7f5d-65ed-3e98-bda5-a43d462d8e16.roa (raw, json) Hash identifier: QFtDMKUDEfenCIfUAYsYipon9cNRxOe97PVKhq40cFk= Subject key identifier: 37:D0:81:EC:2C:28:D7:D9:22:90:0E:E5:62:E7:95:26:C7:DF:78:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED6854EC8A6B1628C76C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35c7f5d-65ed-3e98-bda5-a43d462d8e16.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 73.240.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:68:54:ec:8a:6b:16:28:c7:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=8105340f-7e71-40ca-ae3e-981df86d1dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:76:ad:40:99:4b:33:7c:41:97:92:87:81: ac:fb:b3:84:01:d0:ea:66:8b:27:09:fc:34:94:70: 62:1d:0d:06:50:31:01:97:6a:6c:22:59:19:16:77: 3d:6b:90:45:2b:c6:a6:28:9c:4e:1b:01:c3:fb:d7: 9a:19:ac:10:37:5c:d5:74:07:51:e4:db:70:dd:77: d6:dc:18:69:a7:ac:68:3a:eb:7c:76:6e:6c:60:ae: ef:72:5e:5f:7f:04:68:c7:2a:67:e4:e7:99:5b:7e: d1:8f:af:53:cf:db:b0:0f:df:65:06:c6:47:7f:a5: 66:66:29:f1:7b:e6:4f:db:e4:05:f5:26:84:5a:c8: 57:b9:92:02:a3:46:92:5c:13:47:d5:8f:17:58:a7: 74:16:2e:02:d8:31:8b:ca:66:da:3f:10:88:b8:b9: c4:f6:fd:cc:9e:e4:6c:c4:ec:2c:3d:31:d0:94:10: a7:56:25:2f:01:df:15:57:e3:ab:d9:f5:28:c2:82: c7:3c:95:55:aa:59:f2:4a:b6:79:3d:a1:a4:78:03: 8a:60:d4:f7:c9:93:e9:90:3b:86:a7:2a:8f:c5:81: 91:7e:99:31:88:52:3b:00:a3:ec:21:a7:a9:87:b0: ea:4d:02:54:ec:8e:53:d8:de:95:2c:9c:f3:1c:f2: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:81:EC:2C:28:D7:D9:22:90:0E:E5:62:E7:95:26:C7:DF:78:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35c7f5d-65ed-3e98-bda5-a43d462d8e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b0:dc:0e:ab:48:cb:dd:d9:4b:45:13:29:aa:37:8f:80:1e: 99:99:f5:8f:59:48:6d:5b:70:56:19:9a:43:24:0a:97:c3:d5: 91:dc:50:7c:79:9c:4a:a0:73:68:96:b8:16:31:80:2c:66:19: 3f:f7:68:fe:e1:35:17:82:5c:c1:ad:05:34:99:3d:40:c8:ef: 39:94:d1:83:ea:d4:ff:4c:cd:cb:72:5b:de:94:82:5d:5e:b8: 9c:6e:a5:83:7c:a9:6f:c9:f4:c4:15:1a:af:d1:9b:e2:3a:d9: 78:22:3a:75:b5:16:36:8a:0a:e4:24:d3:2a:c7:b8:83:95:ef: 47:0e:3b:93:0d:e3:bb:7f:90:54:12:47:43:26:76:70:41:70: 00:f8:d5:92:1d:27:d5:a3:e6:9f:82:d9:b8:8c:ef:f0:01:a1: 23:b0:66:5b:21:03:c2:72:9a:a5:b7:a7:49:21:46:b0:de:c9: cf:fb:b1:4d:c8:9e:10:1d:0d:5d:a4:fd:62:26:4a:31:b7:88: 9d:5a:66:0f:2e:bd:d8:d3:b9:21:0f:cd:4b:27:5a:68:cd:63: 15:14:1b:cc:9e:9d:4c:8f:90:7c:a2:99:d3:b0:4b:a9:a5:2c: 29:16:2c:80:05:21:c4:53:73:32:34:2b:94:0b:00:a2:2a:1e: 3b:bd:1b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07WhU7IprFijHbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ODEwNTM0MGYtN2U3MS00MGNhLWFlM2UtOTgxZGY4NmQxZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN52rUCZSzN8QZeSh4Gs+7OEAdDqZosnCfw0 lHBiHQ0GUDEBl2psIlkZFnc9a5BFK8amKJxOGwHD+9eaGawQN1zVdAdR5Ntw3XfW 3Bhpp6xoOut8dm5sYK7vcl5ffwRoxypn5OeZW37Rj69Tz9uwD99lBsZHf6VmZinx e+ZP2+QF9SaEWshXuZICo0aSXBNH1Y8XWKd0Fi4C2DGLymbaPxCIuLnE9v3MnuRs xOwsPTHQlBCnViUvAd8VV+Or2fUowoLHPJVVqlnySrZ5PaGkeAOKYNT3yZPpkDuG pyqPxYGRfpkxiFI7AKPsIaeph7DqTQJU7I5T2N6VLJzzHPK3WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfQgewsKNfZIpAO5WLnlSbH33ieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzM1YzdmNWQtNjVlZC0z ZTk4LWJkYTUtYTQzZDQ2MmQ4ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWw3A6rSMvd2UtFEymqN4+AHpmZ9Y9ZSG1bcFYZmkMkCpfD1ZHcUHx5 nEqgc2iWuBYxgCxmGT/3aP7hNReCXMGtBTSZPUDI7zmU0YPq1P9MzctyW96Ugl1e uJxupYN8qW/J9MQVGq/Rm+I62XgiOnW1FjaKCuQk0yrHuIOV70cOO5MN47t/kFQS R0MmdnBBcAD41ZIdJ9Wj5p+C2biM7/ABoSOwZlshA8JymqW3p0khRrDeyc/7sU3I nhAdDV2k/WImSjG3iJ1aZg8uvdjTuSEPzUsnWmjNYxUUG8yenUyPkHyimdOwS6ml LCkWLIAFIcRTczI0K5QLAKIqHju9G90= -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:25 2025 by rpki-client