$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa38e9c-91ed-3635-9e49-fe775dba2356.roa File: dfa38e9c-91ed-3635-9e49-fe775dba2356.roa (raw, json) Hash identifier: diJxgA3JGFlh0Pz3vYfpl3MC5jP+gHiDTMVsVmUyp6A= Subject key identifier: 33:EB:F8:9C:E8:8A:43:6A:23:19:ED:80:9B:FB:79:EB:8A:9B:7E:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC19E66256C007DA3899AE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa38e9c-91ed-3635-9e49-fe775dba2356.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.178.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:9e:66:25:6c:00:7d:a3:89:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7835cba8-acde-4c0f-b5e0-92f9fde33047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:3c:ca:d2:8a:26:68:b1:74:e1:61:7d:68: 39:c6:0f:6d:42:f8:25:c6:1e:fa:6f:90:83:f4:3a: 19:ed:03:d0:5c:14:e4:df:f9:60:d0:1e:2c:6b:26: 63:0b:16:9a:62:c4:a8:fc:2f:12:91:71:8b:ac:8b: 00:bf:7f:ec:cb:a1:a3:38:6d:30:52:32:cd:e5:99: a4:ed:79:b2:42:03:76:fc:95:90:4a:17:43:f6:70: fe:36:11:bd:2f:63:01:08:23:cb:fc:1c:80:1c:2c: 05:00:7f:79:fc:ca:2b:bf:60:d9:bf:76:68:f3:4d: f8:c9:3f:47:ae:cc:20:8c:bf:cb:fd:88:07:63:af: 9a:46:a4:77:e0:49:cf:03:14:4b:9c:68:7b:2d:56: 38:10:98:c1:3c:b1:0d:79:4f:c4:7c:54:a6:2f:78: ba:35:2a:fb:f8:59:92:07:9e:a6:4f:29:2f:b2:60: 1c:03:72:2f:be:87:70:83:d7:68:a8:80:01:74:4c: 10:1e:14:a9:06:fb:75:e6:88:7b:55:95:2a:95:a5: 0f:c6:16:8b:06:a5:ad:4c:82:a8:1d:ad:5e:a9:ac: 29:e0:63:4c:a7:90:4f:eb:b9:7d:0f:1f:92:00:91: 37:1a:b8:90:48:24:80:4c:04:52:bc:63:6f:23:49: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EB:F8:9C:E8:8A:43:6A:23:19:ED:80:9B:FB:79:EB:8A:9B:7E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa38e9c-91ed-3635-9e49-fe775dba2356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.178.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:59:6d:f2:1c:7c:3e:7d:7f:8e:5e:3a:23:0d:0a:68:5f:80: cf:f3:ae:9c:d1:2b:b0:dd:7e:86:3b:01:5c:75:79:35:b1:16: 95:67:89:35:6b:d4:33:79:ff:81:88:03:93:6d:ad:24:76:bb: ce:2f:e5:65:3b:08:3d:51:e5:b9:2f:4a:06:8c:72:d7:60:3a: e9:7e:d3:04:0a:aa:4d:42:d8:92:e8:56:f9:4e:76:05:66:c0: d4:ac:c6:82:4c:f6:8a:08:5d:ba:b6:a6:8b:8a:91:85:20:b5: ad:97:87:2c:b0:57:fa:78:10:fa:49:3d:3f:68:1e:78:56:83: 72:fb:48:e3:1d:fb:66:49:42:88:f3:b6:80:d1:6c:0e:ad:2b: 8b:5e:84:da:6c:87:4b:36:9a:3c:ea:c6:f8:dd:39:79:ca:ad: 94:77:e1:ad:ab:8c:96:c8:e6:0d:55:6d:78:b4:d2:67:76:22: b5:f3:07:77:c6:0a:e9:07:ea:7f:09:08:78:30:3d:62:ee:b8: 1e:b6:0d:97:ed:08:a8:f4:81:7e:e4:05:d9:7d:b4:17:6f:e7: bf:ef:16:70:8d:08:40:bf:38:9a:07:f1:60:01:41:52:6d:37: f8:85:47:ea:d0:95:16:78:fb:a7:c9:eb:6b:22:0e:39:a2:79: f3:3d:e6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswZ5mJWwAfaOJmuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzgzNWNiYTgtYWNkZS00YzBmLWI1ZTAtOTJmOWZkZTMzMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunc8ytKKJmixdOFhfWg5xg9tQvglxh76b5CD 9DoZ7QPQXBTk3/lg0B4sayZjCxaaYsSo/C8SkXGLrIsAv3/sy6GjOG0wUjLN5Zmk 7XmyQgN2/JWQShdD9nD+NhG9L2MBCCPL/ByAHCwFAH95/Morv2DZv3Zo8034yT9H rswgjL/L/YgHY6+aRqR34EnPAxRLnGh7LVY4EJjBPLENeU/EfFSmL3i6NSr7+FmS B56mTykvsmAcA3Ivvodwg9doqIABdEwQHhSpBvt15oh7VZUqlaUPxhaLBqWtTIKo Ha1eqawp4GNMp5BP67l9Dx+SAJE3GriQSCSATARSvGNvI0kcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPr+JzoikNqIxntgJv7eeuKm352MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZhMzhlOWMtOTFlZC0z NjM1LTllNDktZmU3NzVkYmEyMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSbLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpZbfIcfD59f45eOiMNCmhfgM/zrpzRK7DdfoY7AVx1eTWxFpVniTVr 1DN5/4GIA5NtrSR2u84v5WU7CD1R5bkvSgaMctdgOul+0wQKqk1C2JLoVvlOdgVm wNSsxoJM9ooIXbq2pouKkYUgta2XhyywV/p4EPpJPT9oHnhWg3L7SOMd+2ZJQojz toDRbA6tK4tehNpsh0s2mjzqxvjdOXnKrZR34a2rjJbI5g1VbXi00md2IrXzB3fG CukH6n8JCHgwPWLuuB62DZftCKj0gX7kBdl9tBdv57/vFnCNCEC/OJoH8WABQVJt N/iFR+rQlRZ4+6fJ62siDjmiefM95kk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:01 2025 by rpki-client