$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc9b618-6db2-3eb3-b687-3a637efa28d9.roa File: dfc9b618-6db2-3eb3-b687-3a637efa28d9.roa (raw, json) Hash identifier: YfOtuTgm+w+KtKvjle+UJXydGZVmpJ/vcc4bP5K2KUs= Subject key identifier: FC:27:39:21:42:5A:2F:40:70:19:04:8B:B7:36:A6:DA:F3:12:2F:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED63D4ED2FC5E9F27B88A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc9b618-6db2-3eb3-b687-3a637efa28d9.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 73.164.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:63:d4:ed:2f:c5:e9:f2:7b:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=0f3185c0-80a7-4d93-a4db-3e06b4730bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:1e:9d:99:a4:c5:bf:76:b8:36:9b:73:4d: 22:81:94:26:ec:32:4e:10:51:5f:68:c2:61:50:a9: d5:59:02:c2:c5:81:4f:9a:b0:0a:05:4e:32:2a:2c: a1:80:16:5c:a6:4b:24:96:09:e8:eb:93:a4:8a:5e: d2:d8:c1:74:df:68:da:71:a6:44:cd:37:61:9b:f8: 11:8c:eb:b2:77:47:ec:46:96:ec:d9:66:d0:cc:da: ac:49:4f:de:f8:7b:61:2c:38:ee:a6:53:1a:db:51: 66:5c:c5:b2:40:27:e3:d3:55:5e:6e:76:e0:d5:14: e9:56:97:ed:1c:66:d2:66:3a:e0:67:f7:55:00:22: 1b:d6:0b:89:fb:bc:74:84:49:f6:84:be:1d:f5:e0: 77:f5:fb:87:3d:d0:75:bb:0a:48:f6:73:12:40:25: 49:d6:e8:43:a7:a8:6d:74:b7:47:c2:96:61:d0:16: e1:5d:b0:82:ba:c8:4e:1f:b4:12:4f:33:ae:21:06: c5:b2:fa:64:3c:e5:f4:2e:05:b7:0e:1b:8c:ce:e6: c8:03:ec:8e:c6:2c:dc:38:92:3a:76:47:a4:36:01: 40:90:9b:e9:cd:f2:7e:a7:75:a4:8d:29:9b:59:d8: 67:d3:8e:03:c0:44:f9:55:21:a2:32:77:5c:47:43: 42:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:27:39:21:42:5A:2F:40:70:19:04:8B:B7:36:A6:DA:F3:12:2F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc9b618-6db2-3eb3-b687-3a637efa28d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.164.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:47:0f:6f:0c:5f:f5:f6:2c:fa:8a:64:99:18:31:50:64:ab: 3d:d6:d2:68:c8:51:d4:be:57:c7:b6:66:ec:4e:da:67:e4:53: d9:0e:35:f1:9c:fb:82:80:d9:a2:bf:4f:30:3c:34:cc:e9:7e: b9:16:6f:e7:00:7b:74:0b:c6:49:2c:36:51:4b:34:43:3e:0d: c3:fc:ab:34:68:ca:78:a3:7b:6a:91:5c:8c:32:3c:62:36:07: e0:f6:6f:cf:e6:3b:ee:09:fe:fc:73:f7:7e:86:02:2b:51:0d: 18:0b:7e:11:66:8c:73:6d:e8:c0:57:bb:10:d0:05:7d:2e:05: b2:e3:1a:26:28:6e:fc:7c:8b:01:4a:0a:3f:e1:fa:01:03:07: bc:43:a3:65:59:37:3b:7c:84:82:e2:18:cb:2c:52:68:d1:12: 8c:7e:c6:03:bd:52:1a:ba:b6:e2:d4:84:20:97:56:8e:85:33: 15:f7:11:ba:b4:d7:20:f3:1b:42:6c:9f:0e:47:c5:59:65:10: 0b:f0:00:84:1f:17:f9:6d:d0:53:41:bc:3f:0a:0c:75:2f:c5: fc:59:08:c1:1c:ec:34:a1:85:82:86:55:f0:41:80:4f:75:31: 7f:d2:2f:5c:60:36:86:f2:bd:f3:80:16:fb:87:d7:1d:20:a8: 91:27:90:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07WPU7S/F6fJ7iKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGYzMTg1YzAtODBhNy00ZDkzLWE0ZGItM2UwNmI0NzMwYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMYenZmkxb92uDabc00igZQm7DJOEFFfaMJh UKnVWQLCxYFPmrAKBU4yKiyhgBZcpksklgno65Okil7S2MF032jacaZEzTdhm/gR jOuyd0fsRpbs2WbQzNqsSU/e+HthLDjuplMa21FmXMWyQCfj01Vebnbg1RTpVpft HGbSZjrgZ/dVACIb1guJ+7x0hEn2hL4d9eB39fuHPdB1uwpI9nMSQCVJ1uhDp6ht dLdHwpZh0BbhXbCCushOH7QSTzOuIQbFsvpkPOX0LgW3DhuMzubIA+yOxizcOJI6 dkekNgFAkJvpzfJ+p3WkjSmbWdhn044DwET5VSGiMndcR0NC8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwnOSFCWi9AcBkEi7c2ptrzEi+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZjOWI2MTgtNmRiMi0z ZWIzLWI2ODctM2E2MzdlZmEyOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZHD28MX/X2LPqKZJkYMVBkqz3W0mjIUdS+V8e2ZuxO2mfkU9kONfGc +4KA2aK/TzA8NMzpfrkWb+cAe3QLxkksNlFLNEM+DcP8qzRoynije2qRXIwyPGI2 B+D2b8/mO+4J/vxz936GAitRDRgLfhFmjHNt6MBXuxDQBX0uBbLjGiYobvx8iwFK Cj/h+gEDB7xDo2VZNzt8hILiGMssUmjREox+xgO9Uhq6tuLUhCCXVo6FMxX3Ebq0 1yDzG0Jsnw5HxVllEAvwAIQfF/lt0FNBvD8KDHUvxfxZCMEc7DShhYKGVfBBgE91 MX/SL1xgNobyvfOAFvuH1x0gqJEnkGQ= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:15 2025 by rpki-client