$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f87d98-8e89-35f8-9896-8a22a4a0a4c6.roa File: 06f87d98-8e89-35f8-9896-8a22a4a0a4c6.roa (raw, json) Hash identifier: gaLuQBzoKFvBEzVnlmgEHZ5eZgp+Mg6nUgUCAs4DQpk= Subject key identifier: 4D:9B:D6:22:09:93:C7:58:E0:13:41:33:57:8E:9C:0E:A9:3C:4D:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3A0D94355ADF7DCE29658 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f87d98-8e89-35f8-9896-8a22a4a0a4c6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.195.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:a0:d9:43:55:ad:f7:dc:e2:96:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3b3dbe2e-0fe8-4fec-a44f-ea288333d1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5c:1d:cc:5d:b7:33:af:8c:4c:fb:cc:40:21: 93:89:aa:2d:09:96:df:fd:4f:aa:20:1b:ff:97:af: 95:bf:c6:ed:62:86:81:fa:40:01:13:8b:f8:69:54: 47:db:f1:82:51:bf:bd:1c:73:c7:2e:0b:c0:55:80: 3e:6d:1a:5b:38:52:81:ea:e4:20:56:84:a2:4d:0f: b0:d7:df:6b:d3:2c:1c:00:9c:23:e9:92:dd:02:39: 65:86:77:62:69:75:99:73:93:16:9f:44:22:55:fe: 55:7a:61:0a:5d:f9:6b:26:71:ad:c8:dd:94:40:05: 46:ed:d7:33:25:fb:c9:97:1b:9a:5b:a1:fb:b9:49: ed:90:3f:53:b1:7d:3b:49:7c:67:35:d7:ac:e8:92: 0d:30:e6:9b:02:84:e0:87:14:a8:95:17:fc:b4:14: f0:20:69:a0:e5:9a:b5:cd:62:5c:24:c1:53:83:3a: cf:50:3d:ad:25:70:ba:31:de:76:b5:0a:56:2c:55: 83:e0:5d:53:56:4b:98:ea:12:3e:2a:7c:df:d2:29: b0:bc:2f:57:99:a6:c5:d9:b8:61:ee:63:ff:fa:01: 55:8b:1f:e2:ac:81:0e:d5:8f:de:d1:4e:16:a6:63: d2:ca:e6:90:00:d9:38:9f:4c:27:34:a0:c0:4a:1a: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9B:D6:22:09:93:C7:58:E0:13:41:33:57:8E:9C:0E:A9:3C:4D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f87d98-8e89-35f8-9896-8a22a4a0a4c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.195.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:01:bd:1e:ae:3b:3b:df:bc:72:bc:a6:d2:54:d8:8d:df:c0: 55:c1:65:8e:59:dd:c6:e9:58:29:b5:e8:04:e8:47:26:5d:e3: 43:6d:c8:44:9d:ee:7e:db:51:ec:4e:e6:3d:76:18:1d:df:20: bb:71:11:9a:22:b1:fd:6a:7e:f9:61:40:a8:39:29:c7:70:a2: 48:c7:2f:7d:f5:42:dc:ce:68:b3:f2:d9:97:46:35:be:68:1c: 7c:4f:35:28:57:16:4d:87:ab:b8:ae:40:ae:55:bf:e9:ac:4b: 22:d0:60:4e:cd:10:fa:46:55:d1:b1:cf:ef:43:aa:cf:fa:6b: 09:51:f5:c7:a0:e0:c3:d1:29:32:71:1d:47:d2:27:f7:a1:6c: de:98:61:44:5b:83:52:6d:f8:3c:44:fd:17:c1:71:c1:c5:12: 19:6f:f2:c5:33:43:26:55:2d:32:f6:ff:85:f2:48:ae:40:e7: cc:07:c9:98:58:dc:64:8e:96:38:32:f8:23:83:8c:9b:e4:c0: 18:5f:11:c0:03:52:7b:6c:b2:3f:f8:6d:f3:ad:d0:b0:09:2d: d9:74:2f:79:1d:a6:c7:a2:fe:50:41:c4:8f:1e:c8:55:4b:a1: 68:aa:99:1c:77:b0:f0:1f:d5:64:2b:cc:d5:09:88:a4:73:09: ea:84:1f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw6DZQ1Wt99zillgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2IzZGJlMmUtMGZlOC00ZmVjLWE0NGYtZWEyODgzMzNkMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilwdzF23M6+MTPvMQCGTiaotCZbf/U+qIBv/ l6+Vv8btYoaB+kABE4v4aVRH2/GCUb+9HHPHLgvAVYA+bRpbOFKB6uQgVoSiTQ+w 199r0ywcAJwj6ZLdAjllhndiaXWZc5MWn0QiVf5VemEKXflrJnGtyN2UQAVG7dcz JfvJlxuaW6H7uUntkD9TsX07SXxnNdes6JINMOabAoTghxSolRf8tBTwIGmg5Zq1 zWJcJMFTgzrPUD2tJXC6Md52tQpWLFWD4F1TVkuY6hI+Knzf0imwvC9XmabF2bhh 7mP/+gFVix/irIEO1Y/e0U4WpmPSyuaQANk4n0wnNKDAShrBkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2b1iIJk8dY4BNBM1eOnA6pPE2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDZmODdkOTgtOGU4OS0z NWY4LTk4OTYtOGEyMmE0YTBhNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDScPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANsBvR6uOzvfvHK8ptJU2I3fwFXBZY5Z3cbpWCm16AToRyZd40NtyESd 7n7bUexO5j12GB3fILtxEZoisf1qfvlhQKg5KcdwokjHL331QtzOaLPy2ZdGNb5o HHxPNShXFk2Hq7iuQK5Vv+msSyLQYE7NEPpGVdGxz+9Dqs/6awlR9ceg4MPRKTJx HUfSJ/ehbN6YYURbg1Jt+DxE/RfBccHFEhlv8sUzQyZVLTL2/4XySK5A58wHyZhY 3GSOljgy+CODjJvkwBhfEcADUntssj/4bfOt0LAJLdl0L3kdpsei/lBBxI8eyFVL oWiqmRx3sPAf1WQrzNUJiKRzCeqEH+Y= -----END CERTIFICATE-----Generated at Tue Oct 21 22:18:17 2025 by rpki-client