$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0131b142-16ea-3e5b-9062-cd6c2910e617.roa File: 0131b142-16ea-3e5b-9062-cd6c2910e617.roa (raw, json) Hash identifier: mm9WtpzT40vJZFkx+BCkHO8/GwDaFIVc3OAnhdlEYpA= Subject key identifier: 5C:B6:49:34:4B:A4:BB:B3:FB:73:F5:E9:B6:FC:86:92:65:D4:B6:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8DF0C4596B4F2EA8B5340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0131b142-16ea-3e5b-9062-cd6c2910e617.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 73.145.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:df:0c:45:96:b4:f2:ea:8b:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2c5d419a-fece-4905-b7ec-5cb2d2d26e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:07:27:65:d3:52:2f:7c:6c:d1:2e:c3:f1:61: 5d:36:2a:b3:b7:d5:ff:25:52:b9:27:be:a9:d3:d1: b2:99:bf:3d:3b:c5:68:b1:40:dd:47:c4:80:a7:e6: fd:70:25:c0:af:c4:ea:11:a2:3f:35:a5:c3:95:27: 78:ea:bb:3a:e0:2f:48:d7:25:15:82:67:68:59:de: e3:87:dc:02:9d:4d:39:f4:6c:49:05:b7:11:48:d1: 1e:b8:94:51:7b:65:fb:b9:1c:62:29:99:91:db:19: d7:f0:ba:46:b3:04:8d:39:8e:79:08:93:17:8d:42: 32:40:a0:ab:7e:52:ea:f3:b9:a2:cd:61:fa:90:0a: 27:36:14:4e:22:31:0c:f2:f6:20:d6:cb:f3:c2:4e: b4:7b:6f:26:8a:51:09:94:2a:38:c4:55:fd:e8:9d: 9a:45:7d:a8:6f:42:e9:6c:42:a6:c5:29:57:90:c9: 9f:90:31:10:63:ec:9d:cb:44:ba:18:30:83:2b:c3: 51:ad:23:7c:00:cd:84:d0:d3:25:6c:ce:cf:b1:3a: 54:c3:51:58:37:83:bd:79:83:30:5a:67:28:b9:19: bd:c4:96:b4:b6:92:8d:d2:0f:b3:29:14:5b:1c:27: e9:97:bb:ee:bd:8f:85:33:b3:7f:2e:41:9c:d1:1c: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B6:49:34:4B:A4:BB:B3:FB:73:F5:E9:B6:FC:86:92:65:D4:B6:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0131b142-16ea-3e5b-9062-cd6c2910e617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.145.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:f9:44:76:df:62:82:7a:82:db:65:5b:57:f3:ed:3f:3e:19: 7f:eb:db:30:dc:77:d8:63:ae:ca:f4:55:8d:89:ca:ea:7c:39: 2e:38:ec:97:f0:fb:08:6c:ad:e9:5d:6b:78:bd:00:f3:b6:cc: 15:ed:36:24:3f:b2:a4:0e:a9:19:e0:da:93:bb:d2:4b:88:a0: d0:1d:18:22:6d:d6:87:08:2c:c1:08:89:dc:4b:3f:2f:bc:16: 40:98:c8:91:11:ce:66:aa:e2:1e:3e:7d:e4:8a:15:29:53:eb: 8f:36:2e:b7:98:1e:ee:43:9a:ad:3f:51:28:5f:8c:2d:7c:4e: 5c:2f:d3:d9:fb:5e:73:af:f5:56:32:d6:5c:c8:50:85:d7:17: 48:b9:cb:d7:29:70:cc:62:1c:d1:71:68:bd:6c:ec:3f:e9:87: cc:63:65:a5:e6:77:46:64:d5:80:ef:24:77:e0:a4:14:71:c4: 69:4e:a1:19:f7:c6:a5:3c:2c:b4:58:6c:17:6b:ad:9b:5f:75: 10:c1:9e:ba:47:68:0c:44:67:a7:cf:79:d6:28:a8:c7:43:32: df:41:d4:ba:cd:55:f1:84:19:b8:7c:f5:76:ca:bf:82:98:9c: 2f:5f:c5:e5:84:d0:e6:68:26:f4:e4:df:fc:67:7e:40:9d:0e: f1:22:28:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqN8MRZa08uqLU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmM1ZDQxOWEtZmVjZS00OTA1LWI3ZWMtNWNiMmQyZDI2ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAcnZdNSL3xs0S7D8WFdNiqzt9X/JVK5J76p 09Gymb89O8VosUDdR8SAp+b9cCXAr8TqEaI/NaXDlSd46rs64C9I1yUVgmdoWd7j h9wCnU059GxJBbcRSNEeuJRRe2X7uRxiKZmR2xnX8LpGswSNOY55CJMXjUIyQKCr flLq87mizWH6kAonNhROIjEM8vYg1svzwk60e28milEJlCo4xFX96J2aRX2ob0Lp bEKmxSlXkMmfkDEQY+ydy0S6GDCDK8NRrSN8AM2E0NMlbM7PsTpUw1FYN4O9eYMw WmcouRm9xJa0tpKN0g+zKRRbHCfpl7vuvY+FM7N/LkGc0RxJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy2STRLpLuz+3P16bb8hpJl1La5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDEzMWIxNDItMTZlYS0z ZTViLTkwNjItY2Q2YzI5MTBlNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSZEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM35RHbfYoJ6gttlW1fz7T8+GX/r2zDcd9hjrsr0VY2Jyup8OS447Jfw +whsrelda3i9APO2zBXtNiQ/sqQOqRng2pO70kuIoNAdGCJt1ocILMEIidxLPy+8 FkCYyJERzmaq4h4+feSKFSlT6482LreYHu5Dmq0/UShfjC18Tlwv09n7XnOv9VYy 1lzIUIXXF0i5y9cpcMxiHNFxaL1s7D/ph8xjZaXmd0Zk1YDvJHfgpBRxxGlOoRn3 xqU8LLRYbBdrrZtfdRDBnrpHaAxEZ6fPedYoqMdDMt9B1LrNVfGEGbh89XbKv4KY nC9fxeWE0OZoJvTk3/xnfkCdDvEiKAE= -----END CERTIFICATE-----Generated at Tue Oct 21 21:46:46 2025 by rpki-client