$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e8d90b3-847a-3640-aa19-de45608a05c2.roa File: 0e8d90b3-847a-3640-aa19-de45608a05c2.roa (raw, json) Hash identifier: Z5sefv2dYLCF8mtd0OWHD6/J5T8HfIODtWoMowc0Ua8= Subject key identifier: C9:EF:96:30:29:08:60:6C:6C:F0:7E:14:98:61:B3:2C:01:95:BD:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAC1C9F939DF34E66FA280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e8d90b3-847a-3640-aa19-de45608a05c2.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.76.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:c1:c9:f9:39:df:34:e6:6f:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=75f4cae3-b162-4fbb-a5c7-2ee7f2d25cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:17:68:e1:33:cd:9d:6c:16:89:d8:27:83: 18:2c:e1:82:99:8f:a3:ea:e3:b5:47:89:78:dc:72: b6:f4:20:0a:0c:df:1b:23:3e:ca:ef:fb:21:5a:f2: 2a:a1:41:8f:c3:45:f7:f3:db:37:13:6e:71:a9:41: 84:42:96:e4:ae:66:d1:52:5a:cd:74:1d:25:8f:fb: aa:c9:99:22:18:3c:2a:49:76:4f:df:fb:c3:92:f6: ae:eb:db:1c:7a:ef:1a:0e:38:e9:c0:4a:d8:f4:ce: 4f:0c:2d:44:8d:52:0a:02:1f:63:1c:0f:60:37:ef: ca:bf:c2:07:ca:1e:c6:03:61:ad:80:7e:74:7e:8d: 3e:e1:d0:51:f3:ca:f4:8a:e0:43:08:53:19:05:80: db:d5:16:fe:89:d8:7b:35:34:14:f3:3c:82:5c:e3: bd:97:6b:8e:4d:78:85:04:0e:65:71:b1:fd:cb:05: 13:2a:1a:86:e6:ba:e1:63:03:86:12:a9:c9:4a:94: 85:78:9b:40:34:72:be:59:bc:e9:21:64:8d:f9:d2: d0:d7:8c:85:e8:21:d6:2d:8e:4c:e7:a8:a5:41:55: f7:2d:94:68:01:a6:a0:23:c5:d4:b6:23:0c:e1:b1: 7b:a8:37:4f:40:32:1a:e4:98:35:b4:32:de:08:68: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EF:96:30:29:08:60:6C:6C:F0:7E:14:98:61:B3:2C:01:95:BD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e8d90b3-847a-3640-aa19-de45608a05c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.76.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6a:f7:bc:bc:dc:3f:a7:2e:cf:a8:1d:e6:3e:d2:a2:39:aa: 8a:05:ba:53:fd:a7:e5:77:c6:32:64:c2:8d:52:40:49:b1:5e: e2:8c:4f:ac:b6:43:8d:ac:04:db:f4:a9:5c:29:b6:27:50:c4: e0:d5:e9:af:58:2e:b6:f6:06:3f:85:92:5f:13:7b:8b:c1:e4: 2a:17:d3:8a:1d:fa:b5:d7:0a:c7:93:59:fe:aa:21:82:58:bd: 3d:41:4e:97:9a:82:0e:83:4e:1b:d4:a0:14:3e:87:a3:95:a2: 19:db:d8:7a:10:bb:34:51:c7:bd:be:36:42:cb:bc:e4:b1:d2: c8:a3:21:d1:79:70:29:84:3f:83:13:d2:24:f1:7e:97:05:56: cc:e2:4e:7f:31:3a:fe:10:3e:d1:1e:21:05:1a:d8:2c:99:60: 65:60:df:ef:1b:53:03:30:6e:9e:2e:9d:4d:6c:61:cb:82:9f: d8:98:70:e0:12:66:79:43:45:b4:59:84:ff:97:3c:0f:b8:90: 1a:04:cb:11:a8:69:d2:ca:12:97:5c:bd:77:21:f6:e2:51:99: cf:ba:f1:aa:d2:7c:c0:fc:e7:37:b6:b3:4f:c7:06:7f:4b:23: 94:ec:6a:15:a5:73:f6:5b:32:83:f6:f2:cc:67:91:e6:9e:5b: 66:26:f9:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqsHJ+TnfNOZvooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzVmNGNhZTMtYjE2Mi00ZmJiLWE1YzctMmVlN2YyZDI1Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUoXaOEzzZ1sFonYJ4MYLOGCmY+j6uO1R4l4 3HK29CAKDN8bIz7K7/shWvIqoUGPw0X389s3E25xqUGEQpbkrmbRUlrNdB0lj/uq yZkiGDwqSXZP3/vDkvau69sceu8aDjjpwErY9M5PDC1EjVIKAh9jHA9gN+/Kv8IH yh7GA2GtgH50fo0+4dBR88r0iuBDCFMZBYDb1Rb+idh7NTQU8zyCXOO9l2uOTXiF BA5lcbH9ywUTKhqG5rrhYwOGEqnJSpSFeJtANHK+WbzpIWSN+dLQ14yF6CHWLY5M 56ilQVX3LZRoAaagI8XUtiMM4bF7qDdPQDIa5Jg1tDLeCGiNZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnvljApCGBsbPB+FJhhsywBlb2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGU4ZDkwYjMtODQ3YS0z NjQwLWFhMTktZGU0NTYwOGEwNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9q97y83D+nLs+oHeY+0qI5qooFulP9p+V3xjJkwo1SQEmxXuKMT6y2 Q42sBNv0qVwptidQxODV6a9YLrb2Bj+Fkl8Te4vB5CoX04od+rXXCseTWf6qIYJY vT1BTpeagg6DThvUoBQ+h6OVohnb2HoQuzRRx72+NkLLvOSx0sijIdF5cCmEP4MT 0iTxfpcFVsziTn8xOv4QPtEeIQUa2CyZYGVg3+8bUwMwbp4unU1sYcuCn9iYcOAS ZnlDRbRZhP+XPA+4kBoEyxGoadLKEpdcvXch9uJRmc+68arSfMD85ze2s0/HBn9L I5TsahWlc/ZbMoP28sxnkeaeW2Ym+eg= -----END CERTIFICATE-----Generated at Wed Oct 22 02:54:19 2025 by rpki-client