$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2deb70-8405-3da4-9bae-a1b0cc574ee1.roa File: 0f2deb70-8405-3da4-9bae-a1b0cc574ee1.roa (raw, json) Hash identifier: N7+G1mKhCUqc/bkKZk6BxXlUkKz4GE6Ha4k8+xyzKpM= Subject key identifier: 38:0D:F4:52:F7:BC:63:83:2A:AC:F7:7C:C6:5C:C7:A4:FF:98:3B:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A90B7C495CCDE47E9ED900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2deb70-8405-3da4-9bae-a1b0cc574ee1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.136.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:0b:7c:49:5c:cd:e4:7e:9e:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=94649a4a-3bdf-45ee-9699-4dc5bcaf8365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dc:0b:18:2a:4c:33:54:e3:b9:96:fe:35:96: 62:5f:c9:2f:f0:84:6d:c4:be:90:e1:f8:7a:3b:65: ee:07:00:5f:bd:c7:68:96:d7:48:b0:4a:ad:cb:71: 88:de:37:0c:32:90:69:ba:01:e0:cc:e0:f5:ab:4f: 50:ef:d0:83:ed:7e:9a:38:7d:6d:6c:02:f7:fb:68: 59:c5:21:e4:8b:a8:bd:7a:d4:6a:76:58:98:1d:38: f0:dc:26:04:21:1a:f6:68:2b:36:b9:e0:03:27:ce: f0:88:43:b9:7f:e4:fc:f3:95:dc:16:2e:a6:2f:c5: 13:0c:d8:a2:31:f3:0a:36:92:d4:72:9b:48:bc:29: d7:3c:e8:18:b3:c8:74:db:00:9f:2d:fa:89:1c:50: c5:cd:a6:7f:4f:5a:84:34:85:67:94:eb:f4:ba:6a: 56:fb:c4:ac:6a:cf:3b:ef:be:ea:44:13:e2:a5:38: b4:7b:f6:e6:d2:d3:f4:89:d7:8c:2f:8a:b1:60:97: f2:45:72:68:21:a3:0a:a6:49:b4:7a:56:3d:74:6b: 5d:81:ad:b5:72:c0:bb:cf:3d:3f:88:41:0b:de:05: 5f:9f:f8:d6:30:d6:48:56:55:1c:0f:57:fd:f3:55: a9:55:6e:07:80:80:a2:1d:3e:d2:1f:7b:26:54:d5: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:F4:52:F7:BC:63:83:2A:AC:F7:7C:C6:5C:C7:A4:FF:98:3B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2deb70-8405-3da4-9bae-a1b0cc574ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.136.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6e:09:e5:b2:4d:92:7e:74:8d:0a:40:30:65:29:df:7a:5c: a4:5e:9a:04:28:67:45:28:0e:33:06:b3:32:4d:72:bf:d4:e7: 08:dc:49:b8:67:ea:5e:24:68:3d:10:72:f7:bc:09:b4:08:ea: e0:3f:1f:04:9a:59:f9:f1:47:7f:3c:e4:1a:d3:f3:49:a4:26: 78:c2:b4:75:5e:77:6b:6b:cf:62:48:71:6e:1a:43:2f:19:01: ec:52:a8:d3:80:fb:ab:84:f1:7e:6d:d9:ba:36:45:74:43:de: a5:16:e4:2a:f4:c7:d0:ae:b4:55:14:b6:5f:38:65:28:0f:f6: bd:74:63:d7:2e:96:7f:cf:05:d1:0d:a9:dd:25:2e:f2:d4:38: f0:c7:60:75:5e:84:f8:ed:a6:94:f6:ed:3a:d0:f3:b5:e5:08: ec:80:ce:7b:40:94:91:e9:cf:1c:64:9b:aa:4b:17:53:f3:61: 34:96:39:c1:7f:09:ee:21:6c:d2:41:cd:50:a6:98:40:a1:3b: 53:23:97:f1:88:1a:1e:43:40:8b:55:53:5b:34:f4:25:09:50: 1c:b0:e4:b4:9b:1a:cf:00:ac:b2:65:d3:cd:09:7f:fb:c6:1a: fb:8c:53:86:6a:8a:60:6d:12:b8:fb:8e:1c:c1:cc:67:62:5d: c6:74:db:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqQt8SVzN5H6e2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OTQ2NDlhNGEtM2JkZi00NWVlLTk2OTktNGRjNWJjYWY4MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNwLGCpMM1TjuZb+NZZiX8kv8IRtxL6Q4fh6 O2XuBwBfvcdoltdIsEqty3GI3jcMMpBpugHgzOD1q09Q79CD7X6aOH1tbAL3+2hZ xSHki6i9etRqdliYHTjw3CYEIRr2aCs2ueADJ87wiEO5f+T885XcFi6mL8UTDNii MfMKNpLUcptIvCnXPOgYs8h02wCfLfqJHFDFzaZ/T1qENIVnlOv0umpW+8Ssas87 777qRBPipTi0e/bm0tP0ideML4qxYJfyRXJoIaMKpkm0elY9dGtdga21csC7zz0/ iEEL3gVfn/jWMNZIVlUcD1f981WpVW4HgICiHT7SH3smVNVUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgN9FL3vGODKqz3fMZcx6T/mDvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGYyZGViNzAtODQwNS0z ZGE0LTliYWUtYTFiMGNjNTc0ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSYjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNuCeWyTZJ+dI0KQDBlKd96XKRemgQoZ0UoDjMGszJNcr/U5wjcSbhn 6l4kaD0Qcve8CbQI6uA/HwSaWfnxR3885BrT80mkJnjCtHVed2trz2JIcW4aQy8Z AexSqNOA+6uE8X5t2bo2RXRD3qUW5Cr0x9CutFUUtl84ZSgP9r10Y9culn/PBdEN qd0lLvLUOPDHYHVehPjtppT27TrQ87XlCOyAzntAlJHpzxxkm6pLF1PzYTSWOcF/ Ce4hbNJBzVCmmEChO1Mjl/GIGh5DQItVU1s09CUJUByw5LSbGs8ArLJl080Jf/vG GvuMU4ZqimBtErj7jhzBzGdiXcZ02+U= -----END CERTIFICATE-----Generated at Tue Oct 21 21:40:00 2025 by rpki-client