$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/101b2987-fa95-3e35-b6e2-15084ae369f6.roa File: 101b2987-fa95-3e35-b6e2-15084ae369f6.roa (raw, json) Hash identifier: TttQLW8Xw2h73gMRk1MdeXpJPRTOpBV+btfMJ6ABB5I= Subject key identifier: 25:BA:13:6D:4F:86:4A:37:DE:BB:7B:C8:F6:B9:C6:7D:01:10:81:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAB3BE3B82CEEA2BF7B800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/101b2987-fa95-3e35-b6e2-15084ae369f6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.232.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:b3:be:3b:82:ce:ea:2b:f7:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=49c1231d-d1e3-400e-bf7e-af811689382c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:dc:3d:04:a7:9a:05:f0:63:9f:a6:76:a9: 94:4e:21:d7:46:7c:97:e8:47:50:11:21:89:33:75: a9:8f:2d:9f:96:a2:d8:db:6e:6b:53:86:24:32:5c: 75:e1:69:5b:c7:e8:a5:d7:80:39:f4:09:0d:60:2b: 77:49:95:dc:15:ee:59:f8:b4:55:de:c2:2c:94:49: be:58:f0:a8:f5:e3:7a:d1:24:d1:cb:39:28:8c:0b: 07:98:3e:d3:81:7f:9b:8c:be:29:05:e6:12:2d:b8: 33:42:6d:10:cc:d2:0d:88:7a:af:6f:34:82:2d:e7: 34:53:b3:8d:12:30:b5:d6:f4:84:83:94:6a:a4:99: 73:b3:8a:c3:99:45:a3:87:39:25:d6:ff:fa:5e:33: 79:05:75:f2:2b:55:fd:9d:d1:7b:7f:46:6d:d4:a0: 75:75:50:da:f6:ad:d7:6b:1e:0d:32:08:a9:2a:d9: 1d:6f:e3:db:76:42:a6:33:98:a5:14:5e:60:94:1e: 47:d1:99:82:3b:ef:af:01:82:e1:54:34:5e:23:c2: a7:21:e9:c7:f2:41:f7:c8:ea:0f:1b:f7:8e:87:d3: 26:00:28:8d:72:38:66:32:8a:fb:fc:ff:f6:9a:06: e9:a5:54:4a:ef:fe:e0:4a:46:65:59:3f:0a:89:cb: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BA:13:6D:4F:86:4A:37:DE:BB:7B:C8:F6:B9:C6:7D:01:10:81:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/101b2987-fa95-3e35-b6e2-15084ae369f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.232.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6d:a5:25:56:0a:51:79:c7:09:78:2a:62:93:72:dd:17:57: c9:1f:75:f5:3a:04:36:30:6b:61:d3:13:db:ce:a7:41:b5:af: 5c:3e:e3:54:65:da:1f:08:3e:b8:99:0c:a1:db:81:5b:05:cd: dc:41:ba:07:6e:34:c7:5a:e5:25:14:b1:e0:9e:76:d0:e5:8b: 7c:13:7e:84:ce:22:ef:a0:92:07:cb:59:03:53:e5:18:c0:1f: 5d:94:b9:38:26:da:b7:f3:d1:37:33:fc:c6:a0:10:32:49:25: a9:b3:d6:07:71:f2:ff:fd:9b:f7:dd:43:dc:8c:7a:b7:cb:ca: 58:07:43:7c:c2:11:34:70:c6:10:59:d4:67:1a:96:50:75:b6: f2:6b:ce:e8:f4:cd:30:c1:c3:4f:c7:4d:76:e0:8b:68:19:6d: 4d:43:c1:34:a3:1e:19:52:00:66:82:6e:04:c0:bb:a7:7f:47: 75:6a:88:c5:42:2b:d6:30:40:88:74:bd:4f:06:bf:7a:fe:c9: 79:94:97:7b:5d:2b:43:7f:65:3c:5e:00:78:94:63:84:53:36: de:24:d1:64:7e:6d:42:a5:7a:cf:36:1e:dc:e0:5e:1b:0a:ca: 66:63:98:2d:5f:64:d6:4e:f7:d0:19:4b:25:39:c9:66:97:36: 4b:e4:f3:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqrO+O4LO6iv3uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDljMTIzMWQtZDFlMy00MDBlLWJmN2UtYWY4MTE2ODkzODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q7cPQSnmgXwY5+mdqmUTiHXRnyX6EdQESGJ M3Wpjy2flqLY225rU4YkMlx14Wlbx+il14A59AkNYCt3SZXcFe5Z+LRV3sIslEm+ WPCo9eN60STRyzkojAsHmD7TgX+bjL4pBeYSLbgzQm0QzNINiHqvbzSCLec0U7ON EjC11vSEg5RqpJlzs4rDmUWjhzkl1v/6XjN5BXXyK1X9ndF7f0Zt1KB1dVDa9q3X ax4NMgipKtkdb+PbdkKmM5ilFF5glB5H0ZmCO++vAYLhVDReI8KnIenH8kH3yOoP G/eOh9MmACiNcjhmMor7/P/2mgbppVRK7/7gSkZlWT8Kicu/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW6E21Phko33rt7yPa5xn0BEIFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTAxYjI5ODctZmE5NS0z ZTM1LWI2ZTItMTUwODRhZTM2OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeiMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdtpSVWClF5xwl4KmKTct0XV8kfdfU6BDYwa2HTE9vOp0G1r1w+41Rl 2h8IPriZDKHbgVsFzdxBugduNMda5SUUseCedtDli3wTfoTOIu+gkgfLWQNT5RjA H12UuTgm2rfz0Tcz/MagEDJJJamz1gdx8v/9m/fdQ9yMerfLylgHQ3zCETRwxhBZ 1GcallB1tvJrzuj0zTDBw0/HTXbgi2gZbU1DwTSjHhlSAGaCbgTAu6d/R3VqiMVC K9YwQIh0vU8Gv3r+yXmUl3tdK0N/ZTxeAHiUY4RTNt4k0WR+bUKles82HtzgXhsK ymZjmC1fZNZO99AZSyU5yWaXNkvk87A= -----END CERTIFICATE-----Generated at Tue Oct 21 19:46:07 2025 by rpki-client