$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1900df6a-f9bf-3083-a044-e7c031ce5dd6.roa File: 1900df6a-f9bf-3083-a044-e7c031ce5dd6.roa (raw, json) Hash identifier: jI8C1GWtRr6Xqcd0eFO1EaKIIKeJ7iQKZhffiKMaAoI= Subject key identifier: A1:90:21:84:C3:4B:16:51:DC:03:5D:FD:7D:CD:55:84:E8:86:B2:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7CCD9C0D9DEED7993ED20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1900df6a-f9bf-3083-a044-e7c031ce5dd6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.25.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:cc:d9:c0:d9:de:ed:79:93:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=09d2a8eb-67b1-4c01-ad80-df3dd3668d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:14:fa:86:69:ed:37:79:c4:49:1a:41:8e:d8: 44:81:db:53:ca:9e:d8:94:c7:6c:a2:fd:4c:08:14: cf:7f:8a:b1:7a:76:f2:97:99:84:5f:0c:3d:1d:39: 76:9e:a7:df:be:53:8c:84:74:47:f0:4d:0b:6b:15: 4c:f1:3a:a1:80:51:20:43:8f:05:b0:88:a7:0b:db: a8:ac:8e:b0:c4:4c:50:25:fd:1a:81:01:81:d6:42: 54:4d:4f:7c:70:68:29:b2:62:2b:74:bf:13:37:31: 4d:8c:e5:3d:01:35:e8:f8:1c:f0:c2:ec:fb:cc:b9: 70:02:c0:56:53:a0:23:9f:60:31:d2:28:37:1c:4e: 44:48:9f:77:ab:53:58:03:f5:79:9a:5a:3f:86:11: 9b:5d:e8:fa:35:57:e1:52:8e:26:d0:1e:b1:39:5e: c6:76:cb:65:82:83:ca:09:41:ee:61:ff:b2:61:d9: 47:f0:92:1e:18:25:8e:f7:0b:30:ad:7a:9f:d4:df: 30:0f:28:2b:5d:59:54:c5:da:10:4e:db:0f:2a:d2: ed:f4:8e:c1:20:f9:54:fd:05:13:af:4a:6c:bd:a3: 27:d7:51:e4:69:62:a9:c1:5e:98:bc:60:45:52:21: a8:58:b5:0b:3d:5e:84:e3:9c:e7:ac:52:da:c3:fa: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:90:21:84:C3:4B:16:51:DC:03:5D:FD:7D:CD:55:84:E8:86:B2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1900df6a-f9bf-3083-a044-e7c031ce5dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.25.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:53:a9:08:10:72:fc:b9:6a:6f:70:85:d4:1e:7a:1e:7c:57: 24:b0:47:79:a0:ff:b9:4b:ed:ac:fa:7c:8e:ec:8d:fe:00:b8: f7:23:5f:6f:34:c6:a5:b9:62:c1:ea:ef:83:e5:e8:1a:a0:41: 1b:b2:c1:2c:d7:bd:08:06:5f:7b:9a:70:4b:52:9e:d5:0d:81: 2c:76:36:86:fe:54:30:bf:ec:e5:fd:9f:d0:09:55:00:08:2c: a1:bb:77:82:02:c3:d0:d0:67:2c:11:57:a8:34:df:25:30:b8: 9c:40:16:0a:f6:6c:17:12:a6:16:21:7c:fa:8d:51:1d:a2:b6: c2:33:1c:6e:43:4b:15:8b:12:fc:75:a8:11:95:3c:21:99:b5: b1:9b:06:d8:93:2f:c2:de:f5:64:24:58:6a:6b:e6:1e:d1:c7: 2a:99:5c:43:c0:75:4e:66:2e:1c:d8:01:96:6d:e0:65:95:31: 67:52:1a:cb:bb:55:52:78:e2:b6:48:41:e7:d3:fe:2b:b2:02: 16:50:39:af:4d:ba:17:b7:ff:65:b9:e4:01:79:40:83:5d:46: ba:59:93:97:da:27:0a:c3:12:5c:03:13:7b:5e:e6:9f:61:33: b2:52:fc:2b:5a:84:1d:a7:33:5a:25:9a:6a:f3:39:ec:3e:87: 57:27:cb:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp8zZwNne7XmT7SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDlkMmE4ZWItNjdiMS00YzAxLWFkODAtZGYzZGQzNjY4ZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBT6hmntN3nESRpBjthEgdtTyp7YlMdsov1M CBTPf4qxenbyl5mEXww9HTl2nqffvlOMhHRH8E0LaxVM8TqhgFEgQ48FsIinC9uo rI6wxExQJf0agQGB1kJUTU98cGgpsmIrdL8TNzFNjOU9ATXo+Bzwwuz7zLlwAsBW U6Ajn2Ax0ig3HE5ESJ93q1NYA/V5mlo/hhGbXej6NVfhUo4m0B6xOV7GdstlgoPK CUHuYf+yYdlH8JIeGCWO9wswrXqf1N8wDygrXVlUxdoQTtsPKtLt9I7BIPlU/QUT r0psvaMn11HkaWKpwV6YvGBFUiGoWLULPV6E45znrFLaw/rrGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGQIYTDSxZR3ANd/X3NVYTohrINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTkwMGRmNmEtZjliZi0z MDgzLWEwNDQtZTdjMDMxY2U1ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASRmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhTqQgQcvy5am9whdQeeh58VySwR3mg/7lL7az6fI7sjf4AuPcjX280 xqW5YsHq74Pl6BqgQRuywSzXvQgGX3uacEtSntUNgSx2Nob+VDC/7OX9n9AJVQAI LKG7d4ICw9DQZywRV6g03yUwuJxAFgr2bBcSphYhfPqNUR2itsIzHG5DSxWLEvx1 qBGVPCGZtbGbBtiTL8Le9WQkWGpr5h7RxyqZXEPAdU5mLhzYAZZt4GWVMWdSGsu7 VVJ44rZIQefT/iuyAhZQOa9Nuhe3/2W55AF5QINdRrpZk5faJwrDElwDE3te5p9h M7JS/CtahB2nM1olmmrzOew+h1cny5k= -----END CERTIFICATE-----Generated at Tue Oct 21 19:34:15 2025 by rpki-client