$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f99f256-c4e9-38bb-a8fd-35e2abf41a6a.roa File: 1f99f256-c4e9-38bb-a8fd-35e2abf41a6a.roa (raw, json) Hash identifier: qp9txqxleYagKYqSfAcAWh6BpxFsNPG+4VF8sYdudS8= Subject key identifier: 23:EB:05:9F:6C:2F:62:E7:D8:5E:C2:39:D1:F3:25:20:0E:C0:EA:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA847EDD91AE83CB07E800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f99f256-c4e9-38bb-a8fd-35e2abf41a6a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 73.191.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:84:7e:dd:91:ae:83:cb:07:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9cf49695-ca0d-4c95-8a03-23638aa1c3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:67:d1:03:6f:cc:20:5c:b6:82:78:65:50:ef: 80:a9:61:fc:2e:47:df:13:8f:36:7f:20:c1:4b:10: f4:16:47:cc:41:42:56:11:11:3a:e9:3e:1c:9b:ca: 6d:bf:55:53:de:4a:e4:1c:6c:6c:00:62:f2:36:8b: 42:5f:fd:7c:17:13:3d:7c:2a:f9:7f:6e:24:63:6a: 80:29:45:98:21:aa:7a:59:55:b5:f6:b0:ca:97:c2: 6c:ec:b6:9e:ab:0a:9c:d7:3a:bf:71:a3:fc:87:60: 38:41:eb:47:f7:1a:08:08:a1:30:ee:19:94:bb:14: 1f:59:d4:42:5b:4d:62:96:68:ad:d5:91:22:83:ac: 12:05:1c:ff:5a:e2:2d:ee:11:12:65:87:68:b4:01: 2d:fd:a1:18:d1:23:26:be:f3:ab:a4:a7:f2:87:71: 0d:cc:de:3a:0f:b4:34:69:83:dc:f1:4d:64:15:5b: 7b:51:c3:f9:ca:d1:df:a9:be:84:6d:1b:a7:93:7b: d6:fb:d3:b4:6c:4d:c5:1e:07:2e:d0:5b:f1:7b:89: e1:bd:96:e2:d6:e4:f7:4c:20:37:8a:6f:68:35:23: ed:79:f0:8c:8e:f9:eb:ed:fe:2c:12:7f:dc:a6:3d: 4d:aa:83:e3:db:f7:09:ba:fa:bf:b6:17:ab:18:ab: 61:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EB:05:9F:6C:2F:62:E7:D8:5E:C2:39:D1:F3:25:20:0E:C0:EA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f99f256-c4e9-38bb-a8fd-35e2abf41a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:92:c3:14:19:ab:fc:dd:01:a2:6d:29:96:74:e4:7d:3a:33: 84:7a:13:f4:f2:d2:04:6b:28:af:45:63:8e:0d:b5:10:13:2d: 30:67:34:ac:47:df:14:12:08:c1:a2:d1:db:a6:8e:4c:d9:1b: 9f:cf:38:bd:47:be:f6:cd:09:31:86:7f:a0:45:89:7a:d7:fa: 6f:60:59:c7:72:eb:a0:fc:83:0e:e0:6a:56:59:28:c3:46:d9: f6:9a:ab:7c:cf:81:92:20:e7:05:46:70:1a:b5:01:b8:cb:52: de:20:91:da:1a:1c:10:6e:c7:f2:d1:e4:85:d6:74:58:7e:ee: 6b:2c:0c:22:50:d6:58:dc:77:7e:1d:88:63:26:db:71:19:b0: c4:8c:8e:ed:72:41:20:d2:f0:41:fb:75:d7:57:63:7e:5a:8a: 33:d4:a2:f6:65:c8:98:f5:db:fb:bf:cf:c3:cf:a1:09:8f:b7: 7f:7f:0c:a2:5d:cb:86:c0:61:89:62:e8:12:5f:b8:51:d7:4f: 0e:0c:95:10:87:c1:da:ec:63:98:67:aa:8f:ff:e3:d4:f7:17: a5:70:e3:5c:35:6c:f3:a9:02:87:ef:07:4a:4f:c4:3a:6d:f7: 2d:ec:6a:6d:5c:e2:e2:5e:e5:c0:4a:3c:f3:58:94:60:91:13: 63:d7:9e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqoR+3ZGug8sH6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWNmNDk2OTUtY2EwZC00Yzk1LThhMDMtMjM2MzhhYTFjM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGfRA2/MIFy2gnhlUO+AqWH8LkffE482fyDB SxD0FkfMQUJWERE66T4cm8ptv1VT3krkHGxsAGLyNotCX/18FxM9fCr5f24kY2qA KUWYIap6WVW19rDKl8Js7Laeqwqc1zq/caP8h2A4QetH9xoICKEw7hmUuxQfWdRC W01ilmit1ZEig6wSBRz/WuIt7hESZYdotAEt/aEY0SMmvvOrpKfyh3ENzN46D7Q0 aYPc8U1kFVt7UcP5ytHfqb6EbRunk3vW+9O0bE3FHgcu0Fvxe4nhvZbi1uT3TCA3 im9oNSPtefCMjvnr7f4sEn/cpj1NqoPj2/cJuvq/therGKthbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPrBZ9sL2Ln2F7COdHzJSAOwOr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY5OWYyNTYtYzRlOS0z OGJiLWE4ZmQtMzVlMmFiZjQxYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+SwxQZq/zdAaJtKZZ05H06M4R6E/Ty0gRrKK9FY44NtRATLTBnNKxH 3xQSCMGi0dumjkzZG5/POL1HvvbNCTGGf6BFiXrX+m9gWcdy66D8gw7galZZKMNG 2faaq3zPgZIg5wVGcBq1AbjLUt4gkdoaHBBux/LR5IXWdFh+7mssDCJQ1ljcd34d iGMm23EZsMSMju1yQSDS8EH7dddXY35aijPUovZlyJj12/u/z8PPoQmPt39/DKJd y4bAYYli6BJfuFHXTw4MlRCHwdrsY5hnqo//49T3F6Vw41w1bPOpAofvB0pPxDpt 9y3sam1c4uJe5cBKPPNYlGCRE2PXnow= -----END CERTIFICATE-----Generated at Wed Oct 22 03:11:08 2025 by rpki-client