$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ac83-6f40-36c5-aecd-1b32b946f790.roa File: 23b8ac83-6f40-36c5-aecd-1b32b946f790.roa (raw, json) Hash identifier: 1VGX8aWDgWu8TtgtePgHMEcPlS+ie6+pmrA1UZE2GxY= Subject key identifier: 63:5C:E7:52:BA:D6:31:AF:93:E0:01:9E:FF:31:7B:3F:9A:3E:49:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8E17274D6FD9AB9DFB0F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ac83-6f40-36c5-aecd-1b32b946f790.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 73.161.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:e1:72:74:d6:fd:9a:b9:df:b0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=86ef9f9f-5c46-41fe-98a7-99d16cc5183b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:8e:53:16:b2:e3:72:61:72:82:97:52:c5: a2:ed:00:af:d7:97:93:0e:80:89:5e:53:83:7a:58: 1b:43:5b:ea:47:38:f3:f5:5b:93:1c:de:a7:1f:d9: 87:3a:a5:2e:c0:1c:dc:61:06:99:fc:93:75:b4:43: bd:88:3d:23:98:c4:a9:c9:4f:42:b0:ac:a6:57:2c: e6:99:19:37:6d:50:2e:e2:97:d0:f7:53:62:3e:4e: 37:00:0b:cd:11:4a:94:d7:29:10:67:7d:11:34:51: 89:e2:90:f9:1c:24:0b:7c:9c:13:e2:56:07:67:20: d8:0d:ff:4f:d1:54:84:e3:46:1d:d7:a5:03:4a:19: 9b:05:e7:2f:6e:ac:05:71:c6:cc:57:e9:1f:13:a1: 03:d2:0d:da:f9:14:da:3a:8a:14:0c:30:00:df:af: 9f:a7:d8:17:44:89:fe:df:02:98:05:87:33:06:72: 92:50:a3:58:d2:b7:fd:a3:4a:3e:0f:05:d3:7d:7c: 46:1b:94:31:2b:41:d7:7a:0a:94:56:c2:47:8e:27: 8e:75:c4:64:a7:0d:ef:96:da:e9:eb:53:74:8f:94: b6:98:25:c4:6e:61:2b:a9:bb:da:44:58:19:3c:10: 72:b9:91:5e:fd:fe:10:80:69:90:5c:55:6f:95:b0: 8b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5C:E7:52:BA:D6:31:AF:93:E0:01:9E:FF:31:7B:3F:9A:3E:49:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ac83-6f40-36c5-aecd-1b32b946f790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:04:f6:e1:a0:72:22:06:d9:ce:b9:69:73:0b:85:fa:6b:24: 87:df:7c:cf:ff:d7:38:ed:4c:e2:f0:0b:0f:ef:47:0e:91:fc: 10:cc:e1:24:55:a2:bc:7f:dd:b2:9e:89:03:bb:99:e0:59:e6: b7:67:bf:c0:a7:6c:fe:02:9b:66:0b:4a:c9:6e:78:da:f2:98: 17:b5:07:56:7c:34:6d:f9:81:91:10:11:fe:ad:04:e5:81:cf: 82:0e:4a:3e:f3:61:92:95:6e:5d:e8:0c:d4:1b:4f:b2:05:59: f8:27:83:e2:2c:65:c8:26:1b:92:a7:ea:61:02:ca:44:47:0f: e0:18:3b:41:79:47:69:44:ae:c0:53:c4:9d:1a:9f:0c:64:2c: 8c:49:79:50:f0:68:7c:90:80:44:b2:e5:4e:7f:69:74:ea:88: a9:f0:c9:44:78:7d:06:6a:83:15:75:c6:2e:2a:d1:49:28:d8: 0c:d7:e3:a9:7d:f5:a7:56:b3:10:05:9f:85:60:c8:77:16:e1: 7e:6b:23:ed:b0:71:77:7e:fa:a2:1d:52:4c:dc:45:43:8f:39: 37:a8:d7:fd:09:54:62:98:05:3e:4b:b0:d8:3a:04:23:07:4e: dd:c6:a5:b8:6e:67:a7:16:8d:3f:5c:c8:82:8e:a6:f5:04:e4: f5:68:a3:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqOFydNb9mrnfsPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODZlZjlmOWYtNWM0Ni00MWZlLTk4YTctOTlkMTZjYzUxODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo76OUxay43JhcoKXUsWi7QCv15eTDoCJXlOD elgbQ1vqRzjz9VuTHN6nH9mHOqUuwBzcYQaZ/JN1tEO9iD0jmMSpyU9CsKymVyzm mRk3bVAu4pfQ91NiPk43AAvNEUqU1ykQZ30RNFGJ4pD5HCQLfJwT4lYHZyDYDf9P 0VSE40Yd16UDShmbBecvbqwFccbMV+kfE6ED0g3a+RTaOooUDDAA36+fp9gXRIn+ 3wKYBYczBnKSUKNY0rf9o0o+DwXTfXxGG5QxK0HXegqUVsJHjieOdcRkpw3vltrp 61N0j5S2mCXEbmErqbvaRFgZPBByuZFe/f4QgGmQXFVvlbCL7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNc51K61jGvk+ABnv8xez+aPkkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNiOGFjODMtNmY0MC0z NmM1LWFlY2QtMWIzMmI5NDZmNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASaGjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANYE9uGgciIG2c65aXMLhfprJIfffM//1zjtTOLwCw/vRw6R/BDM4SRV orx/3bKeiQO7meBZ5rdnv8CnbP4Cm2YLSslueNrymBe1B1Z8NG35gZEQEf6tBOWB z4IOSj7zYZKVbl3oDNQbT7IFWfgng+IsZcgmG5Kn6mECykRHD+AYO0F5R2lErsBT xJ0anwxkLIxJeVDwaHyQgESy5U5/aXTqiKnwyUR4fQZqgxV1xi4q0Uko2AzX46l9 9adWsxAFn4VgyHcW4X5rI+2wcXd++qIdUkzcRUOPOTeo1/0JVGKYBT5LsNg6BCMH Tt3GpbhuZ6cWjT9cyIKOpvUE5PVoo6Y= -----END CERTIFICATE-----Generated at Wed Oct 22 03:11:06 2025 by rpki-client