$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fcff3ee-3d92-3494-bd5d-19e58028b3b3.roa File: 2fcff3ee-3d92-3494-bd5d-19e58028b3b3.roa (raw, json) Hash identifier: 1NKeo+9Mmbgv70nQX3vaBQCLvPupWt5Sl/zsiiFWIHs= Subject key identifier: BB:30:FB:A8:2C:BF:10:4B:58:AC:F7:8B:F9:75:EB:87:9B:29:93:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7CCB7A58A4BE1829F7B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fcff3ee-3d92-3494-bd5d-19e58028b3b3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.25.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:cc:b7:a5:8a:4b:e1:82:9f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1ed5b7ad-58a4-4a07-bb0f-fb35298796d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:b8:00:9f:6c:b3:37:1e:f6:08:eb:a0:50: 6e:d5:7f:d8:e3:cf:b7:04:0c:a0:32:9f:66:a2:74: 14:1c:07:bf:b6:d1:d2:cd:8b:3a:0c:e3:14:b3:5c: 68:d8:d1:4b:30:2e:31:b2:94:c6:1a:e5:51:79:77: da:34:f0:5c:d5:c1:55:3a:ad:89:e3:4f:81:08:d6: af:5a:66:3b:11:3c:19:ec:7f:c9:6e:78:16:45:b5: 8b:96:8e:a0:3f:e4:c3:fd:e0:9d:04:e8:be:b3:de: f3:53:80:9d:d8:3c:5a:0c:28:fa:77:7f:37:ef:55: ad:95:69:da:65:02:42:e9:b6:b3:37:f4:c1:9d:2e: ee:41:a4:c8:c1:ea:55:57:cd:2f:4f:ea:6d:81:da: 3e:a3:3f:61:60:c0:a7:4a:ea:08:ab:c1:17:d1:55: 95:86:6b:e2:a7:a0:ac:cd:b6:7a:23:4f:f7:87:e6: 8b:28:da:92:69:9a:4a:ff:64:24:e2:7e:e0:7a:af: 22:43:c0:38:c4:f4:4a:a5:ed:fa:c6:4a:fa:8f:b1: 81:25:f4:03:a4:f4:64:3d:41:3c:c8:64:d3:6b:f9: fa:e5:2b:72:a3:ae:56:da:a6:21:04:cc:29:1a:c9: 5f:00:ad:e0:f5:35:1d:90:bd:81:31:2a:41:c1:ca: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:30:FB:A8:2C:BF:10:4B:58:AC:F7:8B:F9:75:EB:87:9B:29:93:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fcff3ee-3d92-3494-bd5d-19e58028b3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.25.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:a4:0c:ad:c6:94:22:dd:41:2e:20:68:6e:87:f1:76:b5:ef: 0a:16:71:f7:22:8a:62:44:2f:88:86:15:f3:6f:c6:a6:e8:a4: bd:b1:f6:7a:68:7b:16:9b:f1:86:6e:bb:8e:9b:a5:af:72:40: 0b:da:c2:b5:20:5b:c0:eb:bf:47:e5:0c:a2:a6:53:86:02:4d: 97:3a:58:38:b5:c9:c1:e9:4d:07:48:77:9c:c1:96:c1:52:25: 65:a6:2d:e0:a5:76:62:86:b9:d1:f9:71:cf:b1:bb:b1:d1:2c: 60:0d:93:19:d9:69:0c:d6:05:83:64:3a:6c:d8:1b:31:c6:9d: 0f:d6:ea:7d:37:fe:95:8b:4d:6c:35:07:91:68:c3:37:78:d8: b5:10:b3:97:b8:15:c2:0c:f9:8a:33:d0:cf:44:99:47:fc:ef: 64:6a:c2:e4:20:d5:93:2b:a4:2f:35:6e:e1:02:1e:f9:39:e2: a9:57:75:3c:f2:38:cd:62:fc:8c:de:4e:fe:f7:9c:c7:59:1a: 9a:dc:ef:ae:40:42:b9:67:5a:41:fe:71:6a:91:0b:52:1b:56: 29:0d:18:3b:5b:5e:d0:16:ce:07:9f:3d:9c:73:02:6f:52:0b: bd:bd:b8:3e:a2:60:83:a5:da:ba:a5:47:41:00:9d:1f:2a:09: 7c:b3:60:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp8y3pYpL4YKfewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWVkNWI3YWQtNThhNC00YTA3LWJiMGYtZmIzNTI5ODc5NmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij+4AJ9sszce9gjroFBu1X/Y48+3BAygMp9m onQUHAe/ttHSzYs6DOMUs1xo2NFLMC4xspTGGuVReXfaNPBc1cFVOq2J40+BCNav WmY7ETwZ7H/JbngWRbWLlo6gP+TD/eCdBOi+s97zU4Cd2DxaDCj6d38371WtlWna ZQJC6bazN/TBnS7uQaTIwepVV80vT+ptgdo+oz9hYMCnSuoIq8EX0VWVhmvip6Cs zbZ6I0/3h+aLKNqSaZpK/2Qk4n7geq8iQ8A4xPRKpe36xkr6j7GBJfQDpPRkPUE8 yGTTa/n65Styo65W2qYhBMwpGslfAK3g9TUdkL2BMSpBwcofowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsw+6gsvxBLWKz3i/l164ebKZPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZjZmYzZWUtM2Q5Mi0z NDk0LWJkNWQtMTllNTgwMjhiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCkDK3GlCLdQS4gaG6H8Xa17woWcfciimJEL4iGFfNvxqbopL2x9npo exab8YZuu46bpa9yQAvawrUgW8Drv0flDKKmU4YCTZc6WDi1ycHpTQdId5zBlsFS JWWmLeCldmKGudH5cc+xu7HRLGANkxnZaQzWBYNkOmzYGzHGnQ/W6n03/pWLTWw1 B5Fowzd42LUQs5e4FcIM+Yoz0M9EmUf872RqwuQg1ZMrpC81buECHvk54qlXdTzy OM1i/IzeTv73nMdZGprc765AQrlnWkH+cWqRC1IbVikNGDtbXtAWzgefPZxzAm9S C729uD6iYIOl2rqlR0EAnR8qCXyzYDY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:35:47 2025 by rpki-client