$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321f5ae2-a167-3517-8dcb-b2acebedace1.roa File: 321f5ae2-a167-3517-8dcb-b2acebedace1.roa (raw, json) Hash identifier: lxZp7OYsvHhZ9OxjQnOOhQcj+h7lBrql3JqOgOZVijE= Subject key identifier: 5E:96:6C:73:69:90:F3:AC:9E:D5:8D:C4:EF:30:A4:39:DF:80:2D:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A83BEA6E790B42EC947D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321f5ae2-a167-3517-8dcb-b2acebedace1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.167.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:3b:ea:6e:79:0b:42:ec:94:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=81c36233-280a-41ea-9e88-79138ee0849a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:c9:c2:00:b5:03:d5:f9:cd:2c:33:0a:71: 47:9e:54:c0:41:91:a3:63:65:67:56:88:ba:ff:f4: df:1f:49:99:3f:48:a7:e6:4a:a2:a9:e1:32:4d:45: 78:a5:18:26:4a:a8:fa:0b:8f:6e:d6:9e:33:62:cc: cc:56:9e:c7:36:05:38:7a:fb:43:2e:eb:a4:2d:8f: e7:a1:0b:0b:35:e4:af:2f:cd:4d:1f:52:29:37:10: 65:0c:97:42:88:9a:90:4a:03:13:8f:c5:d6:68:c6: c6:54:ee:d3:4b:23:ff:b7:08:2d:3b:48:58:66:3f: b0:73:61:df:3a:d4:b9:14:e7:75:5c:a0:4e:6a:3c: e1:5f:70:2b:94:77:91:d8:ef:0c:03:8e:26:80:d9: 12:ee:3c:72:33:59:21:9c:29:42:5d:10:26:c5:a1: 71:5b:11:a6:6a:40:7e:59:20:7e:e6:06:73:95:61: f2:cb:fe:42:1c:8e:4d:cc:29:ea:d7:c9:cd:66:43: 5a:5c:a0:19:a3:f4:cd:37:10:68:73:14:f3:50:75: 06:65:d8:1c:63:1f:38:23:c9:7c:4d:97:5e:a2:20: 55:b3:2e:40:66:d6:ae:ec:19:b3:d3:6a:eb:24:0a: 0c:bf:08:d5:95:0a:6e:0b:96:d0:bb:c8:21:54:99: cc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:96:6C:73:69:90:F3:AC:9E:D5:8D:C4:EF:30:A4:39:DF:80:2D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321f5ae2-a167-3517-8dcb-b2acebedace1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.167.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e5:11:4d:a9:be:6e:e6:af:d8:15:61:2e:74:19:84:c3:e3: 61:73:3c:a1:a3:a3:65:72:10:73:dd:77:c8:08:5e:d6:bf:7f: 1a:97:eb:9f:ae:ad:ca:11:d6:02:7c:9e:9a:ed:97:b1:99:8f: f2:b8:26:38:53:d0:1b:51:75:76:a7:bf:74:61:38:50:2c:3b: 0d:5f:e4:89:7e:c7:e4:66:e4:22:26:9a:a7:bb:33:1d:f8:b7: 9a:67:7d:d0:40:cd:87:4f:b7:46:67:32:81:28:66:fc:eb:3e: a1:1d:cc:48:c8:f3:38:3a:ec:cb:68:8a:46:d8:97:5f:19:4d: 19:23:9a:4b:d1:ba:2d:32:db:0a:a8:51:bc:d0:18:ac:da:ee: 1b:8e:82:1b:c3:6a:ca:3e:01:dd:5e:c0:47:19:bb:dc:26:77: bd:c1:89:5b:d9:30:dd:4f:42:59:a2:2c:47:d1:89:0f:12:f5: 2b:40:d1:ea:23:54:02:e9:12:21:9b:82:da:5e:b6:ae:25:79: 0a:4d:8b:fc:bf:cd:e0:a3:89:75:11:f3:f8:58:f2:84:de:3c: a5:fd:d5:3f:c0:2a:a7:6e:58:39:e9:ba:b0:9e:c3:ea:f4:72: d9:b8:5e:82:b8:d7:87:e5:bb:dc:29:ff:0e:67:3b:73:95:0a: 13:27:1d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqDvqbnkLQuyUfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODFjMzYyMzMtMjgwYS00MWVhLTllODgtNzkxMzhlZTA4NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2DJwgC1A9X5zSwzCnFHnlTAQZGjY2VnVoi6 //TfH0mZP0in5kqiqeEyTUV4pRgmSqj6C49u1p4zYszMVp7HNgU4evtDLuukLY/n oQsLNeSvL81NH1IpNxBlDJdCiJqQSgMTj8XWaMbGVO7TSyP/twgtO0hYZj+wc2Hf OtS5FOd1XKBOajzhX3ArlHeR2O8MA44mgNkS7jxyM1khnClCXRAmxaFxWxGmakB+ WSB+5gZzlWHyy/5CHI5NzCnq18nNZkNaXKAZo/TNNxBocxTzUHUGZdgcYx84I8l8 TZdeoiBVsy5AZtau7Bmz02rrJAoMvwjVlQpuC5bQu8ghVJnMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6WbHNpkPOsntWNxO8wpDnfgC1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzIxZjVhZTItYTE2Ny0z NTE3LThkY2ItYjJhY2ViZWRhY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSafIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7lEU2pvm7mr9gVYS50GYTD42FzPKGjo2VyEHPdd8gIXta/fxqX65+u rcoR1gJ8nprtl7GZj/K4JjhT0BtRdXanv3RhOFAsOw1f5Il+x+Rm5CImmqe7Mx34 t5pnfdBAzYdPt0ZnMoEoZvzrPqEdzEjI8zg67MtoikbYl18ZTRkjmkvRui0y2wqo UbzQGKza7huOghvDaso+Ad1ewEcZu9wmd73BiVvZMN1PQlmiLEfRiQ8S9StA0eoj VALpEiGbgtpetq4leQpNi/y/zeCjiXUR8/hY8oTePKX91T/AKqduWDnpurCew+r0 ctm4XoK414flu9wp/w5nO3OVChMnHaQ= -----END CERTIFICATE-----Generated at Tue Oct 21 19:40:45 2025 by rpki-client