$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3321b6fc-879d-3f4c-8001-1b56c274be18.roa File: 3321b6fc-879d-3f4c-8001-1b56c274be18.roa (raw, json) Hash identifier: w8X/7z4sJ8RjnpnYfCFZwRaM6tEOl/YdSX6opCvsqSw= Subject key identifier: 7F:DD:AC:E9:8A:6B:DB:1A:65:BC:4D:0D:3E:39:F3:4F:24:68:3E:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9F9EBCAC5438DBCA73E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3321b6fc-879d-3f4c-8001-1b56c274be18.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.234.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:f9:eb:ca:c5:43:8d:bc:a7:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=20cb33de-40a4-4976-9cb9-e1bd2f560a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:69:d2:35:98:0f:35:57:40:5d:7f:6c:05: e3:3e:9b:1d:05:33:6a:ea:87:df:0e:61:63:ea:28: 89:63:5e:79:21:c5:55:82:99:1e:a1:89:24:d7:3f: af:b2:65:b1:1a:31:92:69:d0:ab:d1:68:a8:b4:10: 25:ad:03:a0:df:45:bc:c2:c3:23:89:a7:83:bc:f1: bf:83:1a:9a:a0:6a:e9:c7:25:ab:cd:f8:f6:73:fa: 47:a9:1f:31:0a:d8:97:7a:a4:19:e6:98:ed:c7:98: 7b:7b:8c:64:d8:6d:09:c6:14:67:1e:67:5d:85:97: 22:08:07:f3:97:e7:79:e7:1f:61:43:5e:6f:8d:60: d6:88:30:02:06:1c:1a:93:99:e9:9b:50:29:d7:bf: 1b:35:4e:3c:72:d4:99:f3:7c:12:52:b1:17:a2:dd: 4d:0f:f6:fa:3f:e0:5d:11:41:6d:88:d0:f4:74:3b: 84:df:16:26:d1:c4:6f:fb:3b:8f:a2:61:f6:32:ef: 07:53:c7:d0:9b:55:4c:a4:bb:0f:fc:70:0d:15:be: 38:6f:f9:c5:1e:61:e6:09:d9:08:a7:c2:d1:a2:3c: 26:61:48:5c:19:73:d5:f5:69:32:41:9f:fc:aa:1f: fb:51:77:cf:2a:2b:6d:a6:d3:64:5a:99:2a:cf:85: 1c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DD:AC:E9:8A:6B:DB:1A:65:BC:4D:0D:3E:39:F3:4F:24:68:3E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3321b6fc-879d-3f4c-8001-1b56c274be18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.234.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:b0:87:c0:8c:70:6c:0c:40:24:a4:35:ec:b5:6c:b1:7a:ab: b7:c4:d8:e4:e2:38:4c:66:78:e0:75:b3:7a:f7:d4:ba:dd:5e: e5:f2:ae:c0:f6:6d:82:be:f1:a9:c5:ce:eb:eb:ed:d2:4d:7d: 37:a4:4f:07:52:81:e7:f9:8b:cb:60:1f:13:1a:ef:7b:6f:ef: 18:00:a7:b4:12:ba:74:f3:af:9e:72:10:94:14:2c:b8:66:11: ab:41:16:56:e0:ff:5e:72:67:1a:50:78:f1:3b:2d:96:09:02: 8a:e7:41:7e:ee:a0:4f:c4:e2:80:5a:a3:58:18:19:d9:6a:65: ac:da:14:54:86:98:69:cf:7b:7a:68:d8:20:62:3c:97:42:58: ea:2e:82:9f:37:8a:76:e5:1f:c2:a9:bc:a2:77:7a:e7:3f:73: 48:8b:72:e9:22:05:fd:c4:14:13:f5:33:2c:be:ff:56:c3:d5: 08:8e:c2:54:a3:05:a9:4b:75:2c:5f:42:55:59:db:9d:c1:64: b7:ae:37:c0:b8:0d:c4:71:9b:91:5f:c1:66:87:11:29:13:13: 24:ac:12:2b:d8:1d:82:ed:fc:0a:0b:3b:4f:c6:ae:f6:d9:46: f2:be:28:12:e2:18:2b:46:c4:6c:79:9b:53:f7:22:ad:eb:6f: c7:b2:34:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqfnrysVDjbynPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjBjYjMzZGUtNDBhNC00OTc2LTljYjktZTFiZDJmNTYwYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo9p0jWYDzVXQF1/bAXjPpsdBTNq6offDmFj 6iiJY155IcVVgpkeoYkk1z+vsmWxGjGSadCr0WiotBAlrQOg30W8wsMjiaeDvPG/ gxqaoGrpxyWrzfj2c/pHqR8xCtiXeqQZ5pjtx5h7e4xk2G0JxhRnHmddhZciCAfz l+d55x9hQ15vjWDWiDACBhwak5npm1Ap178bNU48ctSZ83wSUrEXot1ND/b6P+Bd EUFtiND0dDuE3xYm0cRv+zuPomH2Mu8HU8fQm1VMpLsP/HANFb44b/nFHmHmCdkI p8LRojwmYUhcGXPV9WkyQZ/8qh/7UXfPKittptNkWpkqz4UcyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/drOmKa9saZbxNDT45808kaD76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMyMWI2ZmMtODc5ZC0z ZjRjLTgwMDEtMWI1NmMyNzRiZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASeqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSwh8CMcGwMQCSkNey1bLF6q7fE2OTiOExmeOB1s3r31LrdXuXyrsD2 bYK+8anFzuvr7dJNfTekTwdSgef5i8tgHxMa73tv7xgAp7QSunTzr55yEJQULLhm EatBFlbg/15yZxpQePE7LZYJAornQX7uoE/E4oBao1gYGdlqZazaFFSGmGnPe3po 2CBiPJdCWOougp83inblH8KpvKJ3euc/c0iLcukiBf3EFBP1Myy+/1bD1QiOwlSj BalLdSxfQlVZ253BZLeuN8C4DcRxm5FfwWaHESkTEySsEivYHYLt/AoLO0/GrvbZ RvK+KBLiGCtGxGx5m1P3Iq3rb8eyNC4= -----END CERTIFICATE-----Generated at Wed Oct 22 02:36:10 2025 by rpki-client