$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e013ce-57bf-3dd6-b8b9-546fb423715d.roa File: 35e013ce-57bf-3dd6-b8b9-546fb423715d.roa (raw, json) Hash identifier: gAgGlN7CQ22YnyPIlrltiw+Mbq4TIyLMV/hu+hcQLPc= Subject key identifier: B1:FB:31:FC:0F:1D:DD:E3:29:9A:BB:60:24:F4:2D:A9:94:63:E2:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A85AC700F9FF53BAF4D860 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e013ce-57bf-3dd6-b8b9-546fb423715d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.238.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:5a:c7:00:f9:ff:53:ba:f4:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a6a82d92-dc77-43e6-b988-160d5c823eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:aa:8b:09:3d:c1:3b:7b:3c:61:02:b8:b7: 53:e1:1a:ef:c7:e0:78:cb:c7:97:51:cb:2a:92:ea: 16:58:62:12:2b:41:02:71:b9:1a:19:4a:8c:3d:de: d2:e4:35:a8:ae:dc:d2:4f:2e:d7:59:1e:a9:9f:c0: 52:1b:f9:04:1b:7f:bf:87:2c:4e:c4:94:05:18:23: 2b:37:1f:25:f0:81:d4:bc:0b:d0:74:98:d1:f1:56: e9:50:fd:7e:1a:0f:7c:c6:b7:db:7b:1a:cc:0f:35: 68:b0:77:d2:24:ae:23:d7:6a:09:41:da:a7:b5:3a: 33:ff:a9:3b:04:5e:a9:98:f6:ed:c0:42:4b:d1:18: 4a:a7:26:6f:dd:32:e2:70:96:a2:39:db:51:86:0e: 59:b3:93:7c:f3:80:3a:69:3a:e7:2f:c6:39:a7:c0: e4:ec:50:bc:ba:f2:97:32:d4:bd:8d:b4:df:37:ba: d8:9d:fa:d2:ad:8c:6c:39:4d:d7:16:ff:06:b9:78: 87:8b:5f:ca:de:8a:f5:a1:35:5f:1e:75:10:6c:91: e3:f0:cb:d7:6a:33:b4:d7:8a:b7:41:1f:0d:49:aa: cc:6d:b6:da:dc:27:b4:5e:e7:f0:4e:47:14:ce:35: 63:0b:6f:b3:56:ba:f8:50:1d:a8:69:8d:37:c0:55: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FB:31:FC:0F:1D:DD:E3:29:9A:BB:60:24:F4:2D:A9:94:63:E2:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e013ce-57bf-3dd6-b8b9-546fb423715d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.238.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:72:1c:01:66:6a:98:63:ce:80:ea:e8:8a:7d:98:9b:1b:8e: e8:50:fc:ea:25:3d:cf:63:1f:e3:7e:1e:90:dd:39:8b:ff:db: 1c:51:f6:1a:9b:6d:76:da:1e:b5:27:7d:2f:51:0a:34:d9:d1: 86:1f:c5:83:28:b6:d5:7d:51:e8:98:8e:30:4a:2c:26:5e:e5: e8:78:30:93:d4:06:cd:b7:6f:cf:92:d1:07:85:87:77:ab:5a: 1b:a9:49:64:8c:fa:43:3c:2e:16:c5:e3:3b:7c:99:8d:be:08: 14:7c:45:b3:eb:a0:41:45:29:67:10:32:36:88:94:c5:c1:b8: f2:0b:49:08:f5:63:f3:f6:c4:11:4e:f6:45:e9:71:32:5b:af: 68:c9:24:23:e0:83:a6:a4:a4:19:75:63:79:61:43:22:b3:72: ef:4a:40:8d:96:35:d4:a3:95:8c:eb:0c:92:1d:f4:78:fa:4b: f8:ce:12:b2:8c:8f:44:25:b8:8b:92:75:8a:3d:92:ff:01:4f: 96:52:bc:1f:4c:a5:48:66:7c:4f:71:13:5c:71:fc:b6:46:f6: 34:eb:74:b6:ff:86:6e:7c:77:af:f6:35:e2:3e:4c:26:7b:54: 3b:86:e0:ac:8d:1b:f1:a2:0e:5a:44:34:52:37:f5:f1:9f:fe: 61:79:1b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqFrHAPn/U7r02GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTZhODJkOTItZGM3Ny00M2U2LWI5ODgtMTYwZDVjODIzZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMmqiwk9wTt7PGECuLdT4Rrvx+B4y8eXUcsq kuoWWGISK0ECcbkaGUqMPd7S5DWortzSTy7XWR6pn8BSG/kEG3+/hyxOxJQFGCMr Nx8l8IHUvAvQdJjR8VbpUP1+Gg98xrfbexrMDzVosHfSJK4j12oJQdqntToz/6k7 BF6pmPbtwEJL0RhKpyZv3TLicJaiOdtRhg5Zs5N884A6aTrnL8Y5p8Dk7FC8uvKX MtS9jbTfN7rYnfrSrYxsOU3XFv8GuXiHi1/K3or1oTVfHnUQbJHj8MvXajO014q3 QR8NSarMbbba3Ce0XufwTkcUzjVjC2+zVrr4UB2oaY03wFUsuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLH7MfwPHd3jKZq7YCT0LamUY+K7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVlMDEzY2UtNTdiZi0z ZGQ2LWI4YjktNTQ2ZmI0MjM3MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSe7qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpyHAFmaphjzoDq6Ip9mJsbjuhQ/OolPc9jH+N+HpDdOYv/2xxR9hqb bXbaHrUnfS9RCjTZ0YYfxYMottV9UeiYjjBKLCZe5eh4MJPUBs23b8+S0QeFh3er WhupSWSM+kM8LhbF4zt8mY2+CBR8RbProEFFKWcQMjaIlMXBuPILSQj1Y/P2xBFO 9kXpcTJbr2jJJCPgg6akpBl1Y3lhQyKzcu9KQI2WNdSjlYzrDJId9Hj6S/jOErKM j0QluIuSdYo9kv8BT5ZSvB9MpUhmfE9xE1xx/LZG9jTrdLb/hm58d6/2NeI+TCZ7 VDuG4KyNG/GiDlpENFI39fGf/mF5G5c= -----END CERTIFICATE-----Generated at Tue Oct 21 19:36:26 2025 by rpki-client