$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3653bb33-b5f1-3309-aea4-775e377c4ac7.roa File: 3653bb33-b5f1-3309-aea4-775e377c4ac7.roa (raw, json) Hash identifier: Yl9WAtdn1Z77nshgzOb0W8WiYy1PKe2NFLtkIz+Emhc= Subject key identifier: 92:BB:6B:C6:5C:7A:D0:1F:B2:F7:96:7A:47:20:54:C2:C5:A6:FB:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7C7761CDC7DD80CBD2DE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3653bb33-b5f1-3309-aea4-775e377c4ac7.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.240.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:c7:76:1c:dc:7d:d8:0c:bd:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=735ebb36-8931-4274-bfbe-39e021bf4a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:91:22:db:eb:2c:97:4e:64:ec:f2:0e:71: 6e:39:79:2b:bf:84:20:de:ca:bb:62:00:62:af:f8: 40:c7:bc:1e:a2:33:ad:f9:51:4c:e3:9e:66:9e:84: cf:62:a3:da:f8:d1:a4:3b:f0:ab:0b:6a:b8:f5:45: ca:52:b3:b5:c9:c4:e9:89:98:42:7e:40:42:dc:60: 0d:27:37:1f:84:70:9c:24:fb:3d:27:9b:6d:a4:a1: b7:ab:71:4b:bc:8e:2e:c8:6c:67:39:d2:2c:3f:74: f7:6e:e9:98:89:56:5a:dc:8d:65:d6:ce:d7:cb:03: 56:cf:19:5b:a7:21:bb:74:a7:72:cb:64:89:d3:a7: 6c:7b:70:ce:92:5f:b1:44:71:13:f9:a8:a3:94:e1: 7b:a7:e8:85:fa:be:e6:81:fa:72:f5:2f:00:85:1b: e1:06:2e:aa:d1:79:16:86:ff:53:08:c2:9a:96:31: 77:b1:5f:94:57:d6:e0:b5:73:8c:d1:6c:6d:e7:8d: 44:32:3a:03:b8:bf:60:1b:e4:fc:72:82:c8:a4:7a: 47:65:9c:61:1b:a9:6d:29:76:81:21:fa:f8:8a:93: cc:15:06:72:09:c9:d9:ae:60:ba:6e:f8:04:c6:a7: 17:55:93:43:7b:f6:fc:08:ba:96:85:52:ce:e6:bf: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BB:6B:C6:5C:7A:D0:1F:B2:F7:96:7A:47:20:54:C2:C5:A6:FB:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3653bb33-b5f1-3309-aea4-775e377c4ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c1:d9:16:44:e1:44:20:93:a1:9b:51:6d:05:d1:e2:ec:cd: 48:91:06:71:f6:e1:82:b8:83:4e:d6:fd:07:e0:b2:62:4a:4c: 5a:b3:d7:30:0b:cf:d2:1c:40:b9:a5:50:e9:03:08:30:3f:6e: 52:12:d9:e6:34:f3:ff:1f:8e:54:e2:6f:eb:8a:7f:ea:fe:10: 2b:8c:19:ce:a2:6d:96:2b:ae:85:26:97:53:05:43:75:64:c0: 71:d3:0e:bd:cc:69:d0:c9:b0:4c:91:92:91:c9:35:51:ef:05: 14:73:83:c2:83:d5:31:e0:be:a7:63:c9:6c:0c:1e:7e:4e:b0: 63:c3:8d:76:7e:ab:67:5b:e1:f1:10:60:23:8e:61:68:73:0f: c9:f2:94:0d:fc:d3:fc:55:37:e9:9f:d0:e8:87:6f:46:07:12: 88:41:17:3e:40:bb:00:aa:e9:e5:b9:7f:ed:16:7a:4c:14:a0: 93:3d:12:0c:45:9f:34:7b:00:c0:06:b0:83:ba:b6:b7:7c:46: 6e:84:f3:0a:19:05:f1:75:67:e6:3b:0c:16:38:b7:e3:db:5d: 2f:71:83:6b:5e:03:07:1a:f7:29:39:9b:d0:6e:1f:1c:56:d2: cd:00:08:ab:87:62:bd:84:c0:8c:9c:d1:9e:fe:55:9b:68:5d: e2:a5:0e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp8d2HNx92Ay9LeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzM1ZWJiMzYtODkzMS00Mjc0LWJmYmUtMzllMDIxYmY0YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ORItvrLJdOZOzyDnFuOXkrv4Qg3sq7YgBi r/hAx7weojOt+VFM455mnoTPYqPa+NGkO/CrC2q49UXKUrO1ycTpiZhCfkBC3GAN JzcfhHCcJPs9J5ttpKG3q3FLvI4uyGxnOdIsP3T3bumYiVZa3I1l1s7XywNWzxlb pyG7dKdyy2SJ06dse3DOkl+xRHET+aijlOF7p+iF+r7mgfpy9S8AhRvhBi6q0XkW hv9TCMKaljF3sV+UV9bgtXOM0Wxt541EMjoDuL9gG+T8coLIpHpHZZxhG6ltKXaB Ifr4ipPMFQZyCcnZrmC6bvgExqcXVZNDe/b8CLqWhVLO5r8PuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK7a8ZcetAfsveWekcgVMLFpvs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY1M2JiMzMtYjVmMS0z MzA5LWFlYTQtNzc1ZTM3N2M0YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzB2RZE4UQgk6GbUW0F0eLszUiRBnH24YK4g07W/QfgsmJKTFqz1zAL z9IcQLmlUOkDCDA/blIS2eY08/8fjlTib+uKf+r+ECuMGc6ibZYrroUml1MFQ3Vk wHHTDr3MadDJsEyRkpHJNVHvBRRzg8KD1THgvqdjyWwMHn5OsGPDjXZ+q2db4fEQ YCOOYWhzD8nylA380/xVN+mf0OiHb0YHEohBFz5AuwCq6eW5f+0WekwUoJM9EgxF nzR7AMAGsIO6trd8Rm6E8woZBfF1Z+Y7DBY4t+PbXS9xg2teAwca9yk5m9BuHxxW 0s0ACKuHYr2EwIyc0Z7+VZtoXeKlDkE= -----END CERTIFICATE-----Generated at Tue Oct 21 21:58:01 2025 by rpki-client