$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c565b0-1afc-349c-9f65-62de003556a1.roa File: 36c565b0-1afc-349c-9f65-62de003556a1.roa (raw, json) Hash identifier: ocpEQPVusVfRXDNia72GAhLjjOVN2R1PgXuXsb0dkS4= Subject key identifier: 97:62:65:C2:78:23:03:79:29:52:F7:3B:08:A2:4F:A6:2E:75:11:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA18F6FD3EC024E366C600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c565b0-1afc-349c-9f65-62de003556a1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.68.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:18:f6:fd:3e:c0:24:e3:66:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1a52744b-c313-47bb-ac5a-0bebd92de367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:2b:07:45:74:86:7f:67:91:e5:b9:82:0b: fb:b4:c6:ed:96:fa:ed:02:ed:6b:aa:d7:2e:5d:9f: 33:06:cb:d1:36:d7:6a:92:17:c3:65:49:77:99:37: 5e:f6:e1:5e:f5:1b:bf:7e:12:43:a4:54:c0:6a:18: 30:a2:a9:b1:5a:e9:17:1b:6d:3a:2b:ee:2c:c0:16: 8d:eb:6c:e6:01:71:df:08:3d:4f:64:a5:1e:8e:fc: 99:d9:78:57:3f:63:0d:87:b0:77:19:77:2a:62:23: dc:92:30:21:9d:e2:17:71:67:78:34:8a:e4:de:32: 7e:78:e7:0e:d5:6f:38:90:ce:8d:31:3d:5e:bd:7b: 5d:81:cd:cc:ae:f2:43:aa:87:e9:f2:fa:7b:ad:ec: 5f:5e:4b:6a:b5:93:c2:a5:6c:aa:3f:6d:6f:78:40: e6:06:5e:55:8e:45:99:7f:45:01:61:5e:28:f9:e9: af:57:cc:96:c0:1c:58:ec:7f:59:4a:65:30:b3:09: cf:46:50:c5:7f:04:51:70:c0:00:f8:25:12:01:fb: d1:66:a7:72:98:28:b4:a5:2d:36:47:65:77:bb:ec: 29:4c:f6:83:b3:fc:73:db:e5:e3:b1:52:bc:5e:53: 41:67:91:05:fc:2d:ea:39:3c:c1:ba:48:ca:52:99: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:65:C2:78:23:03:79:29:52:F7:3B:08:A2:4F:A6:2E:75:11:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c565b0-1afc-349c-9f65-62de003556a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.68.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:60:48:c0:61:27:b6:f6:a0:77:89:92:b7:4e:55:5b:d4:6b: 21:1a:01:cf:cf:14:63:36:77:f2:cc:96:0e:bf:2c:47:e3:e1: 97:e3:51:b7:a2:7b:fc:b2:9f:97:a4:d3:c9:03:38:01:c4:fd: bf:cc:07:78:a6:76:b3:9c:1e:e1:60:f6:b9:f3:17:b6:6f:1e: d2:9c:33:1a:ad:71:ef:38:2e:f6:91:29:c6:ed:36:7d:9b:87: 82:48:f9:3e:03:c4:50:99:a1:55:b6:0c:9a:1e:66:97:15:cc: a7:bb:8d:54:2f:e9:ed:f2:40:ac:bd:ed:9c:ef:17:cb:93:b2: ef:b4:0d:6b:5d:52:97:7c:23:14:68:b5:c4:3d:3f:4b:9f:4e: ff:5c:95:ff:2b:90:5d:f8:8c:f0:bf:1d:39:7d:79:fb:83:63: ab:f4:54:d4:56:7a:4b:88:cd:07:77:90:65:7e:71:75:6f:52: f7:eb:4f:16:38:cb:89:9c:3b:60:e3:b5:91:a9:46:20:76:7d: f7:ef:57:bb:4d:c0:e4:b6:39:7e:47:05:96:83:4c:43:d2:8c: 2e:00:6d:dd:42:a3:00:13:1a:cc:5f:35:e3:66:c5:9b:8e:b1: f4:06:eb:ef:8b:d6:09:a4:b2:61:1d:d7:1c:1a:be:a6:f1:ea: c9:18:05:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqhj2/T7AJONmxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWE1Mjc0NGItYzMxMy00N2JiLWFjNWEtMGJlYmQ5MmRlMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhQrB0V0hn9nkeW5ggv7tMbtlvrtAu1rqtcu XZ8zBsvRNtdqkhfDZUl3mTde9uFe9Ru/fhJDpFTAahgwoqmxWukXG206K+4swBaN 62zmAXHfCD1PZKUejvyZ2XhXP2MNh7B3GXcqYiPckjAhneIXcWd4NIrk3jJ+eOcO 1W84kM6NMT1evXtdgc3MrvJDqofp8vp7rexfXktqtZPCpWyqP21veEDmBl5VjkWZ f0UBYV4o+emvV8yWwBxY7H9ZSmUwswnPRlDFfwRRcMAA+CUSAfvRZqdymCi0pS02 R2V3u+wpTPaDs/xz2+XjsVK8XlNBZ5EF/C3qOTzBukjKUplJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdiZcJ4IwN5KVL3OwiiT6YudRFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzZjNTY1YjAtMWFmYy0z NDljLTlmNjUtNjJkZTAwMzU1NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdgSMBhJ7b2oHeJkrdOVVvUayEaAc/PFGM2d/LMlg6/LEfj4ZfjUbei e/yyn5ek08kDOAHE/b/MB3imdrOcHuFg9rnzF7ZvHtKcMxqtce84LvaRKcbtNn2b h4JI+T4DxFCZoVW2DJoeZpcVzKe7jVQv6e3yQKy97ZzvF8uTsu+0DWtdUpd8IxRo tcQ9P0ufTv9clf8rkF34jPC/HTl9efuDY6v0VNRWekuIzQd3kGV+cXVvUvfrTxY4 y4mcO2DjtZGpRiB2fffvV7tNwOS2OX5HBZaDTEPSjC4Abd1CowATGsxfNeNmxZuO sfQG6++L1gmksmEd1xwavqbx6skYBZc= -----END CERTIFICATE-----Generated at Wed Oct 22 02:58:51 2025 by rpki-client