$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37b216ee-68d9-39ba-83a3-efa17d28b8c9.roa File: 37b216ee-68d9-39ba-83a3-efa17d28b8c9.roa (raw, json) Hash identifier: xQLATgTC5ieeFVAOSSSiJymhY22YDJxnXRo4WnEM4P0= Subject key identifier: B4:B2:25:F6:60:7A:1F:0A:25:27:3F:59:5E:33:FB:2A:F2:24:A5:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAC5A5B2A53E7C9C138E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37b216ee-68d9-39ba-83a3-efa17d28b8c9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.77.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:c5:a5:b2:a5:3e:7c:9c:13:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4e8d345c-3a03-4275-a171-7cf77e3be884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:5d:7f:29:05:06:ac:b1:05:01:c8:91:e8: 4d:59:d4:6f:ac:b0:37:3c:90:ea:51:78:14:ef:5a: 36:3e:d2:11:d7:e4:c9:dc:37:bd:5e:fd:4d:3f:b3: 56:02:23:37:1e:ec:a9:46:bd:79:1b:91:af:66:74: ea:2a:c4:f4:79:7c:cb:55:a2:88:85:71:32:69:c4: cf:b7:e2:70:ab:e0:33:d5:35:5f:94:4e:0c:61:2e: 78:8a:41:55:dc:4a:8a:f7:0d:d9:bc:99:66:e8:db: 84:e1:db:7d:f4:67:38:13:f2:aa:c3:ca:6d:db:ca: ed:0b:59:11:93:8e:4c:1a:f7:e7:ab:cd:47:12:ea: 1b:7d:80:7a:6b:44:51:d6:98:45:d7:cd:66:c0:a4: f3:4d:e7:f5:e4:45:85:66:eb:0e:81:1f:17:5a:c9: b2:f2:59:c1:f1:17:01:83:c8:42:74:cc:08:2c:32: 05:26:f1:b8:33:6f:3c:42:e0:d5:74:d7:85:8a:1e: a8:38:43:9c:cc:50:cb:51:aa:0f:ff:a0:bf:a8:4f: 57:74:8f:27:c5:91:fc:77:9a:89:65:fa:5f:b5:e8: 2b:3b:30:cb:57:4d:1e:0a:54:fa:a3:85:7a:fc:14: 70:fd:c0:fa:e3:3f:06:1f:69:97:5f:d8:59:a5:9f: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B2:25:F6:60:7A:1F:0A:25:27:3F:59:5E:33:FB:2A:F2:24:A5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37b216ee-68d9-39ba-83a3-efa17d28b8c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.77.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e0:6f:62:ca:6b:45:08:5d:86:8b:09:e6:5f:82:b1:f2:79: e3:15:e0:43:e8:a4:5a:25:96:94:63:0c:ad:96:b8:7f:c3:7c: ee:7e:6c:d1:db:01:04:74:79:cb:b1:9b:74:16:18:57:63:6a: f6:3e:16:a9:5e:6a:d6:32:2f:55:d6:74:65:a6:ab:bc:50:6e: 34:8e:16:a6:89:19:3a:0e:4b:ee:49:8b:7c:a9:ab:c1:27:cb: e9:5b:f7:49:b0:33:1d:8f:95:fb:71:5c:8f:0d:0f:8d:67:db: fa:7c:bb:af:33:4c:8e:61:96:ad:40:01:34:19:23:be:f8:59: d7:60:39:37:47:07:f5:34:da:74:07:9a:f1:04:4f:0f:32:79: d0:e7:bc:e0:44:56:75:4c:c4:c1:eb:02:13:ca:d4:3e:8d:7e: 43:28:02:9d:ce:b6:6e:17:35:ff:58:62:5c:48:9f:1e:00:18: d9:25:cc:08:ce:a6:8c:e5:6a:12:25:32:07:ba:57:54:0f:5b: 4a:b0:47:57:d7:fd:ab:dc:c7:c9:a6:9a:91:c6:1e:38:e6:1e: fd:77:db:66:dd:09:06:a9:d0:a6:d7:7f:bc:d6:16:bb:b8:04: 72:8c:4e:8f:40:f5:8c:d6:0b:57:4b:a7:5f:ed:dc:ed:08:23: b7:4a:d7:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqsWlsqU+fJwTjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGU4ZDM0NWMtM2EwMy00Mjc1LWExNzEtN2NmNzdlM2JlODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRVdfykFBqyxBQHIkehNWdRvrLA3PJDqUXgU 71o2PtIR1+TJ3De9Xv1NP7NWAiM3HuypRr15G5GvZnTqKsT0eXzLVaKIhXEyacTP t+Jwq+Az1TVflE4MYS54ikFV3EqK9w3ZvJlm6NuE4dt99Gc4E/Kqw8pt28rtC1kR k45MGvfnq81HEuobfYB6a0RR1phF181mwKTzTef15EWFZusOgR8XWsmy8lnB8RcB g8hCdMwILDIFJvG4M288QuDVdNeFih6oOEOczFDLUaoP/6C/qE9XdI8nxZH8d5qJ ZfpftegrOzDLV00eClT6o4V6/BRw/cD64z8GH2mXX9hZpZ+JvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSyJfZgeh8KJSc/WV4z+yryJKVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzdiMjE2ZWUtNjhkOS0z OWJhLTgzYTMtZWZhMTdkMjhiOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASU2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXgb2LKa0UIXYaLCeZfgrHyeeMV4EPopFollpRjDK2WuH/DfO5+bNHb AQR0ecuxm3QWGFdjavY+FqleatYyL1XWdGWmq7xQbjSOFqaJGToOS+5Ji3ypq8En y+lb90mwMx2PlftxXI8ND41n2/p8u68zTI5hlq1AATQZI774WddgOTdHB/U02nQH mvEETw8yedDnvOBEVnVMxMHrAhPK1D6NfkMoAp3Otm4XNf9YYlxInx4AGNklzAjO pozlahIlMge6V1QPW0qwR1fX/avcx8mmmpHGHjjmHv1322bdCQap0KbXf7zWFru4 BHKMTo9A9YzWC1dLp1/t3O0II7dK12s= -----END CERTIFICATE-----Generated at Wed Oct 22 00:24:48 2025 by rpki-client