$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37edda94-b3b6-3ff6-9f51-ba08780e996e.roa File: 37edda94-b3b6-3ff6-9f51-ba08780e996e.roa (raw, json) Hash identifier: Gbt+6kNkL1VTpYM9yRdLUX25Tp8fEHEoTHnVRDfbhGY= Subject key identifier: F4:17:72:CD:33:5B:4D:F4:16:50:F0:9A:B5:9D:3F:AC:D2:4E:8E:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8E0F5D1CEB9C6E720C380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37edda94-b3b6-3ff6-9f51-ba08780e996e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 73.161.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:e0:f5:d1:ce:b9:c6:e7:20:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f0e563d8-ea7e-4272-9ec9-0712d4c27d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3b:5b:e1:bc:b4:70:91:f7:6d:86:44:d3:06: f2:f0:a2:f7:88:ad:cf:c1:de:62:db:0f:5b:7f:63: 1c:ec:f2:4e:e5:2f:c1:45:d3:94:60:c1:2e:12:61: 9b:11:4a:52:d2:d9:d2:be:fc:c1:e2:f9:58:5f:68: 15:47:a9:62:c9:49:15:57:54:a6:2d:17:21:fe:50: 20:c5:5f:a1:cc:b3:6c:14:a0:5e:16:9a:ef:a2:c5: 61:04:be:e9:6d:d9:20:1e:d3:f5:c0:13:b4:fe:5a: ce:68:52:e3:3e:f6:2f:f2:3d:84:2c:1c:aa:7b:00: 8e:ec:70:eb:65:7b:06:46:35:b2:57:dd:54:ca:2f: 94:da:ab:5d:e8:30:bc:9c:31:96:71:12:41:5c:7e: 46:99:d9:41:dd:11:aa:54:9c:eb:7b:16:2b:1e:43: f5:43:cc:c8:98:1d:84:41:8d:04:66:82:75:1a:af: 7b:ce:64:15:78:79:0c:68:aa:dc:4c:12:d3:a2:77: 44:90:fa:9a:5b:df:e9:b8:95:8a:33:af:b6:4c:f4: a4:7c:42:6d:fd:70:07:5f:61:11:08:ba:e3:4e:96: 36:2d:f2:27:fd:c3:2e:89:65:1f:d3:7c:59:3a:d8: 4e:e5:16:ca:83:60:0a:6a:e1:09:8a:c2:65:86:4f: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:17:72:CD:33:5B:4D:F4:16:50:F0:9A:B5:9D:3F:AC:D2:4E:8E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37edda94-b3b6-3ff6-9f51-ba08780e996e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:af:40:db:fd:1b:2e:29:bc:72:79:bf:08:6d:10:41:7d:c5: 34:49:8d:19:78:f8:55:a4:c4:4b:79:fc:59:bf:02:0d:bc:d4: 69:9d:ed:94:36:18:00:61:04:7e:6d:55:5a:00:42:32:8b:ef: e3:99:12:f2:af:9a:f9:0b:5e:d1:9b:1d:ab:3f:1c:24:5c:32: 3c:33:8a:20:20:ce:88:4f:df:5e:60:57:24:a4:48:1f:7a:2a: 31:94:08:cc:6c:20:11:d7:ac:49:4f:c0:e1:f3:c5:4d:1d:f9: 13:d6:02:90:24:4b:37:da:d9:91:ea:30:5c:c8:17:24:db:fe: 53:61:83:92:fa:76:87:b3:47:a8:56:97:33:66:51:6f:3b:f7: 15:10:11:88:36:00:4d:76:b6:df:48:cf:96:6c:6f:e4:62:ff: e3:f4:8f:62:ca:8d:2e:39:67:07:39:05:d7:f1:fd:6b:4a:fb: ec:7e:44:97:24:71:51:a8:0f:93:28:29:63:62:00:ff:97:2c: 49:84:6f:06:be:0c:b8:ce:b5:f3:e5:c1:f8:cf:cd:1a:9e:46: 28:ea:4f:9d:fa:0d:a8:eb:b0:26:a6:b5:5b:d4:86:67:27:56: 7e:d7:f4:2a:32:c8:58:e4:86:d9:13:e7:ad:de:07:56:d6:9b: 03:96:3f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqOD10c65xucgw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjBlNTYzZDgtZWE3ZS00MjcyLTllYzktMDcxMmQ0YzI3ZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjztb4by0cJH3bYZE0wby8KL3iK3Pwd5i2w9b f2Mc7PJO5S/BRdOUYMEuEmGbEUpS0tnSvvzB4vlYX2gVR6liyUkVV1SmLRch/lAg xV+hzLNsFKBeFprvosVhBL7pbdkgHtP1wBO0/lrOaFLjPvYv8j2ELByqewCO7HDr ZXsGRjWyV91Uyi+U2qtd6DC8nDGWcRJBXH5GmdlB3RGqVJzrexYrHkP1Q8zImB2E QY0EZoJ1Gq97zmQVeHkMaKrcTBLTondEkPqaW9/puJWKM6+2TPSkfEJt/XAHX2ER CLrjTpY2LfIn/cMuiWUf03xZOthO5RbKg2AKauEJisJlhk/dpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQXcs0zW030FlDwmrWdP6zSTo4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzdlZGRhOTQtYjNiNi0z ZmY2LTlmNTEtYmEwODc4MGU5OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSaGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqvQNv9Gy4pvHJ5vwhtEEF9xTRJjRl4+FWkxEt5/Fm/Ag281Gmd7ZQ2 GABhBH5tVVoAQjKL7+OZEvKvmvkLXtGbHas/HCRcMjwziiAgzohP315gVySkSB96 KjGUCMxsIBHXrElPwOHzxU0d+RPWApAkSzfa2ZHqMFzIFyTb/lNhg5L6doezR6hW lzNmUW879xUQEYg2AE12tt9Iz5Zsb+Ri/+P0j2LKjS45Zwc5Bdfx/WtK++x+RJck cVGoD5MoKWNiAP+XLEmEbwa+DLjOtfPlwfjPzRqeRijqT536DajrsCamtVvUhmcn Vn7X9CoyyFjkhtkT563eB1bWmwOWP0c= -----END CERTIFICATE-----Generated at Wed Oct 22 03:10:18 2025 by rpki-client