$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a3542df-e1c5-3170-84df-4c73da9ba638.roa File: 3a3542df-e1c5-3170-84df-4c73da9ba638.roa (raw, json) Hash identifier: XL6YlgfIawqPKJynAC3DBYtjiG2gfc6WJxbj9bWAxp4= Subject key identifier: 07:F0:C2:64:FD:09:7C:49:A3:51:0E:CF:0A:38:01:1B:2F:02:07:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9DEC579D4DE8D2EC0C3A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a3542df-e1c5-3170-84df-4c73da9ba638.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.167.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:de:c5:79:d4:de:8d:2e:c0:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0bc33749-0eac-4507-a163-94800b1bb9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:1f:de:e8:a7:88:b7:b0:50:ea:49:6c:07: 3a:0c:f6:d9:72:96:ed:67:48:5a:02:f2:da:d7:85: a0:7e:d8:67:1b:c8:77:8b:f3:26:47:fd:04:f1:11: a1:d3:f7:53:07:0b:1e:7d:6e:e6:99:63:71:6b:37: ce:42:91:98:63:fd:55:ee:69:5a:3e:c7:e1:0b:61: 9a:61:d8:8b:49:d8:55:ac:d1:9e:ad:dc:3c:08:98: d5:31:83:c4:10:a7:b5:d7:01:66:45:7f:78:c1:bf: 1f:bb:ce:f2:85:8c:e2:05:c5:13:70:fa:f6:42:eb: 8a:06:68:00:e9:22:58:06:8d:03:81:ed:06:83:80: 4f:c9:2b:ed:9d:5b:d8:ce:42:56:18:de:b8:b2:c4: 5b:34:bb:f2:a8:7e:80:97:58:39:8f:bc:92:12:74: 0e:a9:8c:0e:30:a4:a3:24:bd:10:84:94:6b:7e:f7: b0:9b:2f:93:c7:c5:61:40:33:f8:fa:5b:5a:ce:e0: 13:b8:33:d3:4d:5a:a2:09:3f:3e:90:1d:37:4b:d2: dc:71:e9:81:8c:72:d3:8e:82:d1:42:bf:34:14:2d: 9b:35:42:69:eb:83:40:65:8d:d7:8e:40:0a:fd:6c: a3:2b:73:4b:76:3d:e7:dc:0b:21:db:84:ac:82:d4: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F0:C2:64:FD:09:7C:49:A3:51:0E:CF:0A:38:01:1B:2F:02:07:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a3542df-e1c5-3170-84df-4c73da9ba638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.167.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:18:51:4f:17:a1:17:c9:85:0d:05:3f:e3:3b:a8:33:1b:f7: 8e:b8:fc:e8:da:c8:93:a1:e7:04:68:3c:0f:72:81:07:4a:04: 96:a0:a9:9c:ad:53:f7:02:e7:3a:9f:b3:0d:ee:6a:85:fe:ff: 93:87:df:5d:37:7b:01:cd:c4:f3:39:8c:6f:1a:f3:d4:6f:16: c3:c2:17:12:8f:a5:fe:ff:10:fb:8f:5c:5d:69:76:a5:d0:8a: 0c:a0:a6:0e:fe:99:e0:c0:fd:1c:0f:a8:34:46:1b:31:54:32: d2:e7:5b:de:0b:2a:bf:86:e2:d3:fa:ca:2e:64:9c:0e:e0:33: 32:27:b4:7e:45:5d:54:c7:8a:f5:c2:2f:a0:8e:37:6b:dd:b1: e8:cb:24:c0:d1:97:bd:47:c3:0f:02:20:77:5d:c1:f7:0a:66: c3:c7:e7:86:41:cb:88:67:11:18:64:1e:dc:a6:94:47:00:59: 21:8c:1f:b7:9b:28:9d:b7:69:4e:97:0e:8c:66:59:f2:77:13: 25:2c:c4:79:6b:f5:e3:fd:21:0a:13:a8:0e:c6:ff:6a:2f:20: e6:69:b6:fe:b8:c7:eb:e1:09:ae:f8:95:c3:05:ec:51:46:89: b1:9c:40:75:a2:87:c0:e1:6d:d7:eb:e6:42:eb:3e:7b:bd:f6: 9f:92:2e:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqd7FedTejS7Aw6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGJjMzM3NDktMGVhYy00NTA3LWExNjMtOTQ4MDBiMWJiOWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArisf3uiniLewUOpJbAc6DPbZcpbtZ0haAvLa 14WgfthnG8h3i/MmR/0E8RGh0/dTBwsefW7mmWNxazfOQpGYY/1V7mlaPsfhC2Ga YdiLSdhVrNGerdw8CJjVMYPEEKe11wFmRX94wb8fu87yhYziBcUTcPr2QuuKBmgA 6SJYBo0Dge0Gg4BPySvtnVvYzkJWGN64ssRbNLvyqH6Al1g5j7ySEnQOqYwOMKSj JL0QhJRrfvewmy+Tx8VhQDP4+ltazuATuDPTTVqiCT8+kB03S9LccemBjHLTjoLR Qr80FC2bNUJp64NAZY3XjkAK/WyjK3NLdj3n3Ash24SsgtS70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfwwmT9CXxJo1EOzwo4ARsvAgfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2EzNTQyZGYtZTFjNS0z MTcwLTg0ZGYtNGM3M2RhOWJhNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSad4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsYUU8XoRfJhQ0FP+M7qDMb9464/OjayJOh5wRoPA9ygQdKBJagqZyt U/cC5zqfsw3uaoX+/5OH3103ewHNxPM5jG8a89RvFsPCFxKPpf7/EPuPXF1pdqXQ igygpg7+meDA/RwPqDRGGzFUMtLnW94LKr+G4tP6yi5knA7gMzIntH5FXVTHivXC L6CON2vdsejLJMDRl71Hww8CIHddwfcKZsPH54ZBy4hnERhkHtymlEcAWSGMH7eb KJ23aU6XDoxmWfJ3EyUsxHlr9eP9IQoTqA7G/2ovIOZptv64x+vhCa74lcMF7FFG ibGcQHWih8Dhbdfr5kLrPnu99p+SLjw= -----END CERTIFICATE-----Generated at Tue Oct 21 22:00:36 2025 by rpki-client