$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af74272-81da-3db8-83a5-79cfa5206666.roa File: 3af74272-81da-3db8-83a5-79cfa5206666.roa (raw, json) Hash identifier: xQVY/yxlYIJx//ajs/vjTgobHzb+ZqY0H+7uUnECIvU= Subject key identifier: 29:D4:DE:B7:D3:C1:07:69:B7:1B:F0:64:27:56:10:6F:74:1B:AA:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAB8BC83680BF4C124B880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af74272-81da-3db8-83a5-79cfa5206666.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.32.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:b8:bc:83:68:0b:f4:c1:24:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=6cdcc026-a696-4d51-b0df-a59b76a6a753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:06:53:a0:6e:b0:fb:66:1a:68:7e:fb:2e: 77:5e:1b:48:61:90:ca:9e:1d:a1:60:31:da:34:86: 39:82:13:5a:8b:5b:45:59:a8:a7:3a:48:70:25:e4: 06:a1:eb:34:3d:cb:9b:db:6d:d7:86:e4:22:a8:62: 38:a5:5f:5f:74:fe:1a:04:ba:e0:8f:48:e4:0e:ce: e0:db:ce:80:b3:ea:95:65:94:73:4f:70:5b:31:b6: ca:ae:62:a2:c1:3f:2c:e0:4b:9e:ea:4c:99:f7:9b: 73:c9:3b:fc:a3:17:28:3c:07:44:f0:7c:c6:db:6f: 29:72:55:a0:18:21:6e:98:14:19:bd:d5:ff:dc:bf: 12:91:c3:de:88:45:ca:c5:a3:eb:d5:8d:7c:21:06: 96:c5:42:b6:76:04:61:92:91:ca:21:d1:30:d1:05: 3b:d7:6f:92:db:12:28:a0:3d:b0:f6:4f:7d:0b:14: 88:1a:65:6b:ef:d0:76:b5:58:0c:8c:c0:3b:26:5f: 06:14:20:e3:94:54:5c:46:a4:14:78:53:6f:52:43: cd:be:0c:8a:45:8e:97:43:66:65:7a:c3:63:01:e9: 17:b9:8b:c5:ab:a5:a2:51:50:44:4b:00:8b:7e:e0: 2c:37:14:5a:f4:f3:a4:81:19:a7:5d:2f:59:de:53: b7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D4:DE:B7:D3:C1:07:69:B7:1B:F0:64:27:56:10:6F:74:1B:AA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3af74272-81da-3db8-83a5-79cfa5206666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.32.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:cc:b3:a0:ad:46:fc:6f:64:65:9b:46:3a:3c:02:17:f3:0e: 47:cd:68:5c:a5:11:98:88:35:de:77:a2:73:2f:68:fb:78:5f: 5d:b0:0a:6d:5c:e2:08:8c:eb:0d:97:d8:b5:d4:bf:07:22:30: 34:e4:66:09:16:8e:27:ad:95:d8:9f:c6:18:20:3a:b6:98:aa: dd:85:a5:ae:c4:d1:2e:00:51:86:9f:f9:4d:ba:4c:fc:bb:e0: 07:a8:e1:ba:41:f3:33:dd:d9:81:48:b8:94:d1:be:13:d5:d2: 1c:39:4c:8f:9d:09:f4:0e:c4:19:47:d2:fb:85:12:f5:5d:72: b5:61:bf:4a:17:28:0b:44:b8:51:e7:7f:b9:d3:f7:db:44:56: 93:30:5f:57:02:6f:97:55:d5:b2:1b:cd:a0:a6:0d:79:b1:c5: 31:9d:03:b7:d7:3b:4d:e1:3f:21:6c:2b:09:be:1d:b4:95:ee: 96:13:d5:9d:0f:7f:79:7c:08:2f:b6:6b:21:bf:98:76:72:c5: 10:03:5c:fd:0a:31:0f:25:b9:c8:c2:5a:25:55:b5:90:ef:19: be:6e:df:10:f8:a0:6e:02:96:f1:1d:13:c8:e9:7c:bb:54:84: cb:b8:1d:21:24:8a:b5:16:52:ff:33:32:ee:ab:a5:57:6a:ba: 5e:9a:4f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqri8g2gL9MEkuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NmNkY2MwMjYtYTY5Ni00ZDUxLWIwZGYtYTU5Yjc2YTZhNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu8GU6BusPtmGmh++y53XhtIYZDKnh2hYDHa NIY5ghNai1tFWainOkhwJeQGoes0Pcub223XhuQiqGI4pV9fdP4aBLrgj0jkDs7g 286As+qVZZRzT3BbMbbKrmKiwT8s4Eue6kyZ95tzyTv8oxcoPAdE8HzG228pclWg GCFumBQZvdX/3L8SkcPeiEXKxaPr1Y18IQaWxUK2dgRhkpHKIdEw0QU712+S2xIo oD2w9k99CxSIGmVr79B2tVgMjMA7Jl8GFCDjlFRcRqQUeFNvUkPNvgyKRY6XQ2Zl esNjAekXuYvFq6WiUVBESwCLfuAsNxRa9POkgRmnXS9Z3lO3VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnU3rfTwQdptxvwZCdWEG90G6q1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FmNzQyNzItODFkYS0z ZGI4LTgzYTUtNzljZmE1MjA2NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSCmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnMs6CtRvxvZGWbRjo8AhfzDkfNaFylEZiINd53onMvaPt4X12wCm1c 4giM6w2X2LXUvwciMDTkZgkWjietldifxhggOraYqt2Fpa7E0S4AUYaf+U26TPy7 4Aeo4bpB8zPd2YFIuJTRvhPV0hw5TI+dCfQOxBlH0vuFEvVdcrVhv0oXKAtEuFHn f7nT99tEVpMwX1cCb5dV1bIbzaCmDXmxxTGdA7fXO03hPyFsKwm+HbSV7pYT1Z0P f3l8CC+2ayG/mHZyxRADXP0KMQ8lucjCWiVVtZDvGb5u3xD4oG4ClvEdE8jpfLtU hMu4HSEkirUWUv8zMu6rpVdqul6aT7k= -----END CERTIFICATE-----Generated at Wed Oct 22 00:48:05 2025 by rpki-client