$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d81c4fd-71fa-3e80-a36e-352020379721.roa File: 3d81c4fd-71fa-3e80-a36e-352020379721.roa (raw, json) Hash identifier: wXKuvekjeztDG2bbtgFVqLFdQ08AuIDdqQbeTvUWa58= Subject key identifier: D2:DC:BE:E2:41:A5:24:1C:08:76:9C:0A:B5:EB:DD:2F:8F:79:22:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A831DDA3E3C71C94BE2100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d81c4fd-71fa-3e80-a36e-352020379721.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.149.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:31:dd:a3:e3:c7:1c:94:be:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=33050c74-e7a3-4fbf-a944-dcb60f7bb8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:e3:e3:42:a2:af:4a:95:95:14:69:13:60: 29:73:fe:43:0d:fb:91:e8:b3:6f:48:b1:dc:e6:a6: df:5f:82:0a:26:e0:2b:f2:11:b8:84:66:67:f0:80: fb:01:6b:60:66:65:9e:25:8a:9f:12:d4:bc:2a:40: 6e:0c:90:84:79:5d:ab:ab:b4:91:e9:bd:24:49:62: 80:69:fa:89:21:e5:c7:59:98:54:1c:7c:60:8c:3a: b1:26:51:c0:b9:5b:0a:2a:40:65:16:ec:7a:94:57: 3f:0f:78:2b:3b:07:19:ce:55:6b:c4:d3:61:f8:f4: c9:22:95:ae:68:81:81:55:37:07:49:5d:ae:f0:90: 6c:d9:79:40:ea:31:23:f9:4a:d4:c3:91:2c:67:52: 82:8b:d0:50:13:d5:7f:d4:5d:ba:83:b4:a9:c3:da: 7a:98:a5:e0:01:72:f4:62:df:de:5d:ee:49:b1:04: 9b:0a:90:7c:73:63:4c:7c:8a:40:a8:a4:6f:ec:e4: c1:15:87:9c:98:3a:61:fe:37:f2:cd:96:30:ef:0f: 6c:27:9e:e9:cf:e2:fc:00:fe:6d:d0:63:7e:96:5f: 45:0f:ab:dc:ce:0f:51:3e:03:89:60:1b:ce:ee:16: b9:89:22:c6:c7:f7:2d:49:ee:8b:3e:98:e8:ec:8e: 05:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DC:BE:E2:41:A5:24:1C:08:76:9C:0A:B5:EB:DD:2F:8F:79:22:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d81c4fd-71fa-3e80-a36e-352020379721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.149.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:51:38:47:ca:0f:e9:38:2f:e9:68:6f:5e:21:3f:eb:a3:5d: f9:c9:d9:0c:19:4f:2a:40:8c:ad:d2:5d:8b:1c:5f:c8:96:ca: 3e:1a:70:a8:11:e1:61:50:78:3a:a2:00:74:8f:d2:24:ad:fb: 14:c1:41:d9:f7:c9:c4:a5:10:60:80:a9:c7:09:dd:86:04:6e: e2:01:c1:c3:c0:61:dc:9e:83:ff:32:5b:2a:5c:eb:72:00:3f: b6:03:8d:dd:14:88:1f:ca:b2:00:25:12:74:64:78:a2:88:25: 94:bd:58:31:2e:ee:ea:0c:d7:b9:f6:c6:1d:c5:3d:0c:c8:b1: 81:99:a0:f4:32:8f:9f:d8:57:14:90:f7:47:2a:19:c3:9f:73: da:a4:ab:15:a3:93:d9:1f:55:27:f7:fb:f7:13:2c:a2:e2:38: 41:be:2f:34:af:c6:38:be:07:31:b1:81:33:07:01:cd:05:b0: 58:97:03:7c:7a:00:8f:2b:b3:eb:cc:40:01:02:47:12:6a:1d: 2a:3c:8d:cc:29:be:97:6c:0f:5c:e0:4c:a7:b3:e1:df:44:1a: c5:ef:11:65:34:23:36:a1:5e:79:01:28:ce:7d:9c:c4:43:ad: 52:b4:36:0e:e1:6d:01:12:89:ff:39:c7:47:20:a2:cb:90:fb: 38:b9:18:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqDHdo+PHHJS+IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzMwNTBjNzQtZTdhMy00ZmJmLWE5NDQtZGNiNjBmN2JiOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv7j40Kir0qVlRRpE2Apc/5DDfuR6LNvSLHc 5qbfX4IKJuAr8hG4hGZn8ID7AWtgZmWeJYqfEtS8KkBuDJCEeV2rq7SR6b0kSWKA afqJIeXHWZhUHHxgjDqxJlHAuVsKKkBlFux6lFc/D3grOwcZzlVrxNNh+PTJIpWu aIGBVTcHSV2u8JBs2XlA6jEj+UrUw5EsZ1KCi9BQE9V/1F26g7Spw9p6mKXgAXL0 Yt/eXe5JsQSbCpB8c2NMfIpAqKRv7OTBFYecmDph/jfyzZYw7w9sJ57pz+L8AP5t 0GN+ll9FD6vczg9RPgOJYBvO7ha5iSLGx/ctSe6LPpjo7I4FXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLcvuJBpSQcCHacCrXr3S+PeSINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q4MWM0ZmQtNzFmYS0z ZTgwLWEzNmUtMzUyMDIwMzc5NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZROEfKD+k4L+lob14hP+ujXfnJ2QwZTypAjK3SXYscX8iWyj4acKgR 4WFQeDqiAHSP0iSt+xTBQdn3ycSlEGCAqccJ3YYEbuIBwcPAYdyeg/8yWypc63IA P7YDjd0UiB/KsgAlEnRkeKKIJZS9WDEu7uoM17n2xh3FPQzIsYGZoPQyj5/YVxSQ 90cqGcOfc9qkqxWjk9kfVSf3+/cTLKLiOEG+LzSvxji+BzGxgTMHAc0FsFiXA3x6 AI8rs+vMQAECRxJqHSo8jcwpvpdsD1zgTKez4d9EGsXvEWU0IzahXnkBKM59nMRD rVK0Ng7hbQESif85x0cgosuQ+zi5GFw= -----END CERTIFICATE-----Generated at Wed Oct 22 00:24:21 2025 by rpki-client