$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f11bc0c-82ed-3c13-8be1-e0dfb900cb9b.roa File: 3f11bc0c-82ed-3c13-8be1-e0dfb900cb9b.roa (raw, json) Hash identifier: cEFqp/uXQQ2FDsWosiqYSK87n1XduQJFWyQnQWs9ujk= Subject key identifier: 64:B9:E2:D6:29:E4:11:78:D2:D3:BC:7A:D2:9B:54:C6:E7:86:26:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7CAC087C2B9C329DEF038 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f11bc0c-82ed-3c13-8be1-e0dfb900cb9b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.240.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:ca:c0:87:c2:b9:c3:29:de:f0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=6c512cbd-ebda-4113-8de5-9f4912c99bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:31:54:06:ca:2a:1b:63:99:2e:0b:d7:39: 4b:72:3a:ab:78:26:d3:7c:cf:26:a9:89:b9:85:20: 21:bf:ed:b5:25:1d:29:75:07:5b:93:ea:34:20:48: f0:55:02:88:71:27:c2:5b:8a:85:ed:c5:7c:84:d3: 9a:b4:4f:31:b7:b0:bd:90:eb:e7:a7:fc:b1:d3:af: c8:a1:a0:a7:f8:44:3f:df:ab:42:27:60:40:58:47: 02:fb:67:fe:bb:78:dd:35:4d:e1:04:54:4f:f2:8e: 15:91:0d:0d:94:d5:c4:5a:75:42:70:a1:14:61:d4: 7d:46:d8:17:93:17:91:37:62:42:61:23:9b:c8:54: be:42:0e:73:70:25:3c:2a:db:3c:e0:fd:55:d7:37: 3f:17:70:15:d8:51:29:94:13:00:35:3c:a8:77:15: fd:6b:9b:40:9b:6c:1e:ae:c5:00:bc:69:10:88:77: 8c:9e:6f:77:cc:84:64:49:e7:f6:a3:2a:68:7a:05: b3:43:9f:18:d6:9a:a6:a5:05:09:00:b1:46:9e:ab: 84:a2:c5:1f:2d:9f:db:34:ff:ef:a6:9c:25:9b:69: 07:b7:3a:a3:6a:3f:7f:ab:8d:a0:b8:46:53:ca:36: 94:fe:c8:9b:5d:bb:c2:c9:d2:a0:44:d2:b8:25:4c: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B9:E2:D6:29:E4:11:78:D2:D3:BC:7A:D2:9B:54:C6:E7:86:26:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f11bc0c-82ed-3c13-8be1-e0dfb900cb9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:eb:81:27:75:62:36:43:8e:f0:05:2c:95:69:57:a5:ed:8b: 91:9f:4f:33:6e:be:04:a2:cb:b1:ab:83:99:a5:b9:7b:0d:29: 3c:1e:8c:55:e5:24:b0:b4:31:b8:63:8d:a6:1c:8e:51:c1:22: e9:24:81:c9:3d:bb:ee:95:df:fc:f4:f8:d8:41:8d:62:d5:ca: e7:21:f7:99:c4:d3:5f:93:79:5d:5e:b8:64:9b:8d:9f:5f:14: 55:a2:a1:e5:be:5d:fc:ea:a1:8e:48:3c:91:16:ec:a2:42:2d: 0a:04:41:3a:60:f8:fe:93:4a:94:5b:bb:c4:e8:fd:1a:1a:cf: f6:f2:10:90:cd:c5:a9:3c:c8:3c:79:24:c1:c0:23:60:c0:4a: 2a:62:d1:df:17:f7:59:25:a8:e1:36:b8:fb:c2:14:d2:28:8e: 5c:27:a9:f6:70:fb:ae:ea:64:ee:be:13:23:e4:d8:33:70:e8: 37:8d:b1:17:a8:57:76:7d:66:c1:92:00:13:b1:11:1e:24:10: dd:93:10:e1:19:e7:ae:7e:a2:2f:ff:6c:4e:2e:9d:8b:9e:fe: d0:4f:b1:73:43:75:1b:00:d3:7f:2c:35:f0:61:1f:29:da:8d: d2:da:48:28:b0:40:ab:57:76:96:fe:7c:59:d2:a2:09:fd:59: c1:84:9d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp8rAh8K5wyne8DgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NmM1MTJjYmQtZWJkYS00MTEzLThkZTUtOWY0OTEyYzk5YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4MxVAbKKhtjmS4L1zlLcjqreCbTfM8mqYm5 hSAhv+21JR0pdQdbk+o0IEjwVQKIcSfCW4qF7cV8hNOatE8xt7C9kOvnp/yx06/I oaCn+EQ/36tCJ2BAWEcC+2f+u3jdNU3hBFRP8o4VkQ0NlNXEWnVCcKEUYdR9RtgX kxeRN2JCYSObyFS+Qg5zcCU8Kts84P1V1zc/F3AV2FEplBMANTyodxX9a5tAm2we rsUAvGkQiHeMnm93zIRkSef2oypoegWzQ58Y1pqmpQUJALFGnquEosUfLZ/bNP/v ppwlm2kHtzqjaj9/q42guEZTyjaU/sibXbvCydKgRNK4JUzz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS54tYp5BF40tO8etKbVMbnhiZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2YxMWJjMGMtODJlZC0z YzEzLThiZTEtZTBkZmI5MDBjYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTrgSd1YjZDjvAFLJVpV6Xti5GfTzNuvgSiy7Grg5mluXsNKTwejFXl JLC0MbhjjaYcjlHBIukkgck9u+6V3/z0+NhBjWLVyuch95nE01+TeV1euGSbjZ9f FFWioeW+XfzqoY5IPJEW7KJCLQoEQTpg+P6TSpRbu8To/Roaz/byEJDNxak8yDx5 JMHAI2DASipi0d8X91klqOE2uPvCFNIojlwnqfZw+67qZO6+EyPk2DNw6DeNsReo V3Z9ZsGSABOxER4kEN2TEOEZ565+oi//bE4unYue/tBPsXNDdRsA038sNfBhHyna jdLaSCiwQKtXdpb+fFnSogn9WcGEnRE= -----END CERTIFICATE-----Generated at Tue Oct 21 19:16:54 2025 by rpki-client