$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ff25ac2-27ec-3d69-b995-7717da05e3cd.roa File: 4ff25ac2-27ec-3d69-b995-7717da05e3cd.roa (raw, json) Hash identifier: kLPq8godSQtYSuTuUuFwPu0uQ3j4jlebQWIC4VZECGI= Subject key identifier: D0:DF:99:80:7E:14:00:9F:01:11:72:3A:2F:E1:CA:DB:EC:AA:8B:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A90ECD2EA9626C797548C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ff25ac2-27ec-3d69-b995-7717da05e3cd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.155.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:0e:cd:2e:a9:62:6c:79:75:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f69efbfd-bddb-49ef-b604-d96e3128942a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:be:ae:98:4c:a7:91:ff:05:03:f3:43:6b: 3e:17:57:4b:b1:92:cf:ff:fe:98:0a:7e:43:af:b6: 2d:53:f5:91:ed:d0:c4:76:4b:ab:00:c6:bf:16:09: 6f:a8:cb:ee:8d:9b:87:64:46:99:00:d3:29:4b:22: 9d:b2:05:71:16:91:63:9c:0a:06:50:0a:e0:60:6c: dd:24:34:4b:33:77:1c:a7:cd:01:5a:3c:5c:3f:01: 9e:be:04:1f:96:3f:54:02:39:2e:57:b6:1a:f0:b6: aa:2d:74:53:b0:40:ea:46:a1:0c:51:b6:1a:2a:f6: 7e:80:ca:1b:23:ca:9d:ee:a0:9f:17:ae:35:6b:03: 3d:83:f9:b9:3a:e9:2b:5a:1a:d4:e6:f1:19:5b:d0: 5d:d4:c0:df:bc:4b:27:e8:f8:19:4f:00:41:41:04: 6e:10:be:72:a0:bd:79:7d:78:77:62:77:04:8b:6c: 76:1d:e1:98:46:20:60:e7:04:c8:55:94:06:28:cd: e1:27:7e:55:dd:da:1a:ae:24:a4:8c:1a:6c:c2:95: 0b:63:8a:b1:a2:be:b7:9d:84:3b:1f:31:12:d4:f6: 50:9b:5c:e9:30:bb:3e:90:7c:af:76:3c:90:a0:5a: 1b:8c:24:22:07:a2:7f:f6:cb:9d:c5:b6:28:6d:f3: d8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DF:99:80:7E:14:00:9F:01:11:72:3A:2F:E1:CA:DB:EC:AA:8B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ff25ac2-27ec-3d69-b995-7717da05e3cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.155.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:b7:e8:bf:c7:14:8d:c1:64:76:a2:00:e6:f0:ef:22:e8:4c: 81:ab:aa:65:1f:a5:be:7c:9b:ad:2f:27:93:93:3b:78:5f:b2: ad:c5:39:05:a5:41:d6:9e:94:ac:33:98:73:69:0a:de:49:ad: 2f:70:f3:a1:38:06:a2:57:af:e7:ce:bc:1f:a7:d4:54:00:23: 8f:79:5a:b1:44:b6:0c:04:88:51:c1:32:49:10:d9:f6:45:b8: 06:67:b4:5a:c9:f2:8e:7e:64:99:4c:f8:a5:65:78:d1:d5:df: b1:90:09:51:2a:58:d4:ef:87:54:47:b6:37:80:a8:a6:02:55: fb:7e:dc:97:32:37:b3:ce:78:86:82:96:24:2f:67:38:06:35: 00:c4:ad:42:7c:be:3f:c6:74:d7:f8:84:8f:25:be:6d:ed:41: a4:f7:b3:93:fc:bb:05:e7:31:95:86:1c:ab:91:38:67:a0:27: eb:b9:10:00:66:db:92:01:0a:d4:fc:a9:f0:8f:2d:d8:fc:a4: ac:31:6c:14:aa:7d:21:85:6f:6a:68:b9:ba:c8:c9:f1:b7:fc: 52:3d:57:c4:3b:32:13:44:be:99:94:03:c6:23:05:bf:af:32: 97:62:3b:49:c1:c7:97:25:7a:c0:36:bb:f1:9f:d4:2f:fe:8a: 0d:8f:fb:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqQ7NLqlibHl1SMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjY5ZWZiZmQtYmRkYi00OWVmLWI2MDQtZDk2ZTMxMjg5NDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQK+rphMp5H/BQPzQ2s+F1dLsZLP//6YCn5D r7YtU/WR7dDEdkurAMa/FglvqMvujZuHZEaZANMpSyKdsgVxFpFjnAoGUArgYGzd JDRLM3ccp80BWjxcPwGevgQflj9UAjkuV7Ya8LaqLXRTsEDqRqEMUbYaKvZ+gMob I8qd7qCfF641awM9g/m5OukrWhrU5vEZW9Bd1MDfvEsn6PgZTwBBQQRuEL5yoL15 fXh3YncEi2x2HeGYRiBg5wTIVZQGKM3hJ35V3doariSkjBpswpULY4qxor63nYQ7 HzES1PZQm1zpMLs+kHyvdjyQoFobjCQiB6J/9sudxbYobfPY3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDfmYB+FACfARFyOi/hytvsqot0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZmMjVhYzItMjdlYy0z ZDY5LWI5OTUtNzcxN2RhMDVlM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM636L/HFI3BZHaiAObw7yLoTIGrqmUfpb58m60vJ5OTO3hfsq3FOQWl QdaelKwzmHNpCt5JrS9w86E4BqJXr+fOvB+n1FQAI495WrFEtgwEiFHBMkkQ2fZF uAZntFrJ8o5+ZJlM+KVleNHV37GQCVEqWNTvh1RHtjeAqKYCVft+3JcyN7POeIaC liQvZzgGNQDErUJ8vj/GdNf4hI8lvm3tQaT3s5P8uwXnMZWGHKuROGegJ+u5EABm 25IBCtT8qfCPLdj8pKwxbBSqfSGFb2poubrIyfG3/FI9V8Q7MhNEvpmUA8YjBb+v MpdiO0nBx5clesA2u/Gf1C/+ig2P+70= -----END CERTIFICATE-----Generated at Tue Oct 21 19:41:56 2025 by rpki-client