$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aea40a0-b46f-3497-988c-79029af1fcb9.roa File: 5aea40a0-b46f-3497-988c-79029af1fcb9.roa (raw, json) Hash identifier: qVQDyUHt4L+v+yhdfFXjfDtS36EzGynJFaWT+Jxmego= Subject key identifier: 34:A8:4B:3C:AD:33:9E:EC:E1:30:79:C0:5D:E7:96:C5:80:75:92:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A85BFB7CE7A288ABAAA900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aea40a0-b46f-3497-988c-79029af1fcb9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.238.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:5b:fb:7c:e7:a2:88:ab:aa:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=821a2921-8aba-43e4-906f-fe9e2101fabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:0e:db:cf:f0:85:a9:64:ef:19:b4:cd:cf: 14:75:d0:17:44:93:d8:71:29:6a:d0:bb:a0:c1:9a: 30:d7:d4:02:28:6e:3d:17:ac:f4:4c:9d:95:b9:bd: 9b:c5:93:c1:60:d6:1e:4a:9a:f6:b3:4f:cd:9c:f6: 04:e8:6c:f0:3c:b0:32:97:10:b6:5c:53:11:5c:a6: f3:c4:2a:5a:5f:88:fe:dc:82:ec:30:8a:29:35:17: 16:e2:9a:54:59:ef:fe:c7:53:61:7c:24:fd:87:3d: a8:af:c5:bd:88:fa:01:83:5c:b6:00:00:62:d9:95: 8e:6f:57:d6:4d:f5:ae:d3:11:a9:ed:c0:06:03:31: fd:8c:ff:7c:2f:79:37:f7:4d:57:9e:39:3a:53:ec: b8:54:11:ee:ad:0e:fd:f3:d3:9a:f0:f6:74:07:ba: de:52:bb:28:b8:b5:5a:6b:5f:a8:da:de:15:e9:8c: 43:99:ad:46:6f:d6:36:d5:ad:e0:df:f8:ba:45:7e: 31:ce:f8:aa:75:7f:be:b4:53:73:2f:5f:56:09:09: f1:4c:5f:72:54:1c:55:55:a5:c7:22:5e:ac:93:03: 75:1b:82:4c:31:42:83:43:12:23:26:c9:78:d3:6f: 6c:af:2e:9d:20:3a:1d:78:d4:ae:f8:ab:61:f3:f9: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A8:4B:3C:AD:33:9E:EC:E1:30:79:C0:5D:E7:96:C5:80:75:92:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aea40a0-b46f-3497-988c-79029af1fcb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.238.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:16:40:6c:e1:d4:fa:1c:0c:16:54:bf:1a:41:ad:e4:55:be: bb:c0:db:e2:03:35:5a:c2:5c:72:c2:4c:13:ba:4b:d9:2c:81: ae:e5:a7:78:d1:74:5b:37:f0:d8:d4:99:7c:47:51:7b:19:7d: 17:1d:f7:62:db:19:97:4c:d3:7f:45:62:d5:55:e7:18:95:e7: 89:14:ce:9a:69:6c:d3:3c:79:89:8f:76:55:de:52:43:fd:21: cb:b9:d8:c0:bb:6d:62:ff:ee:22:fb:62:a2:0c:ab:54:93:e6: 86:2f:d3:8f:20:7b:40:0b:8a:9a:d4:90:e1:71:8b:7c:0b:85: 61:62:83:83:c4:8f:78:d8:b4:03:05:2c:7b:4d:50:61:a0:2f: f4:66:d0:58:ff:b7:88:4d:10:08:d1:ca:a5:4d:1f:03:fb:4b: f3:a4:e2:f7:e7:2d:2b:0b:6c:91:d2:75:84:b7:05:a6:a4:d9: 2c:ee:ea:49:43:18:28:46:b5:94:d0:38:3c:a0:e8:b4:08:67: 17:61:37:87:7d:1c:bd:8e:8b:b3:7a:df:1b:c9:96:9d:51:4e: 7c:fc:f0:e5:5e:27:05:63:c8:6d:8f:0b:81:ba:e6:17:5b:e2: 38:b0:72:45:4f:68:8c:68:c6:dc:8a:7f:ee:71:1c:e3:77:04: b4:e0:0d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqFv7fOeiiKuqqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODIxYTI5MjEtOGFiYS00M2U0LTkwNmYtZmU5ZTIxMDFmYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+EO28/whalk7xm0zc8UddAXRJPYcSlq0Lug wZow19QCKG49F6z0TJ2Vub2bxZPBYNYeSpr2s0/NnPYE6GzwPLAylxC2XFMRXKbz xCpaX4j+3ILsMIopNRcW4ppUWe/+x1NhfCT9hz2or8W9iPoBg1y2AABi2ZWOb1fW TfWu0xGp7cAGAzH9jP98L3k3901Xnjk6U+y4VBHurQ7989Oa8PZ0B7reUrsouLVa a1+o2t4V6YxDma1Gb9Y21a3g3/i6RX4xzviqdX++tFNzL19WCQnxTF9yVBxVVaXH Il6skwN1G4JMMUKDQxIjJsl4029sry6dIDodeNSu+Kth8/lcXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSoSzytM57s4TB5wF3nlsWAdZL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWFlYTQwYTAtYjQ2Zi0z NDk3LTk4OGMtNzkwMjlhZjFmY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSe4uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0WQGzh1PocDBZUvxpBreRVvrvA2+IDNVrCXHLCTBO6S9ksga7lp3jR dFs38NjUmXxHUXsZfRcd92LbGZdM039FYtVV5xiV54kUzpppbNM8eYmPdlXeUkP9 Icu52MC7bWL/7iL7YqIMq1ST5oYv048ge0ALiprUkOFxi3wLhWFig4PEj3jYtAMF LHtNUGGgL/Rm0Fj/t4hNEAjRyqVNHwP7S/Ok4vfnLSsLbJHSdYS3Baak2Szu6klD GChGtZTQODyg6LQIZxdhN4d9HL2Oi7N63xvJlp1RTnz88OVeJwVjyG2PC4G65hdb 4jiwckVPaIxoxtyKf+5xHON3BLTgDYs= -----END CERTIFICATE-----Generated at Tue Oct 21 21:54:53 2025 by rpki-client