$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a519b1b-2164-387d-a696-92a3ba713af0.roa File: 7a519b1b-2164-387d-a696-92a3ba713af0.roa (raw, json) Hash identifier: 3PkJu892EwTcnHn8Or5WmzQPaX09nXE5d4DCsMgFkWk= Subject key identifier: 86:60:94:5C:C4:FB:4B:BD:54:15:9D:BD:36:C3:EC:AF:12:EE:B5:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7D941F589CE9BAE571780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a519b1b-2164-387d-a696-92a3ba713af0.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.96.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:d9:41:f5:89:ce:9b:ae:57:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=db8f2731-10c0-4eda-b48d-ee54ad33b929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:fa:89:1b:83:11:45:f6:d3:fc:af:0d:ae: eb:e8:c6:a5:74:37:90:76:47:87:a9:0b:15:75:8a: 78:d8:32:d0:04:37:4b:d4:73:85:80:bb:ee:0b:49: 2c:3d:c4:73:b4:b4:27:59:65:fa:b4:ac:79:b3:8e: 99:22:51:35:f6:69:e6:6c:9a:9a:cc:a2:be:f0:01: 17:6a:05:9c:ae:dd:ea:ae:cd:03:13:6e:36:9e:48: 13:93:85:1c:2d:7e:f6:3b:2b:2b:ef:62:d7:b4:f5: eb:4a:c7:22:e8:e1:16:a9:23:f6:a6:cc:02:cb:6d: 1f:5c:81:77:e0:68:3f:c2:74:3b:dc:c9:8e:87:e0: 5b:73:4f:f9:72:ec:68:01:85:eb:9a:26:79:b0:77: c5:c0:2c:8d:2b:33:72:b5:c2:c3:ac:f1:e8:ea:bc: e5:18:e3:66:57:70:1e:d1:b1:0d:81:78:60:55:8b: 17:d4:24:01:fd:31:6c:7d:e3:b3:11:85:3c:af:32: a5:ed:7e:a2:b3:8b:da:bc:9b:89:58:cf:88:aa:e0: 5c:89:ba:e1:0c:ba:e7:28:ba:8d:96:2b:7c:3f:9f: 76:37:d8:65:de:24:ac:a0:89:52:b8:a3:13:4a:d4: 46:cc:c6:ed:53:bc:d3:45:55:06:d8:66:29:f0:0c: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:60:94:5C:C4:FB:4B:BD:54:15:9D:BD:36:C3:EC:AF:12:EE:B5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a519b1b-2164-387d-a696-92a3ba713af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.96.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:f0:74:bd:8c:0e:d8:10:08:90:84:5a:4c:27:45:07:13:44: 28:9c:fa:00:c7:f3:6b:f9:96:05:b7:81:25:90:34:62:d4:0a: ed:28:fd:0b:5e:4c:69:22:94:3d:3e:48:7a:02:c3:55:a0:02: be:7a:3f:5a:04:7a:9f:02:82:fd:31:68:3c:0e:23:c8:09:74: 7d:37:b2:44:41:18:65:a3:07:21:73:76:86:d1:32:d8:00:fe: 73:4c:74:59:64:11:0b:3a:4f:6d:00:c1:f1:80:40:ba:df:ce: 87:62:ec:ef:7a:6a:35:26:23:7f:3d:60:62:79:1b:a0:e5:67: f0:7e:a8:58:ff:39:f3:54:97:c7:16:67:5a:47:53:d1:fc:09: 2a:05:c0:3c:3a:a2:96:a5:b1:bd:a3:f7:98:52:1e:9a:ff:df: 40:3d:25:aa:e8:fa:39:93:a9:21:6d:4f:aa:1f:01:90:e4:40: 0d:15:eb:70:a8:0d:ed:eb:ee:94:af:b7:80:5f:a2:f4:a5:9a: e9:a7:2c:a7:e9:d1:58:b6:85:c3:ab:07:ca:c6:fa:44:61:13: aa:e6:40:c9:a1:6f:18:11:61:17:a7:37:c4:d4:70:b0:c8:e6: 4c:05:b7:84:21:a9:32:26:5c:d0:27:4e:6e:b3:b4:d8:a8:c5: 93:1d:a5:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp9lB9YnOm65XF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGI4ZjI3MzEtMTBjMC00ZWRhLWI0OGQtZWU1NGFkMzNiOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ36iRuDEUX20/yvDa7r6MaldDeQdkeHqQsV dYp42DLQBDdL1HOFgLvuC0ksPcRztLQnWWX6tKx5s46ZIlE19mnmbJqazKK+8AEX agWcrt3qrs0DE242nkgTk4UcLX72Oysr72LXtPXrSsci6OEWqSP2pswCy20fXIF3 4Gg/wnQ73MmOh+Bbc0/5cuxoAYXrmiZ5sHfFwCyNKzNytcLDrPHo6rzlGONmV3Ae 0bENgXhgVYsX1CQB/TFsfeOzEYU8rzKl7X6is4vavJuJWM+IquBcibrhDLrnKLqN lit8P592N9hl3iSsoIlSuKMTStRGzMbtU7zTRVUG2GYp8Az3VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZglFzE+0u9VBWdvTbD7K8S7rVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E1MTliMWItMjE2NC0z ODdkLWE2OTYtOTJhM2JhNzEzYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANLwdL2MDtgQCJCEWkwnRQcTRCic+gDH82v5lgW3gSWQNGLUCu0o/Qte TGkilD0+SHoCw1WgAr56P1oEep8Cgv0xaDwOI8gJdH03skRBGGWjByFzdobRMtgA /nNMdFlkEQs6T20AwfGAQLrfzodi7O96ajUmI389YGJ5G6DlZ/B+qFj/OfNUl8cW Z1pHU9H8CSoFwDw6opalsb2j95hSHpr/30A9Jaro+jmTqSFtT6ofAZDkQA0V63Co De3r7pSvt4BfovSlmumnLKfp0Vi2hcOrB8rG+kRhE6rmQMmhbxgRYRenN8TUcLDI 5kwFt4QhqTImXNAnTm6ztNioxZMdpSE= -----END CERTIFICATE-----Generated at Tue Oct 21 19:39:41 2025 by rpki-client