$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e24783a-0c55-3eaa-9268-e0137663a032.roa File: 7e24783a-0c55-3eaa-9268-e0137663a032.roa (raw, json) Hash identifier: i8e5ih6lT/rOuDBV7W2ZdyljfmpMZK8KRlEvLuKv2HM= Subject key identifier: F7:A1:E2:E8:66:45:6F:85:D3:91:67:26:D9:B7:87:2E:4A:82:ED:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9233090A5B3D2437EE080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e24783a-0c55-3eaa-9268-e0137663a032.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.32.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:23:30:90:a5:b3:d2:43:7e:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2f3a66be-3510-4c78-aadd-1c1039698b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:ac:f7:ce:fc:b0:c5:0e:79:c6:37:0c:f3: bc:93:94:66:0e:00:0c:a9:67:bc:da:19:c2:8e:90: 55:37:ab:29:08:3a:75:41:92:1a:6d:e0:df:08:2a: 3b:6f:90:e1:af:58:27:96:99:29:d7:36:0f:2a:ce: 01:87:18:97:ab:e9:4c:31:0a:16:51:10:61:f2:f3: 0c:22:d4:33:2e:ee:34:f9:d8:45:92:81:24:ae:b5: d1:0b:ca:f8:aa:3f:9b:e9:34:11:43:35:a9:25:51: 7d:88:c7:f9:c2:ce:f1:a3:93:98:3d:ff:2c:9b:d2: fb:24:1d:8f:9a:35:b4:b2:8b:c4:3f:3e:e1:03:d9: 72:4f:91:17:37:4a:83:53:94:3d:56:bc:81:0a:22: 9e:98:c5:2b:1c:40:f1:3d:02:13:67:02:0f:66:e1: 00:ee:1b:55:fb:ec:9c:2a:b4:ce:66:3e:54:bd:0b: d1:b6:39:ea:f3:3b:c5:9e:63:e7:40:f2:5e:fb:89: 4c:18:88:fa:0a:ed:0d:ff:b8:fe:85:73:4d:f5:82: 87:96:2d:83:4d:0c:12:d6:a1:a0:a8:53:58:62:32: 47:02:d5:d7:97:2f:1a:66:cd:e6:2c:68:4b:f7:a0: 8e:c6:e4:70:82:9f:ef:93:ba:51:b3:08:aa:9d:a4: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A1:E2:E8:66:45:6F:85:D3:91:67:26:D9:B7:87:2E:4A:82:ED:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e24783a-0c55-3eaa-9268-e0137663a032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.32.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:bb:e7:b1:40:6a:07:4a:64:a0:17:9f:dc:0f:78:b8:37:36: bc:2d:8b:b8:31:5f:7f:5f:5a:a9:2f:20:2b:81:ec:61:4a:e8: a8:8c:1c:40:fb:a0:85:9f:2f:f2:08:9c:ca:c3:43:6a:1e:5b: 6d:dd:ca:8e:55:fc:48:24:2a:38:35:29:64:1d:03:de:ce:4d: 9e:ed:0d:a6:6a:77:e6:45:e8:5a:42:b5:04:bf:af:c4:e9:e2: 2a:f6:93:49:a5:11:eb:b7:3b:09:a4:4e:d0:48:4f:79:76:64: 70:57:2a:59:84:5d:19:a2:b2:97:52:ec:d7:d7:b0:2f:43:18: 56:93:c5:f1:35:f9:cb:61:93:1d:69:47:eb:ef:fd:bf:a9:7b: 20:35:c7:db:24:3d:89:21:59:20:81:0e:13:88:e3:51:1d:93: 1b:bc:77:43:28:ba:75:38:ea:0b:d5:ec:6d:29:6a:07:a4:ae: c7:f9:2a:5d:7d:38:15:4d:f3:84:1e:65:b6:a2:44:fa:a3:72: 04:3d:bd:93:ec:b4:43:fb:ea:db:e3:10:e8:ec:af:ab:9c:39: 4a:0c:98:47:8e:cc:16:8a:55:be:17:b6:27:7e:e0:73:e1:f8: b2:c9:81:15:b7:54:f8:80:22:55:cd:67:98:23:ad:74:fe:7e: fa:fb:29:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqSMwkKWz0kN+4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmYzYTY2YmUtMzUxMC00Yzc4LWFhZGQtMWMxMDM5Njk4YjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh6s9878sMUOecY3DPO8k5RmDgAMqWe82hnC jpBVN6spCDp1QZIabeDfCCo7b5Dhr1gnlpkp1zYPKs4BhxiXq+lMMQoWURBh8vMM ItQzLu40+dhFkoEkrrXRC8r4qj+b6TQRQzWpJVF9iMf5ws7xo5OYPf8sm9L7JB2P mjW0sovEPz7hA9lyT5EXN0qDU5Q9VryBCiKemMUrHEDxPQITZwIPZuEA7htV++yc KrTOZj5UvQvRtjnq8zvFnmPnQPJe+4lMGIj6Cu0N/7j+hXNN9YKHli2DTQwS1qGg qFNYYjJHAtXXly8aZs3mLGhL96COxuRwgp/vk7pRswiqnaTvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeh4uhmRW+F05FnJtm3hy5Kgu14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2UyNDc4M2EtMGM1NS0z ZWFhLTkyNjgtZTAxMzc2NjNhMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe757FAagdKZKAXn9wPeLg3Nrwti7gxX39fWqkvICuB7GFK6KiMHED7 oIWfL/IInMrDQ2oeW23dyo5V/EgkKjg1KWQdA97OTZ7tDaZqd+ZF6FpCtQS/r8Tp 4ir2k0mlEeu3OwmkTtBIT3l2ZHBXKlmEXRmispdS7NfXsC9DGFaTxfE1+cthkx1p R+vv/b+peyA1x9skPYkhWSCBDhOI41Edkxu8d0MounU46gvV7G0pagekrsf5Kl19 OBVN84QeZbaiRPqjcgQ9vZPstEP76tvjEOjsr6ucOUoMmEeOzBaKVb4Xtid+4HPh +LLJgRW3VPiAIlXNZ5gjrXT+fvr7KXo= -----END CERTIFICATE-----Generated at Tue Oct 21 22:06:49 2025 by rpki-client