$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84000f4f-3f67-3970-9fc4-4107d8e21820.roa File: 84000f4f-3f67-3970-9fc4-4107d8e21820.roa (raw, json) Hash identifier: yN2uVHXa4+SRXqTiDxJcD4NR+9J7Jpu6KmAnIlYyiys= Subject key identifier: 60:1F:1E:80:3A:5C:56:57:41:8B:2E:5E:33:2D:75:74:22:FD:EC:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9730E6C2CBB9731A47EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84000f4f-3f67-3970-9fc4-4107d8e21820.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.164.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:73:0e:6c:2c:bb:97:31:a4:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=59ce86e9-00d1-4d54-93e0-ddf179106729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:d9:94:d0:c9:3c:b4:dd:ad:bd:04:2f:f6: d0:26:c8:11:4d:5e:b0:ec:b0:f2:4a:8e:b4:e1:26: 59:7a:8e:d1:2a:26:6a:0a:3f:b3:e7:98:da:40:ac: b7:ba:4e:0b:4b:3e:b4:52:fb:bc:8f:07:af:b6:65: 47:b5:0e:62:96:eb:fc:03:c3:d3:e5:8d:8b:af:67: 62:41:35:22:cf:88:19:e4:4e:15:06:24:00:25:7a: 10:d4:3d:bd:f0:3c:0c:f4:85:9b:b0:34:53:ae:fc: e0:1d:1b:80:f9:3b:56:87:08:91:0c:b8:6f:28:3e: b1:8f:7c:47:e6:84:73:14:6b:4a:e4:64:e4:35:18: ec:3b:30:23:92:6c:2c:fb:52:d1:71:6d:c1:05:20: c0:8b:44:37:98:3b:a3:49:59:e9:1d:e4:69:a9:ab: f3:bf:e8:0b:be:78:e7:80:af:a5:7b:de:87:22:72: 83:cd:3d:32:61:c5:fa:f7:de:dc:c4:39:93:fa:85: 37:25:14:3d:e5:6c:1a:21:17:43:73:12:f5:96:60: f2:8a:fb:30:65:fb:8e:be:3a:1d:ec:6c:ca:51:38: 5f:74:5a:49:e6:88:59:c1:fb:3c:47:79:b8:e3:63: fe:bf:b5:3c:f6:56:ac:6f:71:63:4d:c4:0e:2e:20: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:1E:80:3A:5C:56:57:41:8B:2E:5E:33:2D:75:74:22:FD:EC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84000f4f-3f67-3970-9fc4-4107d8e21820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.164.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:12:b1:0f:58:b7:50:11:07:01:42:56:49:5d:33:a6:ba:ec: f4:f6:c2:40:80:8a:1b:f7:26:c5:b7:f0:08:d4:d9:dc:e6:16: 2a:91:34:82:96:97:7c:7d:fe:c2:b7:10:7a:b9:f4:59:b1:f2: e4:7f:54:87:ff:96:96:c2:b9:a9:4c:00:b8:1b:43:82:eb:e4: 0c:77:3e:ff:04:9d:84:31:f4:18:7d:5c:28:3a:67:08:8e:c8: e5:17:2d:6d:ae:9f:da:ab:2c:2d:87:cb:82:b8:07:55:9b:a6: 67:c5:b4:0e:b4:94:50:85:4c:d9:6f:0a:7f:28:96:89:16:13: 3d:28:f1:6d:24:e0:c4:fc:22:53:c1:29:f9:ca:de:d6:f6:d4: a2:7f:49:3b:83:dd:78:91:47:5f:36:4f:9b:b5:0c:05:62:c5: e6:4a:56:cc:a7:0f:5a:30:f8:a4:ef:bd:74:70:7b:a3:a5:7d: 2e:e8:ae:47:63:4f:14:2a:de:15:6f:0d:16:ba:5a:86:d9:41: 4a:4e:c5:b3:55:16:f6:4d:e4:6a:0c:c2:22:bb:2c:dc:57:18: d9:0f:22:cd:0d:1b:82:6f:f0:64:9d:c4:be:fb:ab:bc:47:0f: 82:b8:31:04:a0:26:d3:7a:d0:37:8d:a4:de:65:11:a0:83:6d: 20:9f:3c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqXMObCy7lzGkfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTljZTg2ZTktMDBkMS00ZDU0LTkzZTAtZGRmMTc5MTA2NzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln3ZlNDJPLTdrb0EL/bQJsgRTV6w7LDySo60 4SZZeo7RKiZqCj+z55jaQKy3uk4LSz60Uvu8jwevtmVHtQ5iluv8A8PT5Y2Lr2di QTUiz4gZ5E4VBiQAJXoQ1D298DwM9IWbsDRTrvzgHRuA+TtWhwiRDLhvKD6xj3xH 5oRzFGtK5GTkNRjsOzAjkmws+1LRcW3BBSDAi0Q3mDujSVnpHeRpqavzv+gLvnjn gK+le96HInKDzT0yYcX6997cxDmT+oU3JRQ95WwaIRdDcxL1lmDyivswZfuOvjod 7GzKUThfdFpJ5ohZwfs8R3m442P+v7U89lasb3FjTcQOLiBncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAfHoA6XFZXQYsuXjMtdXQi/ewZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQwMDBmNGYtM2Y2Ny0z OTcwLTlmYzQtNDEwN2Q4ZTIxODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASaTbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN4SsQ9Yt1ARBwFCVkldM6a67PT2wkCAihv3JsW38AjU2dzmFiqRNIKW l3x9/sK3EHq59Fmx8uR/VIf/lpbCualMALgbQ4Lr5Ax3Pv8EnYQx9Bh9XCg6ZwiO yOUXLW2un9qrLC2Hy4K4B1WbpmfFtA60lFCFTNlvCn8olokWEz0o8W0k4MT8IlPB KfnK3tb21KJ/STuD3XiRR182T5u1DAVixeZKVsynD1ow+KTvvXRwe6OlfS7orkdj TxQq3hVvDRa6WobZQUpOxbNVFvZN5GoMwiK7LNxXGNkPIs0NG4Jv8GSdxL77q7xH D4K4MQSgJtN60DeNpN5lEaCDbSCfPCM= -----END CERTIFICATE-----Generated at Tue Oct 21 19:41:47 2025 by rpki-client