$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8518139c-5c90-34d6-b529-81dc7b2ae1d0.roa File: 8518139c-5c90-34d6-b529-81dc7b2ae1d0.roa (raw, json) Hash identifier: Sksh9vQRHKsiUXJDnYo7NoxJ2M5lyC+E7asJfyDtTog= Subject key identifier: E0:8E:7B:7B:06:C7:59:16:E1:07:66:E8:F8:89:18:90:1D:C8:09:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAB7C7FE2775A19CDAF280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8518139c-5c90-34d6-b529-81dc7b2ae1d0.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.32.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:b7:c7:fe:27:75:a1:9c:da:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=db4901bb-6e20-492f-b8c5-66418cdc4e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:40:bc:b4:df:ca:f7:a7:1a:da:2f:9a:69: 4c:91:e5:f0:19:c3:68:a8:65:06:f8:2e:e6:0b:73: be:37:9c:2c:a6:7a:50:89:3a:5d:79:3e:a8:e0:83: e7:ce:99:46:aa:76:1c:fe:cb:7c:0e:2a:68:0a:c1: a0:19:55:02:46:47:cb:bc:46:03:c5:09:3e:35:d0: 19:af:0a:56:03:c8:49:5e:ce:4e:81:d3:73:8a:51: 60:49:bf:5b:65:f0:99:7a:6a:4f:80:4f:ac:88:30: a8:80:d8:ff:37:cb:91:b2:54:ed:16:54:c2:01:b1: 4f:88:f3:52:23:5e:fd:67:1c:1f:3c:21:1e:32:79: ce:e7:79:90:ec:27:01:b1:42:42:e0:24:01:68:e3: 3c:c6:0e:cc:a0:d9:29:ba:39:d3:f3:50:95:bd:b6: 73:c8:9b:bc:6b:34:3e:2d:19:ca:bc:db:5d:9b:da: 2f:76:0c:6a:de:8f:c2:d0:1f:d1:b3:99:a0:60:db: 01:ba:ec:02:0d:5d:88:c5:26:76:db:0f:ee:ec:09: f4:92:0c:49:69:96:02:e6:a4:71:62:e5:79:e9:dd: 52:0b:56:4c:1b:bf:dc:5d:d7:ab:06:84:c1:3a:56: 74:6a:fd:f9:ec:26:9c:9b:e5:cc:88:3a:39:24:e0: 2e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8E:7B:7B:06:C7:59:16:E1:07:66:E8:F8:89:18:90:1D:C8:09:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8518139c-5c90-34d6-b529-81dc7b2ae1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.32.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7b:44:05:12:f2:21:90:54:c3:f8:e8:98:c3:83:ed:60:5a: e2:e8:f6:79:71:87:eb:b3:63:49:f8:4b:70:d6:8c:34:96:35: 8f:e3:91:9f:0e:ff:d3:36:17:9f:3b:2c:f6:4c:c8:46:02:3f: a0:cc:50:8c:1d:3a:9a:ef:b4:da:70:d8:55:14:5d:af:0a:52: 78:24:ed:d1:e0:29:d2:ff:ef:68:99:28:b8:a0:bd:0f:c2:d1: 6f:3f:94:72:a6:0f:95:0a:91:fb:3f:c6:9b:e9:74:4a:53:c5: 88:d4:da:6f:7f:b1:30:78:e5:c5:14:8a:34:96:fb:a3:d2:15: 7b:ed:7e:5b:2b:96:cd:e2:71:47:6e:40:c8:b5:23:81:3f:27: 85:66:37:cb:03:1e:83:fb:b2:8b:fd:51:ac:89:3f:2b:68:c1: e4:88:0a:61:9a:92:ec:5a:43:10:ed:93:93:42:23:83:72:25: 12:16:aa:bf:2e:5e:c1:99:24:cf:a3:3f:b8:f9:35:6c:90:af: 36:ae:8d:92:14:a0:04:31:68:fd:e1:02:e8:5b:fb:e9:81:72: af:bc:7f:9a:2d:be:bc:44:5b:56:c2:bc:c3:78:17:97:52:91: 20:69:5e:02:5a:4a:ca:5e:28:b1:bb:2e:dc:17:06:e4:ba:0b: 53:2b:03:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqrfH/id1oZza8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGI0OTAxYmItNmUyMC00OTJmLWI4YzUtNjY0MThjZGM0ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzxAvLTfyvenGtovmmlMkeXwGcNoqGUG+C7m C3O+N5wspnpQiTpdeT6o4IPnzplGqnYc/st8DipoCsGgGVUCRkfLvEYDxQk+NdAZ rwpWA8hJXs5OgdNzilFgSb9bZfCZempPgE+siDCogNj/N8uRslTtFlTCAbFPiPNS I179ZxwfPCEeMnnO53mQ7CcBsUJC4CQBaOM8xg7MoNkpujnT81CVvbZzyJu8azQ+ LRnKvNtdm9ovdgxq3o/C0B/Rs5mgYNsBuuwCDV2IxSZ22w/u7An0kgxJaZYC5qRx YuV56d1SC1ZMG7/cXderBoTBOlZ0av357Cacm+XMiDo5JOAuoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCOe3sGx1kW4Qdm6PiJGJAdyAmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODUxODEzOWMtNWM5MC0z NGQ2LWI1MjktODFkYzdiMmFlMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd7RAUS8iGQVMP46JjDg+1gWuLo9nlxh+uzY0n4S3DWjDSWNY/jkZ8O /9M2F587LPZMyEYCP6DMUIwdOprvtNpw2FUUXa8KUngk7dHgKdL/72iZKLigvQ/C 0W8/lHKmD5UKkfs/xpvpdEpTxYjU2m9/sTB45cUUijSW+6PSFXvtflsrls3icUdu QMi1I4E/J4VmN8sDHoP7sov9UayJPytoweSICmGakuxaQxDtk5NCI4NyJRIWqr8u XsGZJM+jP7j5NWyQrzaujZIUoAQxaP3hAuhb++mBcq+8f5otvrxEW1bCvMN4F5dS kSBpXgJaSspeKLG7LtwXBuS6C1MrA9E= -----END CERTIFICATE-----Generated at Tue Oct 21 19:33:12 2025 by rpki-client