$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/867e0a0d-0340-3227-b34d-0fa8a94aa0a1.roa File: 867e0a0d-0340-3227-b34d-0fa8a94aa0a1.roa (raw, json) Hash identifier: LWcKfcWKq0vvnaoRzOCw8iXuQSszR2WkoOqoBOF0494= Subject key identifier: 00:FD:9A:7D:33:A1:20:6A:44:D3:4A:E5:1D:82:18:C1:63:82:8C:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A81E9E74F8E461A1A8E100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/867e0a0d-0340-3227-b34d-0fa8a94aa0a1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.100.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:1e:9e:74:f8:e4:61:a1:a8:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8ad2c5b2-5a56-44ec-ad23-d8a0d5a09b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e8:67:1f:1b:4c:6a:0a:79:c2:5a:ed:52:2c: 3e:bf:70:3d:e7:c9:20:4f:ba:ed:9f:ac:a5:16:e1: 4c:7b:a1:7f:1f:ef:7f:4f:7d:d0:40:d6:d4:a8:61: 8d:f9:ad:04:b7:56:a9:ed:84:08:86:4f:39:d3:c1: be:2b:7c:fe:f4:42:b8:75:f9:6c:3a:bc:dc:e1:df: 02:43:54:a8:a1:f5:99:95:a6:98:e1:3b:14:8f:1b: 79:f8:0a:ad:3a:a0:29:29:fc:3f:93:83:44:06:8c: 94:31:4f:83:cb:14:ab:99:87:60:de:14:af:ea:d8: 7f:22:0e:ac:b3:89:0a:53:8c:40:c9:a0:f1:41:01: c9:2c:86:a9:62:a2:29:3a:8b:d4:31:36:b7:49:9e: 54:c5:00:69:b4:5e:29:ce:06:07:a7:7f:0c:3e:ce: 48:71:09:03:31:1b:73:74:66:74:4b:28:5f:20:94: 52:6d:f9:2b:58:3b:d9:a9:13:b5:7d:c2:0d:ea:bd: 7c:73:6e:a5:34:82:2f:3f:c2:8d:0a:66:34:04:21: 90:01:6a:8a:3b:41:df:6f:9c:69:3e:49:65:03:f9: 90:1e:bc:99:5d:74:e6:36:93:73:61:b0:d7:4e:13: 7a:88:59:d9:f9:59:73:3d:c3:e3:aa:22:93:46:c6: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FD:9A:7D:33:A1:20:6A:44:D3:4A:E5:1D:82:18:C1:63:82:8C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/867e0a0d-0340-3227-b34d-0fa8a94aa0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.100.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:a9:94:ae:94:d0:96:ae:b5:d8:0d:c8:e1:58:01:54:3d:bc: 8f:50:01:bc:01:c7:fb:96:ff:23:88:bb:1b:23:7f:25:e9:7b: 9f:17:a2:07:96:88:6d:87:ee:80:3f:bf:00:e7:90:22:cf:6d: 33:00:29:7e:ba:f4:4b:08:de:ab:2c:5c:27:69:e8:6b:8e:71: 14:a5:a4:95:01:d3:8b:ea:e2:9d:c5:20:7e:79:19:7c:6b:c4: 77:8d:c3:4c:d8:b2:19:15:e2:51:13:28:7d:31:c2:c3:cb:a5: 51:65:12:22:3f:4a:a9:3c:9d:26:f2:58:87:11:f4:47:cd:44: 08:3e:29:d8:d0:ed:df:bb:a2:b3:62:2a:6a:62:2b:cd:76:98: 18:3d:7b:1f:3d:2f:f0:6e:cc:f0:cd:03:6f:7c:2a:86:31:67: 51:38:63:be:95:45:91:f3:48:f0:8b:76:2a:82:b6:78:ac:79: 82:f1:c4:72:66:91:79:3f:2b:81:fc:35:6b:5f:da:99:4a:27: fc:a4:cc:35:56:b1:7f:01:94:fc:31:ae:f7:8f:64:e2:70:88: 6d:18:b5:6b:be:d3:a5:46:77:05:58:dd:58:07:c4:93:86:d0: e0:63:81:cb:dd:19:5e:dd:0a:d4:d8:9a:a2:c9:39:ab:ab:1d: 5f:51:9c:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqB6edPjkYaGo4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGFkMmM1YjItNWE1Ni00NGVjLWFkMjMtZDhhMGQ1YTA5YjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OhnHxtMagp5wlrtUiw+v3A958kgT7rtn6yl FuFMe6F/H+9/T33QQNbUqGGN+a0Et1ap7YQIhk8508G+K3z+9EK4dflsOrzc4d8C Q1SoofWZlaaY4TsUjxt5+AqtOqApKfw/k4NEBoyUMU+DyxSrmYdg3hSv6th/Ig6s s4kKU4xAyaDxQQHJLIapYqIpOovUMTa3SZ5UxQBptF4pzgYHp38MPs5IcQkDMRtz dGZ0SyhfIJRSbfkrWDvZqRO1fcIN6r18c26lNIIvP8KNCmY0BCGQAWqKO0Hfb5xp PkllA/mQHryZXXTmNpNzYbDXThN6iFnZ+VlzPcPjqiKTRsa/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD9mn0zoSBqRNNK5R2CGMFjgoz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY3ZTBhMGQtMDM0MC0z MjI3LWIzNGQtMGZhOGE5NGFhMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASWR9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANGplK6U0JautdgNyOFYAVQ9vI9QAbwBx/uW/yOIuxsjfyXpe58XogeW iG2H7oA/vwDnkCLPbTMAKX669EsI3qssXCdp6GuOcRSlpJUB04vq4p3FIH55GXxr xHeNw0zYshkV4lETKH0xwsPLpVFlEiI/Sqk8nSbyWIcR9EfNRAg+KdjQ7d+7orNi KmpiK812mBg9ex89L/BuzPDNA298KoYxZ1E4Y76VRZHzSPCLdiqCtniseYLxxHJm kXk/K4H8NWtf2plKJ/ykzDVWsX8BlPwxrvePZOJwiG0YtWu+06VGdwVY3VgHxJOG 0OBjgcvdGV7dCtTYmqLJOaurHV9RnLY= -----END CERTIFICATE-----Generated at Tue Oct 21 22:02:11 2025 by rpki-client