$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e8d434-ec51-37c2-bfab-46f698169bc4.roa File: 89e8d434-ec51-37c2-bfab-46f698169bc4.roa (raw, json) Hash identifier: VezTMXk6rb8Kpu/eNdm8Mz4k+kRB1hNFlP08YPyAzUs= Subject key identifier: 16:06:80:5D:4C:33:BB:78:DF:2A:E2:6F:91:EC:54:7E:FD:E6:A1:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8E2C3208D350D7C03FD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e8d434-ec51-37c2-bfab-46f698169bc4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 73.161.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:e2:c3:20:8d:35:0d:7c:03:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=209e2fe2-a4dc-4fb0-b10c-4a302ec3c301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:1f:47:f7:a1:ae:5c:33:bb:4e:20:5a:24: 1f:68:17:ee:86:55:c2:dc:cd:df:fd:a7:c4:d2:97: b1:7f:63:7c:dd:50:38:84:29:c5:51:01:06:73:c8: ef:31:f8:fe:a8:cb:ca:42:d7:96:0e:e4:af:2e:69: b4:66:fa:68:5f:b7:ba:f3:4d:f0:e4:55:54:21:61: d7:04:d9:76:73:1a:36:0e:7f:6e:8a:57:53:46:90: 21:0e:20:e8:24:eb:e8:96:f8:39:a6:43:7d:02:20: 02:c5:ec:16:90:6f:50:47:b1:7e:c9:04:75:fb:09: 33:ce:a7:c2:84:1c:65:8a:9d:7e:a8:83:a6:54:ae: b3:78:22:50:2e:91:ea:0f:72:4d:45:13:41:54:60: 37:9c:9c:9e:16:27:02:bc:72:f3:cb:22:04:32:ac: b8:ee:6c:19:e5:14:0b:55:49:f6:e2:2a:e1:f6:3b: a7:cf:dd:53:9c:dc:fe:29:ae:15:82:b9:e3:26:a6: f5:30:4e:d6:e0:88:8d:7a:1d:89:42:bd:e9:20:05: fd:8b:82:cf:e7:35:00:7b:15:b5:71:26:73:88:bf: 4f:da:54:31:2a:22:2d:c2:b3:6e:71:f2:00:22:39: 5c:0f:69:05:68:6b:63:37:ff:98:7a:02:2f:71:70: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:06:80:5D:4C:33:BB:78:DF:2A:E2:6F:91:EC:54:7E:FD:E6:A1:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89e8d434-ec51-37c2-bfab-46f698169bc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:20:ab:a7:86:49:e2:bb:3d:c7:ed:fe:b0:a1:7f:1a:7b:76: 4b:7d:34:be:17:62:47:ed:5d:9a:6b:9c:56:1e:f3:1a:94:67: 04:a9:8b:87:dd:44:71:1c:52:04:1e:a3:62:ef:b9:02:22:75: b1:62:95:c9:84:ef:3b:77:ec:61:2c:db:b6:49:3f:79:2b:17: ba:f4:08:1f:58:3e:c1:78:13:81:d5:1b:a3:70:87:54:79:24: e3:fc:47:b4:3a:6c:71:62:e7:1e:5c:36:08:c7:25:8b:cd:3a: 03:0b:83:25:03:a0:44:22:44:17:29:c2:f2:6a:1a:fe:f2:14: 25:64:7c:7c:46:f1:d9:e9:f1:e0:d9:37:4c:73:8b:98:22:c1: c1:7a:85:34:c8:96:77:6f:11:bd:a0:64:35:9f:b3:26:8a:fd: 31:97:fa:19:1d:32:9f:1e:3a:58:41:a8:ae:62:89:65:b2:d7: cb:3c:3e:15:34:78:ee:b1:04:36:55:f3:80:7a:97:30:11:59: 51:2f:1b:3c:e8:4b:dc:af:54:21:87:fb:09:2f:9b:43:03:a5: 2d:09:22:17:df:10:83:0b:87:7d:a3:ea:9b:78:03:d2:11:02: 00:bb:80:8b:a5:7c:4d:98:7d:78:96:58:5b:4c:4f:a0:70:cc: bd:21:41:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqOLDII01DXwD/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjA5ZTJmZTItYTRkYy00ZmIwLWIxMGMtNGEzMDJlYzNjMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOwfR/ehrlwzu04gWiQfaBfuhlXC3M3f/afE 0pexf2N83VA4hCnFUQEGc8jvMfj+qMvKQteWDuSvLmm0ZvpoX7e6803w5FVUIWHX BNl2cxo2Dn9uildTRpAhDiDoJOvolvg5pkN9AiACxewWkG9QR7F+yQR1+wkzzqfC hBxlip1+qIOmVK6zeCJQLpHqD3JNRRNBVGA3nJyeFicCvHLzyyIEMqy47mwZ5RQL VUn24irh9junz91TnNz+Ka4VgrnjJqb1ME7W4IiNeh2JQr3pIAX9i4LP5zUAexW1 cSZziL9P2lQxKiItwrNucfIAIjlcD2kFaGtjN/+YegIvcXAxwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYGgF1MM7t43yrib5HsVH795qECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODllOGQ0MzQtZWM1MS0z N2MyLWJmYWItNDZmNjk4MTY5YmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASaHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0gq6eGSeK7Pcft/rChfxp7dkt9NL4XYkftXZprnFYe8xqUZwSpi4fd RHEcUgQeo2LvuQIidbFilcmE7zt37GEs27ZJP3krF7r0CB9YPsF4E4HVG6Nwh1R5 JOP8R7Q6bHFi5x5cNgjHJYvNOgMLgyUDoEQiRBcpwvJqGv7yFCVkfHxG8dnp8eDZ N0xzi5giwcF6hTTIlndvEb2gZDWfsyaK/TGX+hkdMp8eOlhBqK5iiWWy18s8PhU0 eO6xBDZV84B6lzARWVEvGzzoS9yvVCGH+wkvm0MDpS0JIhffEIMLh32j6pt4A9IR AgC7gIulfE2YfXiWWFtMT6BwzL0hQXQ= -----END CERTIFICATE-----Generated at Tue Oct 21 19:40:04 2025 by rpki-client