$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9452ddb0-ba4d-38d0-a859-d9f59da45d3a.roa File: 9452ddb0-ba4d-38d0-a859-d9f59da45d3a.roa (raw, json) Hash identifier: lOQUwfM1QawDbuNm8hpsKLqz/3k276g7UyklrRmGvfw= Subject key identifier: 3C:0D:4D:87:A8:96:BC:A2:7F:43:41:B9:7D:2D:4D:E4:D5:91:C0:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAB84E78B36C74A9E03C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9452ddb0-ba4d-38d0-a859-d9f59da45d3a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.32.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:b8:4e:78:b3:6c:74:a9:e0:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bdad2947-2ef7-4bcf-a658-270e08d1be30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:14:47:43:a8:73:b5:00:01:87:ea:e9:1c:f9: 82:02:7e:76:7d:55:b5:be:9c:b6:0e:d4:f4:85:c1: 69:c1:23:83:36:57:c8:87:d3:a7:10:77:66:fe:5a: f7:e7:a2:08:98:43:7e:4b:71:ab:07:9c:45:56:95: 4b:5e:c0:aa:f2:71:54:cb:b4:56:a8:ca:2d:53:18: a6:71:62:1b:52:62:32:37:00:d4:89:0e:a0:87:06: de:14:3d:9f:65:9c:4c:06:ef:ac:5e:55:17:01:37: 4a:ac:62:e3:0b:e5:d2:fd:3c:96:61:3b:0a:91:fc: 45:a0:fb:88:d5:b7:91:10:4d:17:1d:1d:00:ea:f6: 84:5f:76:8f:8a:6e:91:e1:a8:e6:2f:ef:da:d7:52: b6:3a:9d:29:aa:75:b6:37:6e:e4:8d:ea:37:08:1b: c2:4d:49:90:36:e5:6c:99:8f:dc:b1:7d:80:45:4a: 59:10:21:b1:ba:3f:41:4b:8a:9d:c2:96:22:65:c2: 83:0f:bf:8b:3e:17:73:06:6e:27:d6:dc:03:76:e3: 59:cb:2f:58:cb:4f:16:8b:6d:3f:9c:88:e3:75:a3: 7f:37:6b:b9:f8:24:d9:a7:eb:34:64:fa:ca:ab:02: 7f:0a:91:c0:66:0e:86:e6:b1:76:45:36:0b:17:d8: df:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0D:4D:87:A8:96:BC:A2:7F:43:41:B9:7D:2D:4D:E4:D5:91:C0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9452ddb0-ba4d-38d0-a859-d9f59da45d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.32.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:89:9c:5c:20:c8:33:1a:db:e4:42:7a:2b:69:3a:3a:0c:f7: 78:74:61:02:d7:b9:99:6a:3a:29:0d:2b:ff:74:cd:9a:d2:a4: c3:4a:84:fa:40:f9:3e:f0:6f:1e:4a:f6:a8:e4:5e:8b:d6:3b: b0:a9:a0:f3:f0:2a:39:7e:8b:76:99:c8:d0:73:67:aa:ff:9f: 64:65:e8:dc:2d:f2:12:d9:b3:54:18:28:60:e0:d8:75:0a:c7: 25:f6:50:44:13:ac:3d:7d:77:3c:d1:cb:c3:2c:06:43:e4:99: bf:18:01:de:28:95:4f:33:c9:60:fd:5a:d5:2a:32:77:ff:bb: 24:cb:90:66:37:9b:7d:2f:7c:21:f9:3d:dc:7f:7e:1e:d7:97: 50:b9:24:1f:27:98:1d:ef:1a:c6:89:57:55:99:d5:ae:e5:18: c5:68:3b:06:93:1f:27:ff:4a:db:52:a1:ff:61:36:2c:50:9f: bf:2a:98:36:3e:20:16:e1:a4:20:26:17:fe:42:aa:1b:0e:eb: d8:06:8a:dd:3f:6e:fd:a3:fd:7a:02:2f:cd:19:37:9b:80:65: 7b:13:12:79:8b:eb:27:5d:7e:55:19:96:3b:6d:11:ae:6a:87: 85:66:e7:76:c1:60:55:66:fe:ac:f5:a7:c7:13:f5:78:98:e6: 55:c4:af:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqrhOeLNsdKngPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmRhZDI5NDctMmVmNy00YmNmLWE2NTgtMjcwZTA4ZDFiZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBRHQ6hztQABh+rpHPmCAn52fVW1vpy2DtT0 hcFpwSODNlfIh9OnEHdm/lr356IImEN+S3GrB5xFVpVLXsCq8nFUy7RWqMotUxim cWIbUmIyNwDUiQ6ghwbeFD2fZZxMBu+sXlUXATdKrGLjC+XS/TyWYTsKkfxFoPuI 1beREE0XHR0A6vaEX3aPim6R4ajmL+/a11K2Op0pqnW2N27kjeo3CBvCTUmQNuVs mY/csX2ARUpZECGxuj9BS4qdwpYiZcKDD7+LPhdzBm4n1twDduNZyy9Yy08Wi20/ nIjjdaN/N2u5+CTZp+s0ZPrKqwJ/CpHAZg6G5rF2RTYLF9jfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwNTYeolryif0NBuX0tTeTVkcCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQ1MmRkYjAtYmE0ZC0z OGQwLWE4NTktZDlmNTlkYTQ1ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGJnFwgyDMa2+RCeitpOjoM93h0YQLXuZlqOikNK/90zZrSpMNKhPpA +T7wbx5K9qjkXovWO7CpoPPwKjl+i3aZyNBzZ6r/n2Rl6Nwt8hLZs1QYKGDg2HUK xyX2UEQTrD19dzzRy8MsBkPkmb8YAd4olU8zyWD9WtUqMnf/uyTLkGY3m30vfCH5 Pdx/fh7Xl1C5JB8nmB3vGsaJV1WZ1a7lGMVoOwaTHyf/SttSof9hNixQn78qmDY+ IBbhpCAmF/5CqhsO69gGit0/bv2j/XoCL80ZN5uAZXsTEnmL6yddflUZljttEa5q h4Vm53bBYFVm/qz1p8cT9XiY5lXEr9Y= -----END CERTIFICATE-----Generated at Tue Oct 21 19:21:10 2025 by rpki-client