$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96bf5fe1-35e6-3729-87c4-8bad4110e433.roa File: 96bf5fe1-35e6-3729-87c4-8bad4110e433.roa (raw, json) Hash identifier: eoYtInGLSqWcP3sqbpbDqwq2lccV+8lNzl2nY1zCF7c= Subject key identifier: 33:6B:84:5C:2D:65:17:C9:EB:F9:36:8A:EC:F6:5C:0B:7E:6E:7F:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9C8FE818B02CC98AEFFE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96bf5fe1-35e6-3729-87c4-8bad4110e433.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.126.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:c8:fe:81:8b:02:cc:98:ae:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=03ff7537-60a8-4bfe-89ac-6037dda3ddba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:32:a7:3c:11:7f:bc:69:ee:ef:f9:3f:46:dc: cb:3f:4e:2f:1c:d6:1c:aa:83:16:40:b7:ed:c3:7a: 29:2a:60:b5:52:18:2a:f3:eb:17:ef:f9:6f:18:f4: b0:02:67:fe:fa:6b:b3:5f:fb:88:81:fc:e5:0b:a6: dc:16:3e:e7:c6:ab:f1:7c:39:af:75:44:cf:95:de: ac:e6:f8:09:38:4c:61:51:cc:b8:83:b4:67:12:b1: af:8d:ee:47:c6:dc:a0:cf:ad:f1:e2:46:c0:5f:7c: 8b:3c:1a:60:12:1c:ca:aa:22:42:66:1b:eb:65:7d: 3a:39:7d:4e:3a:94:63:f4:b1:3b:c9:e5:e0:6d:e7: 62:22:60:05:d0:bf:41:db:3d:48:21:13:3b:5e:06: b2:82:21:52:a5:f0:74:0a:cc:92:74:01:02:d4:7c: f0:63:e1:87:df:8a:94:0f:f0:7c:c0:9a:68:24:da: b5:1d:fb:4d:3b:b0:b2:9d:49:d9:f5:40:83:5b:4e: 7a:d9:d4:3f:d6:14:ed:b1:e8:0c:4b:c6:13:9d:46: c2:82:d7:fa:97:6a:a1:3d:1c:95:83:79:c7:a6:92: 87:9a:4f:97:47:d8:be:eb:82:b9:a8:a2:6d:4c:ba: 44:a3:aa:31:e9:c6:ee:c5:75:fe:45:6e:90:02:ca: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6B:84:5C:2D:65:17:C9:EB:F9:36:8A:EC:F6:5C:0B:7E:6E:7F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96bf5fe1-35e6-3729-87c4-8bad4110e433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.126.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b0:b7:ac:9a:1b:d2:cf:e2:15:ba:e9:60:5e:05:c2:31:11: ac:50:13:f6:39:f9:e0:f3:2f:38:d9:80:cb:71:4e:6c:25:24: a9:cd:e4:07:b6:69:31:aa:ab:eb:64:6a:35:df:a3:04:bc:fb: 25:b5:2d:e3:01:93:ce:60:e5:2d:fb:17:91:ec:9d:04:c5:66: 75:de:be:a4:75:ca:2b:47:4a:6c:b5:0b:95:ce:68:07:08:70: c4:a4:80:bf:c9:4c:19:74:83:cc:c4:49:7e:ec:00:0a:2f:72: bf:53:8a:5c:50:ce:fe:91:ea:d2:f9:05:ce:4f:42:b4:9b:6b: d5:72:c9:47:dc:59:d6:35:be:a5:7f:82:8b:54:11:e4:29:16: ae:34:e5:f9:7d:54:ad:96:a2:df:52:71:86:b5:fa:77:7b:e2: 84:bc:12:ec:fa:80:11:98:41:37:19:d5:de:c1:38:69:79:14: 0c:5e:9f:74:4e:50:5e:ab:97:46:62:c3:16:fc:f5:5e:79:e2: 1d:89:fd:dc:6a:a2:9c:69:15:e0:23:31:0f:a2:31:ef:a2:9f: 6d:b3:25:b0:3c:be:30:b6:e5:e4:36:e7:c6:03:08:11:50:13: d7:5e:14:f5:42:a6:e8:e0:2e:3f:1f:33:9b:f3:10:15:0f:df: 14:54:5d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqcj+gYsCzJiu/+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDNmZjc1MzctNjBhOC00YmZlLTg5YWMtNjAzN2RkYTNkZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTKnPBF/vGnu7/k/RtzLP04vHNYcqoMWQLft w3opKmC1Uhgq8+sX7/lvGPSwAmf++muzX/uIgfzlC6bcFj7nxqvxfDmvdUTPld6s 5vgJOExhUcy4g7RnErGvje5Hxtygz63x4kbAX3yLPBpgEhzKqiJCZhvrZX06OX1O OpRj9LE7yeXgbediImAF0L9B2z1IIRM7XgaygiFSpfB0CsySdAEC1HzwY+GH34qU D/B8wJpoJNq1HftNO7CynUnZ9UCDW0562dQ/1hTtsegMS8YTnUbCgtf6l2qhPRyV g3nHppKHmk+XR9i+64K5qKJtTLpEo6ox6cbuxXX+RW6QAspxswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNrhFwtZRfJ6/k2iuz2XAt+bn/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTZiZjVmZTEtMzVlNi0z NzI5LTg3YzQtOGJhZDQxMTBlNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSX4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiwt6yaG9LP4hW66WBeBcIxEaxQE/Y5+eDzLzjZgMtxTmwlJKnN5Ae2 aTGqq+tkajXfowS8+yW1LeMBk85g5S37F5HsnQTFZnXevqR1yitHSmy1C5XOaAcI cMSkgL/JTBl0g8zESX7sAAovcr9TilxQzv6R6tL5Bc5PQrSba9VyyUfcWdY1vqV/ gotUEeQpFq405fl9VK2Wot9ScYa1+nd74oS8Euz6gBGYQTcZ1d7BOGl5FAxen3RO UF6rl0Ziwxb89V554h2J/dxqopxpFeAjMQ+iMe+in22zJbA8vjC25eQ258YDCBFQ E9deFPVCpujgLj8fM5vzEBUP3xRUXSY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:41:49 2025 by rpki-client