$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a17e14b8-2e01-355d-aec3-b6ca728a427c.roa File: a17e14b8-2e01-355d-aec3-b6ca728a427c.roa (raw, json) Hash identifier: QcbwI9GrN7cz/zB4XJymgEntJ3Xzgf6Tj0sDDxKttPI= Subject key identifier: 22:1B:37:6C:44:A4:7A:7A:91:EF:9B:2F:C0:20:4C:33:8E:66:65:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A87826874FDF985C9E8880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a17e14b8-2e01-355d-aec3-b6ca728a427c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.89.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:78:26:87:4f:df:98:5c:9e:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=6da5563d-93f8-48df-be0f-7844aa068a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:c1:9b:eb:d3:f5:2d:01:b5:c2:c4:7e:8b: 10:61:cb:d3:53:63:4f:2f:5a:40:17:b7:25:ab:fd: 8c:54:01:de:ce:ea:53:60:63:6d:54:10:0c:fb:31: 98:77:35:9e:f1:f3:42:95:dd:5d:b1:ab:14:4f:98: 9d:c9:f0:47:71:fe:e3:35:79:91:f1:2c:c2:0f:86: 2b:0f:d0:b6:c1:a4:df:7a:23:81:1c:ff:39:65:73: 8a:2b:c3:f6:35:a2:27:13:3c:a3:69:91:9e:61:ad: 07:37:8a:76:71:05:c0:73:30:ee:7e:d3:86:61:b6: f8:64:1c:ae:03:a8:9b:e2:0a:3e:31:c7:53:f9:05: 42:6b:0e:db:6f:66:91:b0:50:c2:cc:3a:3f:27:c0: e1:8c:5b:f0:8b:99:f1:f4:dc:6d:9b:76:d2:be:c8: d0:cf:2b:88:a1:d0:a4:84:66:87:b6:28:9e:d8:bc: f3:3b:bb:dd:46:cb:ff:91:b3:a5:b7:fb:35:6b:36: 6b:1b:89:f5:60:da:8b:4c:4a:b8:8a:97:80:ee:1a: 28:0f:78:3e:1a:f1:9d:fe:5d:6a:4f:22:95:08:d6: 7c:d1:ed:ae:9a:05:ab:b0:c8:44:0f:dc:6e:ae:b3: 29:89:8b:9b:93:63:37:fd:58:7a:fa:fd:fb:06:c1: d0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1B:37:6C:44:A4:7A:7A:91:EF:9B:2F:C0:20:4C:33:8E:66:65:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a17e14b8-2e01-355d-aec3-b6ca728a427c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.89.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ea:e0:0d:10:32:f6:1a:04:ca:82:07:e3:39:e0:f3:df:c4: 57:97:e8:8f:2e:09:9f:e4:de:10:c9:d5:06:76:d1:20:5d:c2: 87:ba:ec:44:24:fe:52:65:9c:aa:91:e6:28:a2:ce:bb:52:7c: ba:fc:9a:59:e1:ce:81:21:6c:41:93:e0:db:19:c4:1e:d5:e2: 06:27:61:11:54:e7:ef:99:3b:7c:aa:71:2d:1a:b7:6b:ed:6b: 61:72:3c:bf:43:6f:46:d1:f5:9f:d0:5a:63:e0:b0:31:93:62: 7a:13:fb:aa:3b:fd:95:1a:fa:cc:8b:97:52:74:48:5a:d3:98: 3f:5b:53:84:d1:37:27:0e:c7:8b:c2:8e:72:39:5b:df:25:2a: 78:85:8b:3f:5c:0e:8c:04:92:6c:04:c0:e8:55:44:dd:a8:38: 63:b7:fd:f3:f5:24:4d:43:b9:d4:52:5a:27:e9:8a:72:b5:a5: 2a:f0:57:f3:c3:a9:ba:0d:fd:96:08:4a:4e:de:00:1b:66:1b: a2:ad:3c:cd:8c:15:9d:c5:32:51:8e:75:dd:78:a4:90:ef:f8: 04:dc:bf:16:b7:8c:5e:37:8c:a4:50:d8:95:53:6a:be:f7:c5: f5:0e:65:2f:4f:9f:95:6d:6c:33:72:10:c9:bd:43:c9:86:30: af:6e:7f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqHgmh0/fmFyeiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NmRhNTU2M2QtOTNmOC00OGRmLWJlMGYtNzg0NGFhMDY4YTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3PBm+vT9S0BtcLEfosQYcvTU2NPL1pAF7cl q/2MVAHezupTYGNtVBAM+zGYdzWe8fNCld1dsasUT5idyfBHcf7jNXmR8SzCD4Yr D9C2waTfeiOBHP85ZXOKK8P2NaInEzyjaZGeYa0HN4p2cQXAczDuftOGYbb4ZByu A6ib4go+McdT+QVCaw7bb2aRsFDCzDo/J8DhjFvwi5nx9Nxtm3bSvsjQzyuIodCk hGaHtiie2LzzO7vdRsv/kbOlt/s1azZrG4n1YNqLTEq4ipeA7hooD3g+GvGd/l1q TyKVCNZ80e2umgWrsMhED9xurrMpiYubk2M3/Vh6+v37BsHQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIbN2xEpHp6ke+bL8AgTDOOZmWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE3ZTE0YjgtMmUwMS0z NTVkLWFlYzMtYjZjYTcyOGE0MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXq4A0QMvYaBMqCB+M54PPfxFeX6I8uCZ/k3hDJ1QZ20SBdwoe67EQk /lJlnKqR5iiizrtSfLr8mlnhzoEhbEGT4NsZxB7V4gYnYRFU5++ZO3yqcS0at2vt a2FyPL9Db0bR9Z/QWmPgsDGTYnoT+6o7/ZUa+syLl1J0SFrTmD9bU4TRNycOx4vC jnI5W98lKniFiz9cDowEkmwEwOhVRN2oOGO3/fP1JE1DudRSWifpinK1pSrwV/PD qboN/ZYISk7eABtmG6KtPM2MFZ3FMlGOdd14pJDv+ATcvxa3jF43jKRQ2JVTar73 xfUOZS9Pn5VtbDNyEMm9Q8mGMK9uf44= -----END CERTIFICATE-----Generated at Tue Oct 21 19:18:29 2025 by rpki-client