$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa29d41b-6b3b-37e6-91b6-ab705e06de83.roa File: aa29d41b-6b3b-37e6-91b6-ab705e06de83.roa (raw, json) Hash identifier: ZOq+gDRaoVPdhotZQ8+GjrNfhbDvgGR/VvxgQSPqt3Y= Subject key identifier: B4:AB:16:0F:E7:1F:78:E7:4F:01:94:5D:A3:F7:BC:63:93:57:D2:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA056C77FE8058BEFC4980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa29d41b-6b3b-37e6-91b6-ab705e06de83.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.249.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:05:6c:77:fe:80:58:be:fc:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=36bbf547-a00d-4720-80e5-55957342c0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f2:a4:e2:74:0c:db:cb:22:a1:f2:ea:97:37: fe:d0:a1:fd:48:b9:d5:15:f8:59:cd:1e:f3:87:01: 33:2f:7a:d1:a0:87:53:b6:3b:e3:b9:6c:45:eb:78: 0c:d6:17:90:5c:15:af:1e:4f:d8:fd:80:c9:e1:1e: 1a:aa:a9:ff:74:2c:94:41:32:23:60:66:c0:aa:bc: ee:72:01:ef:00:67:e0:f7:47:f7:9c:a2:b8:4a:22: 34:62:78:3a:23:d2:6c:eb:db:61:9e:92:ad:31:55: eb:8d:44:50:07:b8:6e:06:03:bc:94:02:00:f8:36: 0d:42:79:60:39:02:f0:f1:45:a4:55:a9:cc:62:96: bd:a8:4c:a1:f9:0e:50:c7:7c:20:05:66:a0:67:67: 67:e2:84:5e:af:5f:0d:f6:7d:96:53:fd:91:0a:d0: 7b:5b:8d:db:b7:00:d1:67:73:b5:b8:38:64:a8:bc: b7:b3:33:2d:a1:8f:71:d1:a5:cc:31:82:d4:1a:c0: 8c:5b:b8:a7:76:ef:c3:21:b4:d1:cb:88:df:8e:a7: a4:15:d2:af:5d:08:75:e6:01:6f:51:1d:22:87:01: 2e:9f:02:ff:c4:de:6d:6b:8d:c6:2b:92:8c:0a:8e: 15:e7:df:4b:84:c3:56:00:66:ca:b6:0f:99:1f:44: a1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AB:16:0F:E7:1F:78:E7:4F:01:94:5D:A3:F7:BC:63:93:57:D2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa29d41b-6b3b-37e6-91b6-ab705e06de83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.249.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:81:2d:9c:62:ff:d9:93:42:3b:ff:d3:d2:6c:f6:11:a7:ea: 35:36:9c:20:c5:e2:01:86:a3:88:24:c2:5a:ad:cf:f3:3c:85: c9:30:fa:d2:b8:03:3d:52:79:1b:70:f4:b1:e1:13:25:61:3f: 48:2e:51:20:b7:d1:41:4a:87:fb:a2:c6:35:c2:00:62:f0:e4: c0:53:b4:da:a4:26:62:6a:f2:37:13:59:f1:d3:32:96:3c:33: fb:ca:5a:d1:57:a2:bc:97:8c:69:1c:87:f7:fa:47:99:98:b8: ee:21:82:7c:54:f4:30:19:52:8d:7c:13:78:41:5e:91:3b:04: 89:52:b3:57:ac:9b:d3:5a:7c:f4:a0:d2:8b:4c:19:86:a4:fb: e3:08:e4:6a:e8:8a:fe:ca:ed:40:fd:53:37:de:43:9f:6a:fe: 23:14:d6:31:ff:2f:62:57:8d:84:b3:73:02:1c:3d:ce:a8:05: 50:69:3f:71:4b:0d:2a:56:5e:e8:d3:65:e1:bd:32:97:40:54: 4d:d9:8e:6d:32:46:f9:8b:5f:40:88:7a:0b:28:9b:a8:52:cc: 7c:3a:dc:73:ce:0d:5b:81:47:d1:58:20:ee:b7:7f:a3:f4:d8: d5:d5:c7:b6:1a:7f:6e:bb:07:ea:4d:39:a1:2b:a4:ad:b9:15: 32:ec:32:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqgVsd/6AWL78SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzZiYmY1NDctYTAwZC00NzIwLTgwZTUtNTU5NTczNDJjMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvKk4nQM28siofLqlzf+0KH9SLnVFfhZzR7z hwEzL3rRoIdTtjvjuWxF63gM1heQXBWvHk/Y/YDJ4R4aqqn/dCyUQTIjYGbAqrzu cgHvAGfg90f3nKK4SiI0Yng6I9Js69thnpKtMVXrjURQB7huBgO8lAIA+DYNQnlg OQLw8UWkVanMYpa9qEyh+Q5Qx3wgBWagZ2dn4oRer18N9n2WU/2RCtB7W43btwDR Z3O1uDhkqLy3szMtoY9x0aXMMYLUGsCMW7indu/DIbTRy4jfjqekFdKvXQh15gFv UR0ihwEunwL/xN5ta43GK5KMCo4V599LhMNWAGbKtg+ZH0ShKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSrFg/nH3jnTwGUXaP3vGOTV9LWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEyOWQ0MWItNmIzYi0z N2U2LTkxYjYtYWI3MDVlMDZkZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaBLZxi/9mTQjv/09Js9hGn6jU2nCDF4gGGo4gkwlqtz/M8hckw+tK4 Az1SeRtw9LHhEyVhP0guUSC30UFKh/uixjXCAGLw5MBTtNqkJmJq8jcTWfHTMpY8 M/vKWtFXoryXjGkch/f6R5mYuO4hgnxU9DAZUo18E3hBXpE7BIlSs1esm9NafPSg 0otMGYak++MI5Groiv7K7UD9UzfeQ59q/iMU1jH/L2JXjYSzcwIcPc6oBVBpP3FL DSpWXujTZeG9MpdAVE3Zjm0yRvmLX0CIegsom6hSzHw63HPODVuBR9FYIO63f6P0 2NXVx7Yaf267B+pNOaErpK25FTLsMsM= -----END CERTIFICATE-----Generated at Tue Oct 21 22:15:01 2025 by rpki-client