$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac18fb46-c43f-32eb-8e8e-9370a86f915d.roa File: ac18fb46-c43f-32eb-8e8e-9370a86f915d.roa (raw, json) Hash identifier: 1SFmX57VgSzF510ZOfrvxs1bWSvesc8ztfxag0x6RC4= Subject key identifier: D0:14:A7:C2:34:1F:6C:77:5B:E1:FC:05:3D:BC:37:F4:D6:3B:E1:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7C4AFFB8394F32DDB9300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac18fb46-c43f-32eb-8e8e-9370a86f915d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.164.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:c4:af:fb:83:94:f3:2d:db:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=85c06e4d-f732-48a6-9868-7b1c8bcc6057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:fa:98:91:e6:5e:19:00:f4:de:dd:f6:30: 76:f5:6a:60:ae:47:62:3e:2e:3e:55:bb:9c:e5:4c: bc:70:ba:7f:64:7a:07:b8:ac:ef:32:84:4a:dc:78: 74:78:3f:e9:80:d9:6b:f7:70:7c:13:0e:16:f6:b7: d2:9a:4c:d2:5f:9b:09:6f:2b:24:58:d3:02:51:73: ae:72:07:a6:8a:a5:e0:d6:b7:de:4f:fe:42:21:23: 98:c5:02:97:d9:60:9c:75:0d:b2:dd:1e:bf:77:01: ac:bb:c3:58:4b:86:79:f2:ef:eb:33:82:fb:3e:88: f6:81:9b:48:b8:b3:7c:f7:38:d7:ad:56:d3:29:cc: e5:b0:a3:1c:07:fb:a9:98:a1:be:db:6d:88:4f:a9: c9:ba:ae:2b:11:a4:b0:8f:55:8d:9c:64:48:16:59: 09:d0:dd:c2:53:be:c4:54:4d:46:62:ea:46:9c:ab: 35:8c:34:8c:a5:80:75:f9:0d:30:83:de:9d:d3:d9: 58:6e:56:2c:fc:08:5e:60:a0:78:3d:d0:78:02:f3: ae:85:b0:4b:00:b6:8a:06:8d:67:41:7d:fc:62:d2: 35:d8:13:69:4c:cd:5f:44:4f:a8:05:f9:c4:8e:78: 5c:ee:ea:16:97:36:85:f3:3a:40:db:fe:98:36:68: 3f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:14:A7:C2:34:1F:6C:77:5B:E1:FC:05:3D:BC:37:F4:D6:3B:E1:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac18fb46-c43f-32eb-8e8e-9370a86f915d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.164.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2c:2c:92:60:f9:26:03:5a:a7:e2:2f:c3:a8:92:90:14:5b: 25:cb:33:3f:5c:b3:2a:23:ea:20:e8:38:c6:04:e8:22:d4:a0: 36:01:86:0b:cf:5c:1a:48:a0:c3:39:d7:a4:d5:e6:28:a8:bd: 2b:e9:b6:fc:d4:2d:42:e7:01:f4:3b:5d:34:80:85:07:19:1f: 19:2f:f6:cd:ac:7c:21:9f:83:fd:3a:74:e5:51:d6:bb:65:f2: e0:d6:87:f7:18:de:08:c5:ae:75:3a:e4:ea:4b:7d:71:bb:37: 28:e9:cf:96:5c:56:46:9f:cb:f4:22:a4:96:0d:8b:e3:60:57: 93:ad:17:a8:15:e2:e8:b6:d1:d1:2c:4a:ed:52:b0:27:10:37: ab:fe:45:86:26:74:6e:3a:eb:b4:50:42:96:d3:fb:e3:80:2d: 63:5d:74:74:aa:0a:4a:57:3e:0c:1c:b4:52:a7:ec:4e:ce:66: dd:24:3e:f8:87:f7:a4:14:87:00:b6:5f:93:b4:11:d5:38:20: 35:3f:64:7b:10:12:cf:23:42:d9:82:71:25:43:5f:9b:3f:da: f6:22:94:7c:e1:91:e2:31:a2:92:92:8b:a1:ce:69:5f:e5:c9: d4:c2:05:b6:db:42:a7:54:d2:93:65:90:e9:37:12:42:72:2a: bc:d1:57:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp8Sv+4OU8y3bkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODVjMDZlNGQtZjczMi00OGE2LTk4NjgtN2IxYzhiY2M2MDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfP6mJHmXhkA9N7d9jB29WpgrkdiPi4+Vbuc 5Uy8cLp/ZHoHuKzvMoRK3Hh0eD/pgNlr93B8Ew4W9rfSmkzSX5sJbyskWNMCUXOu cgemiqXg1rfeT/5CISOYxQKX2WCcdQ2y3R6/dwGsu8NYS4Z58u/rM4L7Poj2gZtI uLN89zjXrVbTKczlsKMcB/upmKG+222IT6nJuq4rEaSwj1WNnGRIFlkJ0N3CU77E VE1GYupGnKs1jDSMpYB1+Q0wg96d09lYblYs/AheYKB4PdB4AvOuhbBLALaKBo1n QX38YtI12BNpTM1fRE+oBfnEjnhc7uoWlzaF8zpA2/6YNmg/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAUp8I0H2x3W+H8BT28N/TWO+HNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWMxOGZiNDYtYzQzZi0z MmViLThlOGUtOTM3MGE4NmY5MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMsLJJg+SYDWqfiL8OokpAUWyXLMz9csyoj6iDoOMYE6CLUoDYBhgvP XBpIoMM516TV5iiovSvptvzULULnAfQ7XTSAhQcZHxkv9s2sfCGfg/06dOVR1rtl 8uDWh/cY3gjFrnU65OpLfXG7Nyjpz5ZcVkafy/QipJYNi+NgV5OtF6gV4ui20dEs Su1SsCcQN6v+RYYmdG4667RQQpbT++OALWNddHSqCkpXPgwctFKn7E7OZt0kPviH 96QUhwC2X5O0EdU4IDU/ZHsQEs8jQtmCcSVDX5s/2vYilHzhkeIxopKSi6HOaV/l ydTCBbbbQqdU0pNlkOk3EkJyKrzRV+Q= -----END CERTIFICATE-----Generated at Wed Oct 22 00:19:53 2025 by rpki-client