$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aebe015a-7c30-3a64-85aa-c2be2175062f.roa File: aebe015a-7c30-3a64-85aa-c2be2175062f.roa (raw, json) Hash identifier: cHQaZG0vyWmyiDeRgCgAQ47yVinquBD5/bGDOJ12C/E= Subject key identifier: 57:41:26:42:43:FD:F8:98:69:E5:BA:10:72:41:70:23:6E:44:A7:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A97C085F89148C57AD7F92 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aebe015a-7c30-3a64-85aa-c2be2175062f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.25.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:7c:08:5f:89:14:8c:57:ad:7f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bfbc4577-631a-4f68-a75b-a12f4692449b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:08:9a:bf:b1:78:ac:16:d0:7e:c8:37:65: 07:d4:91:2f:82:af:fe:96:27:93:8c:8d:1c:cf:13: 0d:fb:7e:58:4e:8b:f2:d2:63:9d:aa:cc:c7:93:73: 29:75:81:ac:12:dc:7c:57:38:1b:57:b5:54:a2:e0: 9d:c8:fe:9f:07:44:45:d1:8d:5f:2b:ef:e3:a7:36: 33:0d:51:88:51:5e:3a:65:93:72:e6:e0:c4:65:6f: dd:ce:9c:12:96:06:54:28:8d:3c:85:c4:24:d3:71: a4:77:fa:c1:d5:39:10:47:06:0f:33:e0:8e:22:37: 59:ae:35:0c:38:b4:d4:2a:2d:0c:0c:f3:4c:ff:db: 0b:1d:eb:c6:53:6d:1b:8a:d9:ba:5a:69:af:6b:a7: 2b:a6:8c:08:6f:a1:81:93:68:3a:f8:81:e4:b0:d9: c7:2d:13:e7:9b:46:a5:12:3e:01:4a:66:86:26:69: fd:fc:5d:54:a5:8b:4e:d2:ac:93:af:17:55:20:a9: c8:dc:f3:77:6d:6e:11:30:2b:11:8f:47:4f:a3:28: 82:8b:88:db:d3:94:e8:bf:ee:ef:c5:ed:86:50:e5: de:69:e5:4d:97:05:5f:10:6f:30:41:f6:8a:76:19: 78:1d:81:71:c8:f5:e9:87:e6:ef:34:56:17:fe:cd: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:41:26:42:43:FD:F8:98:69:E5:BA:10:72:41:70:23:6E:44:A7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aebe015a-7c30-3a64-85aa-c2be2175062f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.25.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:36:cb:df:3c:79:95:02:29:5d:3c:ac:cc:1f:1a:98:a3:d9: 47:46:96:3b:c5:0e:4a:d9:00:14:ed:67:79:f9:e3:9a:6a:02: 38:27:2a:27:a5:31:9a:13:21:d9:4d:d5:e8:80:db:5c:1d:c3: 69:97:a0:fa:cd:75:03:54:ba:52:b7:04:d3:a2:24:4a:36:ee: 23:1e:3a:bd:0b:a5:47:6d:f6:c1:18:65:a3:b8:49:42:fb:cc: b7:74:7d:fc:2a:29:80:41:a8:3b:da:d7:9c:06:75:b8:40:58: 78:9a:99:f5:1e:4b:54:e6:6f:16:bd:bd:80:a3:d7:5d:59:0a: 12:f8:ff:d6:df:7a:84:e9:b4:a6:a9:f1:4e:bd:4e:98:95:64: 24:4b:fe:ef:fc:05:48:90:e0:95:5b:a0:a9:86:2b:1b:9a:34: 3a:09:a6:04:57:12:c9:2d:0d:70:f0:22:e8:2c:16:b2:55:7b: 50:dd:af:e1:0e:21:e0:b2:65:c2:fb:20:7e:3b:e6:3e:88:89: c3:f3:11:b0:08:19:e1:4e:bb:c1:0e:66:a4:56:54:36:bd:8f: 96:d2:32:23:16:82:c9:6f:b7:c9:8e:b3:13:84:bc:b8:05:4d: dd:22:fb:cd:4d:03:57:ae:4d:21:75:91:01:a1:fd:c4:31:0e: 51:79:a8:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqXwIX4kUjFetf5IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmZiYzQ1NzctNjMxYS00ZjY4LWE3NWItYTEyZjQ2OTI0NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnggImr+xeKwW0H7IN2UH1JEvgq/+lieTjI0c zxMN+35YTovy0mOdqszHk3MpdYGsEtx8VzgbV7VUouCdyP6fB0RF0Y1fK+/jpzYz DVGIUV46ZZNy5uDEZW/dzpwSlgZUKI08hcQk03Gkd/rB1TkQRwYPM+COIjdZrjUM OLTUKi0MDPNM/9sLHevGU20bitm6Wmmva6crpowIb6GBk2g6+IHksNnHLRPnm0al Ej4BSmaGJmn9/F1UpYtO0qyTrxdVIKnI3PN3bW4RMCsRj0dPoyiCi4jb05Tov+7v xe2GUOXeaeVNlwVfEG8wQfaKdhl4HYFxyPXph+bvNFYX/s35pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdBJkJD/fiYaeW6EHJBcCNuRKe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWViZTAxNWEtN2MzMC0z YTY0LTg1YWEtYzJiZTIxNzUwNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk2y988eZUCKV08rMwfGpij2UdGljvFDkrZABTtZ3n545pqAjgnKiel MZoTIdlN1eiA21wdw2mXoPrNdQNUulK3BNOiJEo27iMeOr0LpUdt9sEYZaO4SUL7 zLd0ffwqKYBBqDva15wGdbhAWHiamfUeS1Tmbxa9vYCj111ZChL4/9bfeoTptKap 8U69TpiVZCRL/u/8BUiQ4JVboKmGKxuaNDoJpgRXEsktDXDwIugsFrJVe1Ddr+EO IeCyZcL7IH475j6IicPzEbAIGeFOu8EOZqRWVDa9j5bSMiMWgslvt8mOsxOEvLgF Td0i+81NA1euTSF1kQGh/cQxDlF5qBc= -----END CERTIFICATE-----Generated at Tue Oct 21 21:58:00 2025 by rpki-client