$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8a1393f-dce3-3b66-8190-42748d853f17.roa File: b8a1393f-dce3-3b66-8190-42748d853f17.roa (raw, json) Hash identifier: qDmcLhGR+zcobDTOG1/CyDZjXTevKoKDAILjfv7iyuU= Subject key identifier: 3E:1F:13:11:ED:D3:AC:84:CD:50:66:BA:78:B3:38:89:C2:11:7B:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A96C339FEAF5170AB37E12 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8a1393f-dce3-3b66-8190-42748d853f17.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.11.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:6c:33:9f:ea:f5:17:0a:b3:7e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=38eace47-164e-4301-8260-993e338a6992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:cb:bd:0f:12:14:4e:a8:62:3c:e0:ba:40: 7e:ac:fc:a9:e8:5d:e2:4d:38:55:ed:d8:85:20:86: 0b:59:c8:fe:c3:4d:f3:e9:74:e3:42:15:1b:80:e3: ee:a0:27:97:10:64:32:41:3c:5a:3d:49:ab:2b:88: 06:e0:be:71:c8:ff:fa:ad:31:70:c1:05:ae:dd:ef: 69:20:a6:8b:c2:95:65:cc:03:cc:c9:fb:45:98:6b: f3:08:5a:0c:e4:d9:d5:d9:de:2e:57:89:5d:6d:c7: 72:d1:55:49:f0:80:17:c3:ff:3a:9e:cc:72:5a:6c: 80:cb:2d:e5:72:fe:16:28:e3:fa:ae:11:44:b7:ac: 7a:5c:e0:05:3d:ed:15:85:b3:fe:98:9f:07:71:23: dc:c1:80:0e:16:74:29:9b:5d:5b:43:92:eb:06:e1: 9d:ed:58:c8:2f:50:94:20:89:d1:c2:4e:e8:74:f5: c7:00:12:fa:3d:15:d3:9e:d2:c9:eb:5b:0a:94:9f: 07:87:31:3c:00:73:9f:dc:70:1e:b8:f3:55:74:21: bb:c4:bb:41:94:ec:3c:39:66:e7:39:cf:be:27:be: b3:3f:59:6b:56:6b:59:d0:e3:b6:de:d2:66:20:9c: 7d:49:b7:dd:84:09:88:54:30:0e:ce:50:28:b8:4a: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1F:13:11:ED:D3:AC:84:CD:50:66:BA:78:B3:38:89:C2:11:7B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8a1393f-dce3-3b66-8190-42748d853f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.11.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:59:23:1f:56:b5:8d:50:b6:0b:a0:fd:83:2a:43:5e:cc:68: 12:f2:74:95:e4:d8:b2:3a:90:81:33:6c:5c:d0:ee:34:1a:2d: f4:91:77:8b:03:d2:bf:60:8b:36:91:c8:df:94:cd:e6:a1:2d: 64:12:97:53:19:d7:8f:0f:9c:b5:5a:ff:28:6f:ec:50:69:97: 3b:41:0a:ef:52:d1:29:2d:82:b7:5a:bf:96:25:b8:ba:4a:a9: ca:77:49:3f:4f:65:b9:8b:52:32:13:2f:61:6e:1a:e9:3d:b6: 72:bd:ac:0e:d9:e3:8c:2f:d5:07:63:22:0a:35:ed:da:59:a8: 03:1b:39:89:7b:09:ab:17:02:b9:1d:dd:42:9b:a9:52:b3:d3: e9:b4:88:73:0f:b8:c2:18:4b:8d:40:9b:c3:14:cc:08:73:b5: fb:09:c4:b8:87:10:d7:63:c7:0f:62:92:ee:79:ab:07:90:74: 29:28:66:bf:23:f1:6c:2b:f9:f0:98:d6:3f:69:26:30:76:65: 85:01:b2:24:f4:ba:cc:ab:ce:3e:6c:a8:44:20:7b:a6:ca:a6: 84:a7:22:77:90:ed:62:45:cc:ac:09:54:20:0e:9a:bb:77:07: c7:ae:ed:95:3a:db:1e:52:28:e9:40:1a:4f:c5:ff:63:00:bf: 42:a5:e3:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqWwzn+r1FwqzfhIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzhlYWNlNDctMTY0ZS00MzAxLTgyNjAtOTkzZTMzOGE2OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7jLvQ8SFE6oYjzgukB+rPyp6F3iTThV7diF IIYLWcj+w03z6XTjQhUbgOPuoCeXEGQyQTxaPUmrK4gG4L5xyP/6rTFwwQWu3e9p IKaLwpVlzAPMyftFmGvzCFoM5NnV2d4uV4ldbcdy0VVJ8IAXw/86nsxyWmyAyy3l cv4WKOP6rhFEt6x6XOAFPe0VhbP+mJ8HcSPcwYAOFnQpm11bQ5LrBuGd7VjIL1CU IInRwk7odPXHABL6PRXTntLJ61sKlJ8HhzE8AHOf3HAeuPNVdCG7xLtBlOw8OWbn Oc++J76zP1lrVmtZ0OO23tJmIJx9SbfdhAmIVDAOzlAouEo+8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4fExHt06yEzVBmunizOInCEXu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjhhMTM5M2YtZGNlMy0z YjY2LTgxOTAtNDI3NDhkODUzZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZZIx9WtY1Qtgug/YMqQ17MaBLydJXk2LI6kIEzbFzQ7jQaLfSRd4sD 0r9gizaRyN+UzeahLWQSl1MZ148PnLVa/yhv7FBplztBCu9S0Sktgrdav5YluLpK qcp3ST9PZbmLUjITL2FuGuk9tnK9rA7Z44wv1QdjIgo17dpZqAMbOYl7CasXArkd 3UKbqVKz0+m0iHMPuMIYS41Am8MUzAhztfsJxLiHENdjxw9iku55qweQdCkoZr8j 8Wwr+fCY1j9pJjB2ZYUBsiT0usyrzj5sqEQge6bKpoSnIneQ7WJFzKwJVCAOmrt3 B8eu7ZU62x5SKOlAGk/F/2MAv0Kl4wk= -----END CERTIFICATE-----Generated at Tue Oct 21 19:35:13 2025 by rpki-client