$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf624f1-7c54-373e-aaeb-ffcb05ee4fa1.roa File: baf624f1-7c54-373e-aaeb-ffcb05ee4fa1.roa (raw, json) Hash identifier: eT6+lT7xWSpimPMY3hvDJCFcT4xDsCN4fpcv4mWz/c4= Subject key identifier: D4:C1:A2:97:A1:47:BF:B5:32:9D:59:37:F6:A2:2F:0E:E7:EA:6A:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA1387F0FB70075FA5F840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf624f1-7c54-373e-aaeb-ffcb05ee4fa1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.47.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:13:87:f0:fb:70:07:5f:a5:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=84402175-d39c-449f-be4d-25fa5d3ebcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:a7:89:ad:27:73:8e:c0:2b:25:73:d4:c0: a1:5c:58:19:2b:72:bb:b2:76:8f:4c:7e:fb:59:dc: 20:17:96:36:dc:fd:10:84:cb:03:9f:71:b2:e9:b1: 2d:5a:70:11:8e:4d:a4:77:57:7b:03:d8:17:da:88: 34:34:49:0a:f2:55:f0:6e:eb:2e:1a:8a:d8:4f:3c: 33:b0:8b:80:cb:88:33:46:4d:60:aa:45:ba:69:9e: 11:87:da:f4:4b:d2:cf:a2:93:b2:57:e9:29:09:30: 8d:38:fe:03:9b:7a:68:ae:b0:d5:5b:8b:33:45:f5: 3a:46:51:6b:b3:61:47:a8:83:9d:a3:8d:37:58:5c: ba:03:e6:22:64:65:80:85:6c:93:47:ca:65:f5:42: d5:86:2e:bb:71:46:7c:9e:c2:05:ff:48:2b:6f:0d: 4f:70:c0:0d:54:c8:1f:c6:de:da:d2:1a:5f:24:af: 9a:b0:73:c3:50:ee:e9:71:e1:4f:d2:1e:05:9d:ad: 80:de:57:c1:fc:26:2e:6d:66:d4:dd:34:1e:24:11: 10:e1:98:d1:e7:45:ca:97:69:ac:c9:71:4d:69:bf: 95:db:2a:91:e6:19:dd:5e:04:bc:0a:54:1a:36:d1: 4a:ff:54:b7:ec:92:cb:55:c3:f2:1f:4c:ac:a4:f3: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C1:A2:97:A1:47:BF:B5:32:9D:59:37:F6:A2:2F:0E:E7:EA:6A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf624f1-7c54-373e-aaeb-ffcb05ee4fa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.47.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:cc:f0:4c:4b:5c:b6:4c:34:26:1d:98:d7:9b:34:57:b5:da: e2:53:19:09:9c:0a:b8:6b:aa:c4:d2:91:f5:43:c0:30:02:3e: d3:c3:9b:e8:03:2e:ec:1d:0e:75:e5:cf:cc:b1:8f:cb:2a:7a: 9a:de:87:48:37:95:da:c2:39:88:25:ed:3a:d7:55:d3:f0:c5: f2:1f:f8:2f:aa:90:70:71:d3:2d:a1:e7:ac:de:50:e3:8c:ce: 70:3f:00:5b:f9:33:6f:cb:23:7f:79:1f:07:db:31:16:bb:67: fa:5d:ef:7e:78:9c:89:1f:ff:3a:31:aa:c0:94:73:2f:e0:ca: 84:63:64:df:3e:f7:53:61:2f:5f:c4:51:2f:01:76:d0:af:84: 9f:6d:9d:fb:61:ab:19:c9:f0:aa:27:42:4d:f9:28:bb:af:df: 29:44:1f:c0:4b:61:f7:de:aa:a9:69:16:93:68:b7:79:86:ca: 6f:be:80:e6:70:be:ff:6a:69:b5:99:11:74:97:e6:dc:f7:5a: 76:bb:16:bb:31:ee:2f:b6:91:78:30:16:a6:1b:26:0e:d9:27: fa:9b:ed:e8:5c:40:ca:df:7d:95:e0:e2:6f:c3:07:67:8a:cb: f1:93:3c:d5:38:24:2a:c5:34:8d:c2:69:d2:43:e5:9c:3d:53: ef:2a:a3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqhOH8PtwB1+l+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODQ0MDIxNzUtZDM5Yy00NDlmLWJlNGQtMjVmYTVkM2ViY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ynia0nc47AKyVz1MChXFgZK3K7snaPTH77 WdwgF5Y23P0QhMsDn3Gy6bEtWnARjk2kd1d7A9gX2og0NEkK8lXwbusuGorYTzwz sIuAy4gzRk1gqkW6aZ4Rh9r0S9LPopOyV+kpCTCNOP4Dm3porrDVW4szRfU6RlFr s2FHqIOdo403WFy6A+YiZGWAhWyTR8pl9ULVhi67cUZ8nsIF/0grbw1PcMANVMgf xt7a0hpfJK+asHPDUO7pceFP0h4Fna2A3lfB/CYubWbU3TQeJBEQ4ZjR50XKl2ms yXFNab+V2yqR5hndXgS8ClQaNtFK/1S37JLLVcPyH0yspPPxvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTBopehR7+1Mp1ZN/aiLw7n6mq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFmNjI0ZjEtN2M1NC0z NzNlLWFhZWItZmZjYjA1ZWU0ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSS8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfM8ExLXLZMNCYdmNebNFe12uJTGQmcCrhrqsTSkfVDwDACPtPDm+gD LuwdDnXlz8yxj8sqepreh0g3ldrCOYgl7TrXVdPwxfIf+C+qkHBx0y2h56zeUOOM znA/AFv5M2/LI395HwfbMRa7Z/pd7354nIkf/zoxqsCUcy/gyoRjZN8+91NhL1/E US8BdtCvhJ9tnfthqxnJ8KonQk35KLuv3ylEH8BLYffeqqlpFpNot3mGym++gOZw vv9qabWZEXSX5tz3Wna7Frsx7i+2kXgwFqYbJg7ZJ/qb7ehcQMrffZXg4m/DB2eK y/GTPNU4JCrFNI3CadJD5Zw9U+8qo/Q= -----END CERTIFICATE-----Generated at Wed Oct 22 00:20:21 2025 by rpki-client