$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfae68b6-f609-34e2-9a67-f517e01ed023.roa File: bfae68b6-f609-34e2-9a67-f517e01ed023.roa (raw, json) Hash identifier: 4b9B9JA01/VDuG9QNx7te39sIGV8edNhFcXxik2OKI4= Subject key identifier: 40:BE:D6:EC:01:62:63:67:3B:61:34:B2:97:2D:4F:4A:60:70:69:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9FA79D24665392BDC7300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfae68b6-f609-34e2-9a67-f517e01ed023.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.234.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:fa:79:d2:46:65:39:2b:dc:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fbed7e0f-4cc4-4257-a782-07c0b36f946f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:49:ec:cd:8c:59:a8:9b:12:bf:a8:df:4b: 0b:e6:ee:e4:82:80:32:66:c9:11:78:ea:75:42:fc: 0c:4d:92:ff:bf:86:e2:81:3b:70:dd:d1:c1:35:86: 8c:1e:f5:59:c1:7e:12:7a:e6:11:0b:8b:23:f1:43: b3:47:cf:7e:a9:55:47:7e:c4:7e:d2:e8:eb:4e:51: a6:b3:78:9e:f5:cc:ff:98:4b:27:c4:b1:60:ff:4c: 61:04:fe:4f:72:fb:f1:a4:f5:f3:53:9a:71:4e:8a: 72:eb:9f:a2:18:64:ed:13:46:76:1b:04:12:76:e5: ab:cd:31:cb:18:c3:52:44:17:b0:ff:6c:48:20:21: 80:c4:69:e4:b9:42:2a:2a:21:e5:38:d7:7b:94:c0: cb:ca:fe:3d:2d:a4:12:ee:cc:27:a9:f3:8d:27:fc: 35:1a:76:d1:c9:f3:cc:88:47:d2:c8:a6:41:b9:6b: bb:8c:7c:01:e9:0c:44:3a:7b:9f:59:90:b2:56:ad: 4d:36:44:46:73:95:57:61:97:fd:23:b8:0f:fc:a7: 43:24:05:31:7c:ea:6c:94:d8:37:1c:3c:ec:82:e7: 2b:42:7a:b0:77:31:98:d5:2f:89:4f:90:e3:f0:78: 55:f0:02:2a:16:29:f4:5b:af:3c:5a:8b:b8:07:a8: d0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BE:D6:EC:01:62:63:67:3B:61:34:B2:97:2D:4F:4A:60:70:69:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfae68b6-f609-34e2-9a67-f517e01ed023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.234.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f7:f8:cb:31:36:8f:15:d5:c7:73:77:4f:c5:a2:3b:46:32: b9:92:f4:47:d9:1c:26:b6:72:97:f0:db:59:11:d6:ce:9e:3a: 34:fc:9d:f0:c4:93:d6:e5:25:e5:06:55:f9:62:31:5a:d5:fa: e2:c8:ff:d6:c4:00:64:7a:a1:7b:88:19:29:00:0f:86:02:4f: 0f:63:f2:2f:2e:69:39:03:a4:40:26:59:dc:89:78:a1:66:d4: 66:22:22:48:3f:2c:31:7c:4d:df:65:67:e2:3b:f8:3e:5c:5d: 61:86:35:6e:26:25:48:7a:d6:f0:6e:f7:29:f7:65:3a:ac:ad: b7:98:77:c4:56:1b:b7:8d:2a:52:0d:d2:98:fd:9d:80:b0:3d: f6:b0:ad:8c:e9:f4:06:92:53:37:fc:b8:0a:23:eb:0e:ce:91: a4:79:e0:5e:18:47:fb:a0:76:4b:fc:c6:b5:f6:3e:95:56:9f: 6a:1a:7c:70:09:ce:c1:8c:f5:ab:77:7d:ef:dc:80:f9:c9:5b: 2c:24:20:0a:b0:13:6e:eb:f5:54:80:a8:fe:2a:c1:14:cb:94: 4d:f1:26:b4:cd:8b:b6:e4:1b:7b:57:13:f7:8f:9b:07:d9:b5: ad:e2:9e:0d:e0:1f:b6:60:7d:e3:72:f4:ee:65:39:a5:56:df: 7d:36:6c:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqfp50kZlOSvccwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmJlZDdlMGYtNGNjNC00MjU3LWE3ODItMDdjMGIzNmY5NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqtJ7M2MWaibEr+o30sL5u7kgoAyZskReOp1 QvwMTZL/v4bigTtw3dHBNYaMHvVZwX4SeuYRC4sj8UOzR89+qVVHfsR+0ujrTlGm s3ie9cz/mEsnxLFg/0xhBP5PcvvxpPXzU5pxTopy65+iGGTtE0Z2GwQSduWrzTHL GMNSRBew/2xIICGAxGnkuUIqKiHlONd7lMDLyv49LaQS7swnqfONJ/w1GnbRyfPM iEfSyKZBuWu7jHwB6QxEOnufWZCyVq1NNkRGc5VXYZf9I7gP/KdDJAUxfOpslNg3 HDzsgucrQnqwdzGY1S+JT5Dj8HhV8AIqFin0W688Wou4B6jQYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC+1uwBYmNnO2E0spctT0pgcGmjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZhZTY4YjYtZjYwOS0z NGUyLTlhNjctZjUxN2UwMWVkMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASerIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj3+MsxNo8V1cdzd0/FojtGMrmS9EfZHCa2cpfw21kR1s6eOjT8nfDE k9blJeUGVfliMVrV+uLI/9bEAGR6oXuIGSkAD4YCTw9j8i8uaTkDpEAmWdyJeKFm 1GYiIkg/LDF8Td9lZ+I7+D5cXWGGNW4mJUh61vBu9yn3ZTqsrbeYd8RWG7eNKlIN 0pj9nYCwPfawrYzp9AaSUzf8uAoj6w7OkaR54F4YR/ugdkv8xrX2PpVWn2oafHAJ zsGM9at3fe/cgPnJWywkIAqwE27r9VSAqP4qwRTLlE3xJrTNi7bkG3tXE/ePmwfZ ta3ing3gH7ZgfeNy9O5lOaVW3302bLk= -----END CERTIFICATE-----Generated at Tue Oct 21 19:28:48 2025 by rpki-client