$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23f21bd-d6c3-3463-8b59-19062f85fd81.roa File: c23f21bd-d6c3-3463-8b59-19062f85fd81.roa (raw, json) Hash identifier: e7BCJ2RrHWY8cIBwb20zF7Rpq0JKXe6Ik/cXOTbHjuY= Subject key identifier: DD:45:19:E6:61:CC:53:01:DC:E5:4F:43:DC:FC:14:D8:86:3B:29:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A92B4C467EBA33010B4500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23f21bd-d6c3-3463-8b59-19062f85fd81.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.76.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:2b:4c:46:7e:ba:33:01:0b:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=dcbbd062-6be2-497b-9670-e9c67fd0fe79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2e:90:a1:da:88:1b:ee:07:d6:db:29:e2:65: c1:8c:5e:82:d3:07:44:e8:c0:f7:c3:13:21:3a:1b: 53:52:8e:11:17:b0:6d:e3:c3:64:e5:a5:8c:de:9f: 9f:60:3a:18:26:e5:c5:5e:5d:3a:2d:fa:8e:c5:05: 8b:83:ff:87:c2:bb:28:f8:7a:6d:c8:de:78:e8:bf: 73:db:75:70:39:76:0d:8c:b1:27:6a:fd:d8:36:37: 13:52:22:15:8b:4a:d8:e3:66:a8:8e:fd:b9:0c:49: 9c:99:f5:d7:10:d0:70:51:3a:39:62:a0:77:72:d3: 50:67:e6:26:a8:24:ec:24:29:b6:1a:f7:bf:dd:06: f6:8e:0b:da:68:b0:46:c5:7d:29:55:6a:d5:6d:3b: 4a:6f:99:d2:1f:54:88:76:d8:43:55:35:27:0c:21: ae:8e:c3:b3:93:92:33:74:e6:6e:41:60:27:7f:8e: 7e:dc:10:04:d2:da:7b:fe:f0:df:3b:bf:7c:94:c4: 85:55:cc:ec:af:cb:86:e9:93:64:6a:f1:6b:70:9a: c9:ed:7f:f6:d4:0e:be:4a:c4:63:b4:c0:41:ad:ed: 5b:4e:18:5e:bd:5a:04:7c:8a:a2:7c:25:08:91:dc: 7f:de:3f:ee:a5:71:ea:5a:b8:94:03:0a:eb:ae:49: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:45:19:E6:61:CC:53:01:DC:E5:4F:43:DC:FC:14:D8:86:3B:29:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23f21bd-d6c3-3463-8b59-19062f85fd81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.76.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:dc:47:61:c9:40:eb:9e:45:4e:a0:2b:a4:b9:43:56:22:1c: 70:b8:eb:6b:12:f1:a7:d5:69:7c:cd:4e:fa:2f:65:6c:01:7b: 97:7f:84:d7:dc:7d:33:ab:b8:25:e7:4f:f3:1a:b6:6a:1a:fd: fa:cf:45:a1:97:c1:60:32:a7:6a:5b:08:22:87:47:17:6a:ac: c2:ea:90:c3:35:c6:95:71:db:01:fe:97:18:ab:68:54:f5:9a: 0b:7c:c1:66:04:b5:35:91:63:b9:83:cc:88:f1:f8:f4:0e:4f: 07:0c:7d:d0:0d:fa:3d:05:fd:81:36:84:96:6d:ec:29:dd:46: a3:21:74:42:ae:72:b1:aa:19:bc:e7:de:db:dc:2e:a4:40:cf: fb:97:59:79:65:38:59:6e:fd:45:d5:1f:5b:56:67:66:4d:88: 12:07:56:58:50:94:9f:99:31:b1:88:6e:f7:82:e7:7b:9a:73: 77:5c:fb:41:41:4c:cf:90:2c:01:d2:bc:f3:3f:15:14:fa:c9: 3b:ec:21:c3:86:f0:31:c4:a4:1d:7a:87:80:24:6b:ab:3e:e2: d3:f2:f4:8d:ca:33:cb:2a:62:ae:8b:93:b9:d5:4b:46:46:12: 6b:d2:28:0c:4a:ba:27:cf:38:07:75:b4:87:b3:c0:b3:d6:79: ab:ef:fb:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqStMRn66MwELRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGNiYmQwNjItNmJlMi00OTdiLTk2NzAtZTljNjdmZDBmZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi6QodqIG+4H1tsp4mXBjF6C0wdE6MD3wxMh OhtTUo4RF7Bt48Nk5aWM3p+fYDoYJuXFXl06LfqOxQWLg/+Hwrso+HptyN546L9z 23VwOXYNjLEnav3YNjcTUiIVi0rY42aojv25DEmcmfXXENBwUTo5YqB3ctNQZ+Ym qCTsJCm2Gve/3Qb2jgvaaLBGxX0pVWrVbTtKb5nSH1SIdthDVTUnDCGujsOzk5Iz dOZuQWAnf45+3BAE0tp7/vDfO798lMSFVczsr8uG6ZNkavFrcJrJ7X/21A6+SsRj tMBBre1bThhevVoEfIqifCUIkdx/3j/upXHqWriUAwrrrklxxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1FGeZhzFMB3OVPQ9z8FNiGOymLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzIzZjIxYmQtZDZjMy0z NDYzLThiNTktMTkwNjJmODVmZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/cR2HJQOueRU6gK6S5Q1YiHHC462sS8afVaXzNTvovZWwBe5d/hNfc fTOruCXnT/Matmoa/frPRaGXwWAyp2pbCCKHRxdqrMLqkMM1xpVx2wH+lxiraFT1 mgt8wWYEtTWRY7mDzIjx+PQOTwcMfdAN+j0F/YE2hJZt7CndRqMhdEKucrGqGbzn 3tvcLqRAz/uXWXllOFlu/UXVH1tWZ2ZNiBIHVlhQlJ+ZMbGIbveC53uac3dc+0FB TM+QLAHSvPM/FRT6yTvsIcOG8DHEpB16h4Aka6s+4tPy9I3KM8sqYq6Lk7nVS0ZG EmvSKAxKuifPOAd1tIezwLPWeavv+7Q= -----END CERTIFICATE-----Generated at Tue Oct 21 21:56:24 2025 by rpki-client