$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4254c88-2359-3a71-8efa-e524b5ce1f39.roa File: c4254c88-2359-3a71-8efa-e524b5ce1f39.roa (raw, json) Hash identifier: i7kkI15ALyfhHbyqHjlPz2e96ZpF+U+1L0V4IiCz2kU= Subject key identifier: 7B:68:97:11:E1:B6:29:D3:2B:F8:CA:FC:38:96:06:DF:1D:BA:51:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA7C8BD6D3F9F2FB156D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4254c88-2359-3a71-8efa-e524b5ce1f39.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 73.161.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:7c:8b:d6:d3:f9:f2:fb:15:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d30e996e-172d-47f8-8a5a-9549deb0c1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:56:14:7d:3b:88:2f:92:8e:7d:00:a8:82: 47:9b:82:2c:b0:26:9d:66:27:cb:bf:72:34:d5:26: ed:aa:47:0f:56:0e:c7:c0:c6:e6:81:b6:ae:3b:ce: 85:f5:9f:56:a2:38:b2:fa:65:d0:3b:cb:ce:0d:de: f6:c0:a7:97:72:c6:35:a1:7d:a4:1b:08:b1:03:70: 3a:8b:c6:c2:ea:87:7b:c9:f0:0f:8a:6b:54:cd:2b: fd:61:f9:8c:b0:79:7b:67:63:1f:10:dc:61:85:77: 9a:e6:8a:88:77:6b:0f:34:55:a0:80:32:95:69:93: ec:44:4f:7a:10:12:c9:a3:a4:04:e3:2e:54:51:74: 1d:0d:e4:d2:f9:d8:cb:eb:0d:b8:7f:37:03:2d:b2: 88:b5:6f:a7:13:92:3f:f7:e2:ca:a8:c7:70:64:3e: e2:a5:5d:f5:62:93:35:2d:7e:e4:45:1b:59:e2:48: 35:91:70:9e:57:9b:01:86:b3:b2:df:f1:bb:db:3c: aa:0c:45:2f:77:46:fc:95:4a:35:55:df:31:cc:19: 80:ba:b7:72:c9:e4:3a:a7:3c:85:00:78:a3:a9:d1: a5:08:6a:88:3d:ba:83:ac:38:b7:10:0c:87:c1:b8: 5e:1d:97:25:e0:21:74:0c:70:39:36:69:db:e9:b6: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:68:97:11:E1:B6:29:D3:2B:F8:CA:FC:38:96:06:DF:1D:BA:51:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4254c88-2359-3a71-8efa-e524b5ce1f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a0:1d:40:ee:79:62:61:bb:f2:96:f6:df:84:bf:ee:75:ea: a2:e6:8a:d7:5d:bf:ab:4f:fb:34:12:0d:e3:76:27:c1:9b:81: cc:c1:8c:f7:58:f8:d5:8c:b2:13:4b:1c:33:56:7b:79:00:7e: 2c:0e:31:3a:a8:75:f2:28:6e:e0:ca:a4:36:e1:e6:75:c8:48: 80:f6:b4:fe:85:a4:bc:a5:45:c6:84:ed:86:4b:d6:98:1e:13: a1:13:d4:67:c0:3e:d4:a9:0e:22:46:8a:72:f6:55:c8:9a:6d: 1c:a9:77:99:54:0e:cb:e7:2d:66:ff:ca:07:7d:72:15:33:5a: 3d:ea:08:bd:08:16:60:8f:dc:09:68:0e:8d:c0:c5:cf:06:31: e9:3d:5f:72:9d:4e:1c:f2:86:22:17:a8:e8:ec:d4:56:41:c9: 52:ca:a6:c7:f2:65:d6:91:21:6e:7a:f8:cc:cf:9b:0d:f7:b8: b4:bb:f6:1e:17:87:68:4f:01:73:55:32:22:63:b4:51:63:04: ce:93:fc:6e:de:ee:43:a5:b4:f9:9f:68:2d:28:57:96:3f:30: 20:0d:1a:73:b7:ea:27:76:77:02:1f:2d:b3:d7:46:e2:42:3b: 98:06:aa:3e:0f:23:07:b5:ae:2d:80:a8:fe:5c:6c:96:e1:7d: 84:73:93:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqnyL1tP58vsVbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDMwZTk5NmUtMTcyZC00N2Y4LThhNWEtOTU0OWRlYjBjMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp45WFH07iC+Sjn0AqIJHm4IssCadZifLv3I0 1SbtqkcPVg7HwMbmgbauO86F9Z9Wojiy+mXQO8vODd72wKeXcsY1oX2kGwixA3A6 i8bC6od7yfAPimtUzSv9YfmMsHl7Z2MfENxhhXea5oqId2sPNFWggDKVaZPsRE96 EBLJo6QE4y5UUXQdDeTS+djL6w24fzcDLbKItW+nE5I/9+LKqMdwZD7ipV31YpM1 LX7kRRtZ4kg1kXCeV5sBhrOy3/G72zyqDEUvd0b8lUo1Vd8xzBmAurdyyeQ6pzyF AHijqdGlCGqIPbqDrDi3EAyHwbheHZcl4CF0DHA5Nmnb6bauDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtolxHhtinTK/jK/DiWBt8dulEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQyNTRjODgtMjM1OS0z YTcxLThlZmEtZTUyNGI1Y2UxZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASaE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEigHUDueWJhu/KW9t+Ev+516qLmitddv6tP+zQSDeN2J8GbgczBjPdY +NWMshNLHDNWe3kAfiwOMTqodfIobuDKpDbh5nXISID2tP6FpLylRcaE7YZL1pge E6ET1GfAPtSpDiJGinL2VciabRypd5lUDsvnLWb/ygd9chUzWj3qCL0IFmCP3Alo Do3Axc8GMek9X3KdThzyhiIXqOjs1FZByVLKpsfyZdaRIW56+MzPmw33uLS79h4X h2hPAXNVMiJjtFFjBM6T/G7e7kOltPmfaC0oV5Y/MCANGnO36id2dwIfLbPXRuJC O5gGqj4PIwe1ri2AqP5cbJbhfYRzk6s= -----END CERTIFICATE-----Generated at Tue Oct 21 19:36:20 2025 by rpki-client