$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36a1d37-943e-31c7-9c88-55918b0459f7.roa File: d36a1d37-943e-31c7-9c88-55918b0459f7.roa (raw, json) Hash identifier: bmtbrP08k6QKkfKmeGhgN5MlUUcvEdJMFRhXsjPawMQ= Subject key identifier: 68:45:52:58:1B:56:28:F2:02:91:94:67:AC:FB:40:72:E3:B0:3F:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7D85C1C4DAF856F68A480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36a1d37-943e-31c7-9c88-55918b0459f7.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.96.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:d8:5c:1c:4d:af:85:6f:68:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0c0c0adf-d708-4c47-9984-fd73e0a77415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:ad:ff:9d:61:3d:ed:01:a0:d5:d0:f1:02: f9:57:3e:dc:91:a9:09:dd:5c:d9:1a:8b:4f:3e:c1: 00:d2:3f:d0:1f:ff:64:31:29:44:d2:3a:dd:cb:b5: e0:1b:24:62:12:c9:d6:b0:25:f2:63:9c:25:aa:f9: 72:ab:25:84:d8:0d:18:1c:57:4d:67:5f:85:43:5b: 85:ef:fb:d2:57:b2:9f:26:42:24:13:f1:30:58:6e: 29:c3:57:c5:2f:17:25:fc:a9:03:40:0e:88:18:3b: 18:da:a9:42:95:dc:60:cd:40:e3:27:a2:aa:f7:1b: b9:79:39:1a:14:cf:4a:1d:8d:ea:21:26:b3:40:d3: e1:5b:04:ea:4a:ef:1f:44:3b:8a:59:7f:49:32:2d: b7:e4:3a:dd:82:b8:43:2b:c7:6e:19:a4:43:7e:80: 49:7f:5c:cc:c5:b8:0a:21:66:c4:5f:c0:25:d0:3a: 94:8e:ac:aa:29:99:85:75:aa:a3:1f:1d:fc:d7:ea: 4a:fc:33:f5:a5:70:af:87:32:35:46:fc:ba:48:d7: 5a:c9:f6:d2:54:78:dd:89:28:1b:17:ee:e8:3e:01: 85:e6:79:7f:94:ee:5b:5e:07:d7:e1:5e:3c:b7:ef: c8:69:26:30:13:c6:7c:2d:9f:cc:3d:e2:3d:2f:86: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:45:52:58:1B:56:28:F2:02:91:94:67:AC:FB:40:72:E3:B0:3F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36a1d37-943e-31c7-9c88-55918b0459f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.96.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e6:b0:90:19:95:8d:3d:a2:bb:8a:02:62:13:fb:ee:a5:f6: 9d:7e:6e:60:4f:61:54:25:8f:bb:04:26:09:f6:ce:7c:8a:8e: 1e:86:c5:99:c5:54:48:f6:70:43:23:d8:67:94:32:c2:48:d8: 6e:f8:db:85:36:82:d3:f0:56:de:17:2d:11:c0:1e:66:6c:fe: b9:e4:f8:6e:e7:5e:76:83:cc:f5:e9:e0:1f:db:c0:2d:58:32: 78:83:d2:5a:c6:83:6f:ca:3e:cf:38:b3:61:70:d4:3c:d7:92: f7:ab:e9:47:ec:cc:f9:c2:db:ce:4c:a3:a3:0d:09:4d:18:aa: 70:7a:49:24:c5:af:21:8a:81:5c:4e:9b:f6:c6:02:fa:c2:ef: 52:ea:fa:a8:b5:61:b7:3f:e5:1a:53:c0:55:d4:e4:72:13:18: 1b:7b:e8:d7:2b:30:9c:ed:db:c2:b1:39:c1:99:8e:4e:ce:7c: f4:f3:5b:eb:8e:c8:fc:40:b3:53:55:fb:3a:6e:8d:35:1a:db: 5f:05:d7:09:fe:b3:24:73:22:2a:62:0d:38:e9:fb:f7:00:8a: 74:3e:48:b6:b1:a5:b2:ed:40:66:f4:92:f3:30:16:25:f3:1c: 30:24:e7:97:64:dc:ff:8c:11:ef:c1:2c:f7:93:c3:f2:49:af: d0:09:9d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp9hcHE2vhW9opIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGMwYzBhZGYtZDcwOC00YzQ3LTk5ODQtZmQ3M2UwYTc3NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbet/51hPe0BoNXQ8QL5Vz7ckakJ3VzZGotP PsEA0j/QH/9kMSlE0jrdy7XgGyRiEsnWsCXyY5wlqvlyqyWE2A0YHFdNZ1+FQ1uF 7/vSV7KfJkIkE/EwWG4pw1fFLxcl/KkDQA6IGDsY2qlCldxgzUDjJ6Kq9xu5eTka FM9KHY3qISazQNPhWwTqSu8fRDuKWX9JMi235DrdgrhDK8duGaRDfoBJf1zMxbgK IWbEX8Al0DqUjqyqKZmFdaqjHx381+pK/DP1pXCvhzI1Rvy6SNdayfbSVHjdiSgb F+7oPgGF5nl/lO5bXgfX4V48t+/IaSYwE8Z8LZ/MPeI9L4YwuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhFUlgbVijyApGUZ6z7QHLjsD+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDM2YTFkMzctOTQzZS0z MWM3LTljODgtNTU5MThiMDQ1OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASWChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/msJAZlY09oruKAmIT++6l9p1+bmBPYVQlj7sEJgn2znyKjh6GxZnF VEj2cEMj2GeUMsJI2G7424U2gtPwVt4XLRHAHmZs/rnk+G7nXnaDzPXp4B/bwC1Y MniD0lrGg2/KPs84s2Fw1DzXkver6UfszPnC285Mo6MNCU0YqnB6SSTFryGKgVxO m/bGAvrC71Lq+qi1Ybc/5RpTwFXU5HITGBt76NcrMJzt28KxOcGZjk7OfPTzW+uO yPxAs1NV+zpujTUa218F1wn+syRzIipiDTjp+/cAinQ+SLaxpbLtQGb0kvMwFiXz HDAk55dk3P+MEe/BLPeTw/JJr9AJnTg= -----END CERTIFICATE-----Generated at Tue Oct 21 19:28:53 2025 by rpki-client