$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5e74aa-6d6b-34a9-b765-9c5f576b8a02.roa File: df5e74aa-6d6b-34a9-b765-9c5f576b8a02.roa (raw, json) Hash identifier: HqAkRIc+3WxqQ4obsQxWW1WvXuCij+kF30X9+ZNEAH4= Subject key identifier: 7A:48:92:7D:57:9B:58:5E:39:0C:48:81:B0:50:C6:65:8C:54:DB:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8DE18E2A8A83BF41D7080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5e74aa-6d6b-34a9-b765-9c5f576b8a02.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 73.144.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:de:18:e2:a8:a8:3b:f4:1d:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=721d9aff-0833-43ed-ac6d-72015b65ae9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:73:b2:31:6d:af:1d:77:b2:6a:47:dd:89: 33:4b:bd:47:c3:71:0d:91:37:77:c2:57:73:73:fb: bf:af:0e:a4:06:9f:35:a4:11:ac:64:d3:54:73:e4: 93:14:9f:85:4e:4d:ec:3e:db:7c:73:27:04:ad:06: 0a:07:d4:df:3e:3b:34:4a:13:08:37:8c:22:24:c4: b5:3c:d6:d8:53:4d:a1:af:ff:4d:3c:c3:4d:6a:37: c0:30:b0:91:c8:d2:db:ac:3a:0e:77:94:a5:90:3e: b9:48:bb:79:ed:fc:a6:20:67:57:fd:c1:89:fc:f3: a0:e6:72:9a:2d:fc:5f:3d:23:56:8e:e1:4e:23:08: 12:47:f7:c8:c1:3c:52:0b:8a:37:69:70:88:66:41: cf:71:bc:db:2c:5d:66:15:2e:7a:be:ae:7e:e2:07: a9:6e:1d:85:3b:dc:04:59:91:de:d9:fd:96:e4:8a: 17:12:37:ae:fb:05:bf:6d:94:e3:65:d2:bd:84:13: 72:ee:70:d9:28:cd:d4:87:b2:6c:1c:a1:ab:69:7d: 03:98:e4:da:a4:2c:78:98:d4:c3:59:76:79:32:53: b8:90:f1:67:aa:36:cb:4b:6c:35:fb:5b:8d:0e:f3: 66:2a:e6:66:1d:cc:c6:1f:d1:42:9e:eb:26:b7:da: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:48:92:7D:57:9B:58:5E:39:0C:48:81:B0:50:C6:65:8C:54:DB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5e74aa-6d6b-34a9-b765-9c5f576b8a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.144.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:86:b2:a3:b5:cd:0b:02:30:70:53:06:e7:d9:78:94:4c:cd: 8c:c5:a5:55:b4:c6:26:87:f1:f2:a0:ac:10:b8:28:5b:68:24: da:7d:22:44:df:52:ed:5d:62:43:47:b5:84:4e:e0:87:f8:4a: 3d:9c:dd:35:b8:30:cb:bf:3b:ba:f2:a3:df:d3:3e:85:1e:a5: b6:39:2c:62:b7:05:37:f1:d1:41:10:47:c9:b3:12:f7:2a:31: 9e:2d:71:ba:a1:f3:af:d0:7f:48:58:81:2c:99:67:f0:31:7c: 3f:f0:06:27:f7:8e:44:f7:49:74:ec:63:ff:41:73:13:d5:e2: a3:52:30:f4:89:67:d4:a6:9c:88:38:0f:3f:b6:0e:0b:bf:46: 94:d4:4b:bd:b0:01:2d:00:72:6a:57:79:aa:e9:4c:cd:d0:c2: 99:1e:4b:1f:fa:6b:7f:60:4b:38:e0:67:63:3e:f8:79:ea:1b: aa:ef:9d:bf:3d:35:bb:0c:cc:88:63:0b:d3:e2:1c:a6:8f:51: 5a:09:59:37:e6:d3:ac:63:e4:88:7e:0f:93:ee:ed:0e:e9:17: 8f:0e:2c:c9:79:4e:c3:79:e2:7a:d1:b6:fd:62:6d:c7:4e:ba: e2:34:4a:7f:6e:a7:ab:85:3b:19:dd:16:ef:7b:b8:ad:a6:17: f8:cb:8b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqN4Y4qioO/QdcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzIxZDlhZmYtMDgzMy00M2VkLWFjNmQtNzIwMTViNjVhZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjdzsjFtrx13smpH3YkzS71Hw3ENkTd3wldz c/u/rw6kBp81pBGsZNNUc+STFJ+FTk3sPtt8cycErQYKB9TfPjs0ShMIN4wiJMS1 PNbYU02hr/9NPMNNajfAMLCRyNLbrDoOd5SlkD65SLt57fymIGdX/cGJ/POg5nKa LfxfPSNWjuFOIwgSR/fIwTxSC4o3aXCIZkHPcbzbLF1mFS56vq5+4gepbh2FO9wE WZHe2f2W5IoXEjeu+wW/bZTjZdK9hBNy7nDZKM3Uh7JsHKGraX0DmOTapCx4mNTD WXZ5MlO4kPFnqjbLS2w1+1uNDvNmKuZmHczGH9FCnusmt9qQ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpIkn1Xm1heOQxIgbBQxmWMVNsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY1ZTc0YWEtNmQ2Yi0z NGE5LWI3NjUtOWM1ZjU3NmI4YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeGsqO1zQsCMHBTBufZeJRMzYzFpVW0xiaH8fKgrBC4KFtoJNp9IkTf Uu1dYkNHtYRO4If4Sj2c3TW4MMu/O7ryo9/TPoUepbY5LGK3BTfx0UEQR8mzEvcq MZ4tcbqh86/Qf0hYgSyZZ/AxfD/wBif3jkT3SXTsY/9BcxPV4qNSMPSJZ9SmnIg4 Dz+2Dgu/RpTUS72wAS0AcmpXearpTM3QwpkeSx/6a39gSzjgZ2M++HnqG6rvnb89 NbsMzIhjC9PiHKaPUVoJWTfm06xj5Ih+D5Pu7Q7pF48OLMl5TsN54nrRtv1ibcdO uuI0Sn9up6uFOxndFu97uK2mF/jLi0k= -----END CERTIFICATE-----Generated at Wed Oct 22 00:25:59 2025 by rpki-client