$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f289fa5c-1f44-3ef2-aa27-2de900b1c554.roa File: f289fa5c-1f44-3ef2-aa27-2de900b1c554.roa (raw, json) Hash identifier: nQfJDHwc9FzX+EFkLO68w9XuoelSVVIcpMjwr8LuLWI= Subject key identifier: AF:6A:66:6C:46:24:CF:CD:68:5A:99:DA:46:43:99:58:25:E7:49:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9C70657D871F4BF7944B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f289fa5c-1f44-3ef2-aa27-2de900b1c554.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.123.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:c7:06:57:d8:71:f4:bf:79:44:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=0e5dcaf7-c016-477e-a341-d4f6ca5fe268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:81:a9:e3:f4:97:68:f3:90:12:ac:ba:aa:90: 08:34:64:70:0e:64:ab:8e:92:f4:0e:c0:a2:21:4a: 46:72:4d:72:cc:31:af:d3:69:fc:a3:ba:2a:2b:a1: dc:40:51:6e:a7:31:14:d6:62:f4:9b:e1:80:fe:df: 5d:9f:1b:19:3b:31:fd:41:cc:dc:3a:c3:b8:7d:3b: 0c:37:17:57:71:c4:d0:8d:c4:28:7e:23:3d:ee:48: a0:64:29:d2:f0:45:6c:a6:de:5e:48:dc:10:c3:a0: 3d:e8:8f:69:7f:af:78:94:58:75:b0:c4:8b:46:f5: 21:b9:19:10:9f:ed:c6:38:ed:13:f0:67:83:14:3d: de:e8:0b:e7:75:80:92:fb:23:38:33:b2:d7:83:59: 07:6a:48:55:7a:40:69:bd:f9:b0:96:b4:3f:c2:a0: d2:a1:59:27:fa:8c:c0:37:ee:7f:11:30:dd:bf:bd: 97:d6:45:ce:71:00:4e:f6:f4:e7:9d:f6:36:c4:5a: 22:e0:56:b3:6b:71:20:ed:66:96:30:d6:62:71:81: ff:c1:c0:7d:41:0b:c2:be:4d:f3:5e:45:66:7b:06: 59:ab:a5:3e:29:d9:79:a7:66:6c:b3:f8:5f:c6:7f: b3:17:ca:ef:7e:7d:74:a0:80:ec:6a:8d:b0:ce:a8: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6A:66:6C:46:24:CF:CD:68:5A:99:DA:46:43:99:58:25:E7:49:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f289fa5c-1f44-3ef2-aa27-2de900b1c554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.123.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:f2:cb:f5:89:b0:a1:a8:f5:9f:96:4f:6a:3d:00:e2:66:5f: ea:4d:26:2d:cd:c6:af:49:4f:6a:6f:0b:dc:37:3e:3a:bb:3d: 16:a6:ef:b3:0f:28:53:99:a7:aa:f4:3c:dd:8a:a2:47:5a:57: fd:24:e6:12:97:a3:83:1a:d7:e0:0d:a7:ab:25:d6:d5:19:ef: 38:18:b8:70:24:11:9d:1a:f5:31:90:9d:cd:31:1b:cd:8f:ea: b9:01:e4:00:dd:bf:8e:f2:9b:f0:c2:bf:b2:d2:8a:23:6c:0e: 48:6c:c5:21:23:4e:39:4e:78:ca:21:68:48:7c:32:c0:13:46: ef:66:7d:a8:fc:8e:ff:e7:89:66:29:4a:cc:f2:d6:3b:a1:b9: d5:4f:41:16:e9:4f:7e:6f:fa:40:46:4d:7e:34:54:34:46:0d: 51:40:ad:be:94:de:d7:42:30:fc:b0:ae:70:72:16:19:28:b2: 08:27:78:cc:ea:e8:b2:f5:b5:0d:e8:f8:a7:68:62:2d:38:00: 36:5a:ab:76:d7:80:d5:97:1b:18:4d:08:5a:2a:04:2f:e6:55: 78:5f:c6:28:b9:3d:ee:ca:c0:9a:a7:42:75:e9:7b:ad:83:51: da:b2:8d:ac:ce:3c:30:0b:da:5b:a7:d4:63:61:2e:16:15:d4: e6:c0:e4:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqccGV9hx9L95RLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MGU1ZGNhZjctYzAxNi00NzdlLWEzNDEtZDRmNmNhNWZlMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIGp4/SXaPOQEqy6qpAINGRwDmSrjpL0DsCi IUpGck1yzDGv02n8o7oqK6HcQFFupzEU1mL0m+GA/t9dnxsZOzH9QczcOsO4fTsM NxdXccTQjcQofiM97kigZCnS8EVspt5eSNwQw6A96I9pf694lFh1sMSLRvUhuRkQ n+3GOO0T8GeDFD3e6AvndYCS+yM4M7LXg1kHakhVekBpvfmwlrQ/wqDSoVkn+ozA N+5/ETDdv72X1kXOcQBO9vTnnfY2xFoi4Faza3Eg7WaWMNZicYH/wcB9QQvCvk3z XkVmewZZq6U+Kdl5p2Zss/hfxn+zF8rvfn10oIDsao2wzqg9SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9qZmxGJM/NaFqZ2kZDmVgl50mYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjI4OWZhNWMtMWY0NC0z ZWYyLWFhMjctMmRlOTAwYjFjNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7yy/WJsKGo9Z+WT2o9AOJmX+pNJi3Nxq9JT2pvC9w3Pjq7PRam77MP KFOZp6r0PN2KokdaV/0k5hKXo4Ma1+ANp6sl1tUZ7zgYuHAkEZ0a9TGQnc0xG82P 6rkB5ADdv47ym/DCv7LSiiNsDkhsxSEjTjlOeMohaEh8MsATRu9mfaj8jv/niWYp Sszy1juhudVPQRbpT35v+kBGTX40VDRGDVFArb6U3tdCMPywrnByFhkosggneMzq 6LL1tQ3o+KdoYi04ADZaq3bXgNWXGxhNCFoqBC/mVXhfxii5Pe7KwJqnQnXpe62D UdqyjazOPDAL2lun1GNhLhYV1ObA5BU= -----END CERTIFICATE-----Generated at Wed Oct 22 00:12:52 2025 by rpki-client