$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa File: f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa (raw, json) Hash identifier: i5gx6GKhV4XISN+e36ThiGR5/cDbRxJLgGo2Gbrqtgg= Subject key identifier: 9E:A5:F2:4D:87:25:1F:76:1A:63:FA:A2:C5:6E:72:7B:66:3C:03:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A97A2ACEA8F165C5666100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.240.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:7a:2a:ce:a8:f1:65:c5:66:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e52efed7-e540-46eb-94e8-9fa0980fe59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:da:1c:bc:d1:1e:dc:22:75:a2:86:12:23: 48:98:11:fb:78:84:45:c6:c5:a4:02:7f:22:2b:2e: 53:7e:3e:0d:d0:09:ef:c7:c2:f7:8f:02:7f:cf:b3: fe:c7:bf:5e:1c:8b:92:36:6a:02:b1:20:69:12:aa: 1b:ef:a0:46:b6:ce:61:a4:d1:bc:28:78:fa:25:64: 28:0e:86:88:e1:18:d5:75:31:ab:85:56:2c:66:f9: be:70:42:bd:38:c7:c2:7c:0d:05:79:4b:0e:7a:6c: 6b:21:57:c2:96:fe:c1:1a:b4:ab:54:3d:53:40:03: 47:74:be:81:5c:35:98:a7:36:e7:06:51:66:e0:c8: a2:52:d6:40:3d:7f:10:f4:3f:2c:18:39:e2:d3:2a: 25:f2:eb:a2:1a:18:96:c8:58:72:da:db:c4:7c:bb: 27:5c:31:c6:d7:3d:5d:86:e0:10:8e:43:71:09:18: f4:9b:bd:21:55:eb:2f:bc:c7:80:58:17:10:34:f0: 5a:55:82:a6:9c:af:e0:27:7d:de:97:74:64:0a:b0: f4:3b:b7:a7:50:04:84:6f:85:9c:35:c7:c1:3b:8d: eb:c9:3b:40:89:0b:0c:e3:b7:77:46:2f:e0:e7:9d: e5:1e:8b:9c:df:a1:e6:1e:96:93:e0:f1:cc:43:5f: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A5:F2:4D:87:25:1F:76:1A:63:FA:A2:C5:6E:72:7B:66:3C:03:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:dd:dc:c5:d5:f8:03:39:1a:a8:7b:48:6c:d6:d1:56:f2:87: f7:04:e9:93:30:b1:e9:91:a6:17:d0:e1:bb:40:32:02:f5:2f: 78:9f:b7:94:96:a7:a3:6d:0b:3c:68:e5:e4:0f:7a:24:f2:f9: 61:5e:a0:7a:df:41:a1:7d:57:47:e2:01:76:b8:4e:af:53:dc: 70:53:22:e2:ce:b9:19:f7:b2:ce:04:2c:bf:5b:f3:27:f2:69: b0:c9:89:c2:60:68:a8:3e:72:b1:7f:d3:bb:d7:6c:e9:42:fb: fc:a7:10:0e:fb:d4:65:ec:2e:a8:5c:8d:1a:6b:bf:28:82:1d: 02:de:09:4a:ba:70:2f:91:f5:68:0f:40:17:d5:14:25:d4:d1: eb:e1:a6:e1:1c:ad:d5:cc:1e:7b:da:66:a7:2f:ef:c2:d5:01: bc:14:01:1a:f0:3f:80:f5:84:f2:43:22:fa:5e:99:4f:0a:87: 56:fb:de:3c:5b:02:97:ac:4c:dc:64:1d:62:a4:5b:65:aa:8c: 3d:3e:05:42:af:85:3f:a1:9d:07:fb:e8:45:18:90:bf:f3:2b: 74:85:da:5e:33:fe:19:26:2f:65:38:69:ad:7f:e0:3a:cc:ea: f6:3d:9d:46:25:f1:2b:e8:9e:fd:c4:f0:e2:36:ca:f7:ab:96: a6:b5:7a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqXoqzqjxZcVmYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTUyZWZlZDctZTU0MC00NmViLTk0ZTgtOWZhMDk4MGZlNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdraHLzRHtwidaKGEiNImBH7eIRFxsWkAn8i Ky5Tfj4N0Anvx8L3jwJ/z7P+x79eHIuSNmoCsSBpEqob76BGts5hpNG8KHj6JWQo DoaI4RjVdTGrhVYsZvm+cEK9OMfCfA0FeUsOemxrIVfClv7BGrSrVD1TQANHdL6B XDWYpzbnBlFm4MiiUtZAPX8Q9D8sGDni0yol8uuiGhiWyFhy2tvEfLsnXDHG1z1d huAQjkNxCRj0m70hVesvvMeAWBcQNPBaVYKmnK/gJ33el3RkCrD0O7enUASEb4Wc NcfBO43ryTtAiQsM47d3Ri/g553lHouc36HmHpaT4PHMQ1/uswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6l8k2HJR92GmP6osVucntmPAPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRkN2NmNWUtNGVmYS0z NTU3LTliMTEtNWE1N2Q5YTBiZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXd3MXV+AM5Gqh7SGzW0Vbyh/cE6ZMwsemRphfQ4btAMgL1L3ift5SW p6NtCzxo5eQPeiTy+WFeoHrfQaF9V0fiAXa4Tq9T3HBTIuLOuRn3ss4ELL9b8yfy abDJicJgaKg+crF/07vXbOlC+/ynEA771GXsLqhcjRprvyiCHQLeCUq6cC+R9WgP QBfVFCXU0evhpuEcrdXMHnvaZqcv78LVAbwUARrwP4D1hPJDIvpemU8Kh1b73jxb ApesTNxkHWKkW2WqjD0+BUKvhT+hnQf76EUYkL/zK3SF2l4z/hkmL2U4aa1/4DrM 6vY9nUYl8Svonv3E8OI2yverlqa1enw= -----END CERTIFICATE-----Generated at Tue Oct 21 21:43:04 2025 by rpki-client