$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf6824c-d070-3a30-ac36-c1c1089403af.roa File: faf6824c-d070-3a30-ac36-c1c1089403af.roa (raw, json) Hash identifier: 9fLr2Mb23h18ZDV5HJ9LxC39v9opBwM++aNKEGu0AQ0= Subject key identifier: D0:9B:3E:61:1D:38:B5:25:DE:F8:7A:75:79:4B:67:28:26:5F:04:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA0650209AAA1DD83DA440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf6824c-d070-3a30-ac36-c1c1089403af.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.253.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:06:50:20:9a:aa:1d:d8:3d:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a6590c6b-3e1f-4054-8fff-b1fd26388779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:de:a6:91:cb:44:90:55:dd:73:ea:c7:27: 1a:da:c0:20:37:27:e7:a7:ae:18:6e:bb:f4:4e:8f: b5:b3:a1:04:fa:19:87:5f:39:ca:e7:c6:b5:7a:2f: fa:b9:36:12:24:42:39:56:ec:ba:57:a0:32:c0:f1: f8:ef:46:11:6c:5c:e2:d5:a6:c9:18:cc:99:c8:25: d4:ba:aa:f9:5a:40:bb:54:34:56:d2:fc:bc:ae:3d: cd:f0:44:e8:ab:58:88:46:cf:11:9f:13:4c:83:13: 0e:29:65:3d:ec:2d:ae:97:86:76:e0:8d:07:2a:6e: de:d5:ac:8e:e3:86:8d:de:63:2b:33:a9:b6:94:01: f9:41:0f:7f:f6:ee:f4:88:2e:e3:c4:a0:b1:14:5b: f5:81:71:16:a6:53:c8:08:7e:10:77:3e:0f:d2:9f: b7:9a:c0:f1:e7:a9:81:e9:de:6e:3c:8b:bb:d7:c7: bc:de:12:b6:9a:51:1d:65:a7:ff:d3:96:f9:8a:5a: e6:db:89:64:16:1e:4c:99:34:1a:6f:d4:33:a6:75: 37:fd:b2:78:99:a6:aa:1c:d0:9f:a8:75:34:a6:39: e6:b1:bd:d8:97:37:f8:db:a6:1b:8d:74:c7:9a:5d: 36:15:25:d2:46:35:25:dd:d3:b8:75:37:0b:50:f4: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9B:3E:61:1D:38:B5:25:DE:F8:7A:75:79:4B:67:28:26:5F:04:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faf6824c-d070-3a30-ac36-c1c1089403af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.253.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:09:52:65:b4:8c:1f:7c:3c:fb:d1:e2:b7:5e:1e:42:f5:02: e8:41:46:2e:59:23:44:5f:8e:c3:cd:f9:1a:03:88:2e:4b:cc: 71:9a:4d:40:cb:c0:f4:89:48:d7:cd:3c:f6:94:96:1a:2c:a0: 13:b9:91:5b:ab:8b:81:ff:d0:d6:50:78:c2:38:19:17:16:70: 18:71:5e:17:66:2d:14:b4:4d:be:0b:c6:81:11:92:62:f6:45: 4d:27:b8:f8:3e:7a:ba:68:7f:5a:11:45:c7:d9:79:57:20:b5: 6e:39:73:f7:0f:fb:89:20:32:88:92:47:13:ed:b7:53:0f:91: fb:cd:ab:ee:de:c7:47:b0:20:7b:aa:c3:ec:26:2c:ce:8c:58: ad:c0:56:7e:59:0d:78:72:63:52:90:ab:06:b7:47:26:63:d0: f0:88:91:04:b3:48:fb:f3:25:60:5c:16:ad:54:61:2c:8c:25: ee:5b:99:00:a9:e2:5a:51:cd:56:6b:93:36:5a:38:f0:c1:11: c3:08:89:08:4a:e5:03:1d:84:d1:88:a8:3b:ed:82:b6:30:28: 10:cc:8d:32:96:05:8b:1a:29:b7:0e:66:10:7a:88:8a:e9:95: 2e:ee:0f:73:ee:ac:8f:22:a3:99:78:9f:9c:f7:72:86:ba:e4: 04:8b:72:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqgZQIJqqHdg9pEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTY1OTBjNmItM2UxZi00MDU0LThmZmYtYjFmZDI2Mzg4Nzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBreppHLRJBV3XPqxyca2sAgNyfnp64Ybrv0 To+1s6EE+hmHXznK58a1ei/6uTYSJEI5Vuy6V6AywPH470YRbFzi1abJGMyZyCXU uqr5WkC7VDRW0vy8rj3N8EToq1iIRs8RnxNMgxMOKWU97C2ul4Z24I0HKm7e1ayO 44aN3mMrM6m2lAH5QQ9/9u70iC7jxKCxFFv1gXEWplPICH4Qdz4P0p+3msDx56mB 6d5uPIu718e83hK2mlEdZaf/05b5ilrm24lkFh5MmTQab9QzpnU3/bJ4maaqHNCf qHU0pjnmsb3Ylzf426YbjXTHml02FSXSRjUl3dO4dTcLUPQ+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCbPmEdOLUl3vh6dXlLZygmXwTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFmNjgyNGMtZDA3MC0z YTMwLWFjMzYtYzFjMTA4OTQwM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSf2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkJUmW0jB98PPvR4rdeHkL1AuhBRi5ZI0RfjsPN+RoDiC5LzHGaTUDL wPSJSNfNPPaUlhosoBO5kVuri4H/0NZQeMI4GRcWcBhxXhdmLRS0Tb4LxoERkmL2 RU0nuPg+erpof1oRRcfZeVcgtW45c/cP+4kgMoiSRxPtt1MPkfvNq+7ex0ewIHuq w+wmLM6MWK3AVn5ZDXhyY1KQqwa3RyZj0PCIkQSzSPvzJWBcFq1UYSyMJe5bmQCp 4lpRzVZrkzZaOPDBEcMIiQhK5QMdhNGIqDvtgrYwKBDMjTKWBYsaKbcOZhB6iIrp lS7uD3PurI8io5l4n5z3coa65ASLco0= -----END CERTIFICATE-----Generated at Tue Oct 21 21:59:01 2025 by rpki-client