$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd59e7a1-7ad1-3f20-ac14-c628bdfea9d4.roa File: fd59e7a1-7ad1-3f20-ac14-c628bdfea9d4.roa (raw, json) Hash identifier: F0jilFC2CimZ1euUQiZp7A2x4D1ZJhU7hGPNg+sasK8= Subject key identifier: 42:5F:6E:8D:90:FE:65:7B:48:42:59:3B:65:AB:05:A7:7D:8F:5F:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7C99B40734D09022F9870 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd59e7a1-7ad1-3f20-ac14-c628bdfea9d4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.240.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:c9:9b:40:73:4d:09:02:2f:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=74135fa9-38ae-4a44-ad4e-50316d063165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d0:83:d9:a0:c7:b7:c8:cd:2f:d8:ba:66:b5: 8d:49:24:3d:25:e7:a4:db:d5:49:27:39:a9:65:ba: 3a:b1:0b:d1:a2:00:37:0b:59:78:72:5f:09:de:0e: 4e:ad:90:02:2e:6f:a1:bb:24:76:30:15:1e:6e:2d: a3:42:84:ab:c1:62:d9:47:06:fa:de:52:52:25:81: 5a:a3:c3:12:63:5e:a9:08:0a:17:b5:f5:4f:05:51: c1:c3:0e:57:90:0e:0a:42:ac:7b:27:e4:ab:5f:1b: 16:a0:45:76:ce:89:22:f9:86:f1:e2:68:db:8a:f0: 35:ab:4f:f9:a4:17:eb:73:84:d2:a3:96:ce:d4:6b: cb:56:69:a8:d0:a2:93:bf:67:ca:09:23:d7:81:4d: 8a:35:30:52:47:71:23:ab:c0:51:a9:4d:8e:28:f4: a3:7d:12:c3:7f:a8:d9:68:3b:c7:7a:1a:4a:c9:7f: b0:f5:27:5b:b8:fb:db:d4:27:86:52:67:63:05:0a: 4d:e1:89:ab:cf:fb:ce:d1:55:61:2a:5e:0e:b3:03: 0b:0f:4d:f2:2b:c0:57:0f:e7:1b:b8:a7:9f:3c:56: a2:a7:90:d8:25:9b:a1:fe:ca:2c:95:dc:05:07:a4: 80:6a:c8:e2:ab:e8:eb:f4:da:77:96:a0:97:25:02: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:6E:8D:90:FE:65:7B:48:42:59:3B:65:AB:05:A7:7D:8F:5F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd59e7a1-7ad1-3f20-ac14-c628bdfea9d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:45:53:6d:71:3f:e9:2f:9d:82:67:58:75:58:bc:b2:f1:77: 36:63:5d:98:a6:e8:22:a8:b3:45:a5:c9:de:2b:99:a9:72:60: 5f:b4:bc:01:e5:37:af:0e:4f:e3:51:6e:1a:27:94:f2:19:1a: 92:03:1d:6c:f1:e5:a4:4d:b5:05:82:1f:86:09:3b:bb:ce:2a: 5d:a3:e6:3b:39:be:f8:ad:c2:23:3e:7e:0a:1a:d2:cf:76:32: 61:89:54:2b:1f:ad:61:50:08:4c:6d:74:8d:d0:80:df:a1:34: 50:9f:49:3a:fb:78:23:91:00:ca:66:29:28:58:50:43:8e:a7: f5:ae:a4:6c:aa:ff:5c:16:b6:78:87:0a:2e:f0:70:84:6b:e4: 2c:b3:15:00:18:15:55:21:ec:17:57:f9:3a:ee:a9:c6:86:4f: e1:22:8c:02:4d:2e:f0:62:60:08:6f:bb:f5:8a:c5:cf:05:76: 42:23:27:9e:90:aa:cc:ff:28:53:99:87:3e:f2:9f:2a:02:14: 8b:b8:6f:d3:bc:41:7e:79:87:7f:cc:09:b8:6c:71:cb:25:69: 14:b7:3d:25:6e:6c:bc:06:be:58:e7:59:cf:dc:bc:04:91:d8: 4b:b8:b9:8a:16:78:7f:2a:bc:f9:c4:55:06:1c:d9:5c:77:e4: f5:87:87:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp8mbQHNNCQIvmHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzQxMzVmYTktMzhhZS00YTQ0LWFkNGUtNTAzMTZkMDYzMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tCD2aDHt8jNL9i6ZrWNSSQ9Jeek29VJJzmp Zbo6sQvRogA3C1l4cl8J3g5OrZACLm+huyR2MBUebi2jQoSrwWLZRwb63lJSJYFa o8MSY16pCAoXtfVPBVHBww5XkA4KQqx7J+SrXxsWoEV2zoki+Ybx4mjbivA1q0/5 pBfrc4TSo5bO1GvLVmmo0KKTv2fKCSPXgU2KNTBSR3Ejq8BRqU2OKPSjfRLDf6jZ aDvHehpKyX+w9SdbuPvb1CeGUmdjBQpN4Ymrz/vO0VVhKl4OswMLD03yK8BXD+cb uKefPFaip5DYJZuh/sosldwFB6SAasjiq+jr9Np3lqCXJQIEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJfbo2Q/mV7SEJZO2WrBad9j180MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQ1OWU3YTEtN2FkMS0z ZjIwLWFjMTQtYzYyOGJkZmVhOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJFU21xP+kvnYJnWHVYvLLxdzZjXZim6CKos0Wlyd4rmalyYF+0vAHl N68OT+NRbhonlPIZGpIDHWzx5aRNtQWCH4YJO7vOKl2j5js5vvitwiM+fgoa0s92 MmGJVCsfrWFQCExtdI3QgN+hNFCfSTr7eCORAMpmKShYUEOOp/WupGyq/1wWtniH Ci7wcIRr5CyzFQAYFVUh7BdX+TruqcaGT+EijAJNLvBiYAhvu/WKxc8FdkIjJ56Q qsz/KFOZhz7ynyoCFIu4b9O8QX55h3/MCbhsccslaRS3PSVubLwGvljnWc/cvASR 2Eu4uYoWeH8qvPnEVQYc2Vx35PWHhxc= -----END CERTIFICATE-----Generated at Wed Oct 22 00:21:10 2025 by rpki-client