$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08405be4-9f05-3fc1-ac22-e4cd63c05676.roa File: 08405be4-9f05-3fc1-ac22-e4cd63c05676.roa (raw, json) Hash identifier: ZYN77kulm0lIngo3Ibp/OIooKy0y9qqwuSLroPrSqGc= Subject key identifier: 23:95:5E:17:63:D4:E9:BE:8E:3C:5E:3F:94:B7:87:FE:1B:E3:79:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA0A6D6FAD8B05D89DFD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08405be4-9f05-3fc1-ac22-e4cd63c05676.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.38.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:0a:6d:6f:ad:8b:05:d8:9d:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d9c9d389-e15a-40c9-97c1-33422e020c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:13:bc:bf:c9:9b:82:c5:49:c6:ce:16:43: 8a:ef:75:4a:37:4e:ef:0a:14:7d:8b:b2:9b:c0:e7: 08:93:41:cd:e9:94:52:1e:32:53:b9:13:9c:00:40: 54:34:7c:b5:82:e7:d4:5b:3d:6d:04:23:99:a7:32: 5d:d8:32:e4:6a:bf:f8:d1:d2:4c:9d:2d:41:5c:14: ee:df:a8:3b:7b:6a:9e:bf:21:bb:67:c6:e9:d4:72: 80:8e:d2:38:87:32:8e:8b:86:c2:61:59:1e:0c:fc: f7:b3:ab:e5:72:00:f3:52:0a:b1:e4:b8:ec:2b:70: c8:c6:0d:89:03:62:08:04:43:fb:d7:86:7b:e6:63: 7a:37:f8:3a:dc:26:ba:f5:01:0e:0a:d6:c0:59:3b: b8:44:78:01:e8:f4:38:d1:06:30:92:bc:7e:1a:34: dd:8a:c3:6c:17:58:e8:69:2c:c8:bc:8a:c4:0c:e7: da:3f:eb:a5:8f:b2:4c:40:60:90:fb:4c:6c:c8:b8: 62:26:3c:e4:38:45:b4:c1:01:ed:8c:57:ec:b7:b6: 3f:e7:05:c7:ae:14:94:86:8e:1b:b2:7b:00:3a:4a: b2:2d:e6:89:8c:d2:68:0e:f2:91:af:7b:b9:7e:e2: 83:19:fc:cc:19:9a:6f:b1:9b:99:34:ec:b0:b7:92: 6b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:95:5E:17:63:D4:E9:BE:8E:3C:5E:3F:94:B7:87:FE:1B:E3:79:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08405be4-9f05-3fc1-ac22-e4cd63c05676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.38.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:14:70:b8:57:06:39:cd:eb:b6:db:22:f1:66:dd:47:61:8a: 6a:f9:f8:15:e7:5d:ac:02:7c:41:40:1d:2c:3b:f0:6d:54:b4: a8:73:54:bf:99:ae:4d:b5:f6:c7:82:d4:d7:58:85:47:fc:32: 4a:bd:b4:97:e3:0e:40:79:06:0f:ac:df:d7:f3:29:da:87:c5: 87:7e:7e:2c:ed:8a:94:fc:4c:e2:80:18:06:17:97:d2:f6:93: 48:94:33:7d:85:9a:e6:83:f2:06:c5:9e:35:c9:f4:2a:be:cf: 53:2c:06:2f:5d:81:e4:cc:00:91:c0:d0:cf:60:c8:eb:e5:92: 81:5d:a2:c7:3f:53:48:f7:e4:40:6f:b1:f4:45:f3:db:06:fe: 81:9b:e5:0a:e0:56:2e:6f:5f:7a:ea:f1:9d:44:54:49:a2:78: 6a:5f:08:9e:f2:08:5b:39:ec:7a:8d:22:e9:03:5a:7a:23:bd: 16:c4:40:af:5c:ad:bd:6e:63:1a:d0:66:7b:9c:48:c2:b2:11: cb:ba:27:d1:ae:07:25:8d:95:58:32:2b:a0:32:18:5c:d0:b0: 78:86:80:78:21:41:fa:23:a9:d2:ec:38:57:ff:64:78:f6:31: 9a:50:f7:fd:9b:fd:7a:9d:f0:a5:9c:91:eb:39:b5:70:2c:19: f5:29:be:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqgptb62LBdid/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDljOWQzODktZTE1YS00MGM5LTk3YzEtMzM0MjJlMDIwYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQETvL/Jm4LFScbOFkOK73VKN07vChR9i7Kb wOcIk0HN6ZRSHjJTuROcAEBUNHy1gufUWz1tBCOZpzJd2DLkar/40dJMnS1BXBTu 36g7e2qevyG7Z8bp1HKAjtI4hzKOi4bCYVkeDPz3s6vlcgDzUgqx5LjsK3DIxg2J A2IIBEP714Z75mN6N/g63Ca69QEOCtbAWTu4RHgB6PQ40QYwkrx+GjTdisNsF1jo aSzIvIrEDOfaP+ulj7JMQGCQ+0xsyLhiJjzkOEW0wQHtjFfst7Y/5wXHrhSUho4b snsAOkqyLeaJjNJoDvKRr3u5fuKDGfzMGZpvsZuZNOywt5JrPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOVXhdj1Om+jjxeP5S3h/4b43lyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDg0MDViZTQtOWYwNS0z ZmMxLWFjMjItZTRjZDYzYzA1Njc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSSaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgUcLhXBjnN67bbIvFm3Udhimr5+BXnXawCfEFAHSw78G1UtKhzVL+Z rk219seC1NdYhUf8Mkq9tJfjDkB5Bg+s39fzKdqHxYd+fiztipT8TOKAGAYXl9L2 k0iUM32FmuaD8gbFnjXJ9Cq+z1MsBi9dgeTMAJHA0M9gyOvlkoFdosc/U0j35EBv sfRF89sG/oGb5QrgVi5vX3rq8Z1EVEmieGpfCJ7yCFs57HqNIukDWnojvRbEQK9c rb1uYxrQZnucSMKyEcu6J9GuByWNlVgyK6AyGFzQsHiGgHghQfojqdLsOFf/ZHj2 MZpQ9/2b/Xqd8KWckes5tXAsGfUpvmg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:05 2025 by rpki-client