$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a861de7-98be-3cd3-995d-ee5f0281eb18.roa File: 1a861de7-98be-3cd3-995d-ee5f0281eb18.roa (raw, json) Hash identifier: ckhR6+5myQs8mWGiNsF/4X3ZoYaSTYpIeTUCtv85eTc= Subject key identifier: 6A:4A:55:FD:8D:85:0F:72:17:96:57:6F:F0:3C:72:71:E5:67:D5:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8C3E46FE5EC1A3E72C640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a861de7-98be-3cd3-995d-ee5f0281eb18.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 73.120.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:c3:e4:6f:e5:ec:1a:3e:72:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=094de836-eb27-4807-bbb5-8eae7c67f0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:eb:f1:79:1e:59:56:b5:f0:c5:c8:e8:55: 2c:1e:82:92:21:26:df:4d:5c:71:aa:10:b2:41:1d: 4f:a3:e0:08:0b:f3:49:ea:9e:7c:8d:76:6d:6e:fe: 37:66:e0:ec:2a:13:e8:da:9b:ea:e2:e7:29:55:6d: 69:55:34:fa:fb:5e:0d:cc:db:29:39:42:32:01:c3: 7e:98:dc:0c:48:99:c5:00:89:b7:62:c6:89:6d:2f: ef:21:ac:20:8d:0c:54:8b:76:70:1f:e6:f1:de:2c: e8:ad:4a:9e:d7:96:11:1c:73:8d:d9:75:45:dd:ce: cb:b2:3d:4f:83:d9:d1:37:83:1a:ba:7f:61:42:d3: 66:5b:a9:cf:cb:c9:cf:8b:d3:04:3d:fd:40:f9:f0: de:86:d4:d4:3d:4d:ad:19:fa:9a:6e:2c:e3:f4:71: 47:49:d4:27:8f:e7:43:b0:4e:52:a7:c5:f6:c4:cf: b0:5b:32:30:f9:41:d8:b9:3d:99:80:c2:e4:94:5c: 22:45:f9:95:95:c2:ed:29:c8:75:76:1a:94:ee:52: bf:e5:e0:c9:5e:19:ef:40:75:35:73:b9:9d:b3:a6: 59:4d:7d:f1:f0:08:1e:5d:d9:dd:3d:77:7c:e7:f4: 63:bd:6f:36:62:8a:da:be:db:7f:a3:db:98:f7:57: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:55:FD:8D:85:0F:72:17:96:57:6F:F0:3C:72:71:E5:67:D5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a861de7-98be-3cd3-995d-ee5f0281eb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.120.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d0:15:6c:5d:89:1e:f1:5a:ba:45:b2:53:e1:3e:c8:ae:6f: 71:a2:c2:67:b9:df:91:72:01:08:ac:ff:bd:91:77:20:88:b9: a7:0c:5a:23:82:33:63:c8:19:35:d9:9e:54:a0:57:03:ed:6c: c9:1d:d8:14:8d:12:f4:83:c3:5b:5a:02:d9:19:2a:55:a8:9d: d1:37:21:a4:ca:16:14:f5:5a:8d:55:82:12:19:5e:e4:ba:42: f9:29:7c:2f:bb:bf:e5:ab:84:cb:ea:b7:eb:cb:7e:e6:a5:52: f6:65:66:fc:67:02:6b:5d:24:c3:6e:16:cf:a7:60:ae:db:72: 58:60:ac:f0:29:73:0e:fd:85:20:9c:3b:5b:91:24:45:f6:e9: e2:5d:5b:bd:b0:5b:4a:a1:07:0d:69:e1:f6:d0:54:d0:a3:34: 7e:36:1c:f6:af:e1:64:30:1b:2b:ff:87:d3:05:c7:75:e1:75: e5:41:cd:5b:58:2e:cf:0a:92:7e:ad:4b:49:07:0d:56:34:fc: 59:f5:02:07:a8:ac:77:d6:b0:15:35:43:b7:d5:c6:42:d2:39: 50:ba:ab:78:e9:14:ce:ec:98:4f:7c:4e:34:a8:c5:86:49:75: 8a:01:5d:f9:71:0c:ee:17:76:ce:6c:4c:d1:75:bb:47:3b:86: 71:2a:a8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uMPkb+XsGj5yxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDk0ZGU4MzYtZWIyNy00ODA3LWJiYjUtOGVhZTdjNjdmMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngPr8XkeWVa18MXI6FUsHoKSISbfTVxxqhCy QR1Po+AIC/NJ6p58jXZtbv43ZuDsKhPo2pvq4ucpVW1pVTT6+14NzNspOUIyAcN+ mNwMSJnFAIm3YsaJbS/vIawgjQxUi3ZwH+bx3izorUqe15YRHHON2XVF3c7Lsj1P g9nRN4Maun9hQtNmW6nPy8nPi9MEPf1A+fDehtTUPU2tGfqabizj9HFHSdQnj+dD sE5Sp8X2xM+wWzIw+UHYuT2ZgMLklFwiRfmVlcLtKch1dhqU7lK/5eDJXhnvQHU1 c7mds6ZZTX3x8AgeXdndPXd85/RjvW82Yoravtt/o9uY91fiLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpKVf2NhQ9yF5ZXb/A8cnHlZ9VfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE4NjFkZTctOThiZS0z Y2QzLTk5NWQtZWU1ZjAyODFlYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHQFWxdiR7xWrpFslPhPsiub3Giwme535FyAQis/72RdyCIuacMWiOC M2PIGTXZnlSgVwPtbMkd2BSNEvSDw1taAtkZKlWondE3IaTKFhT1Wo1VghIZXuS6 QvkpfC+7v+WrhMvqt+vLfualUvZlZvxnAmtdJMNuFs+nYK7bclhgrPApcw79hSCc O1uRJEX26eJdW72wW0qhBw1p4fbQVNCjNH42HPav4WQwGyv/h9MFx3XhdeVBzVtY Ls8Kkn6tS0kHDVY0/Fn1AgeorHfWsBU1Q7fVxkLSOVC6q3jpFM7smE98TjSoxYZJ dYoBXflxDO4Xds5sTNF1u0c7hnEqqNE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:17:30 2025 by rpki-client