$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/287239a1-1e01-32b7-ae43-c63a2d5e1cb3.roa File: 287239a1-1e01-32b7-ae43-c63a2d5e1cb3.roa (raw, json) Hash identifier: JCae6q4dRHmXc+5tQ23r1bcPnaKfA41ZlhQKg/w3w/M= Subject key identifier: 6D:DA:2C:40:70:6B:97:B6:05:4E:8F:38:6E:AF:74:A1:1C:6C:CB:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9CFADF30413AC6EC8F880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/287239a1-1e01-32b7-ae43-c63a2d5e1cb3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.143.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:cf:ad:f3:04:13:ac:6e:c8:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9f0b33d1-b11e-4c14-b3d3-c20e0096a7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e2:5a:c3:4f:2e:f7:7d:18:d4:60:38:8c:a4: a1:ac:cf:7e:29:6a:ce:e1:b5:fc:37:3e:fe:a3:93: 7d:bb:a7:fe:70:a3:33:74:e7:6b:4a:fa:14:b6:16: 3b:e0:2e:37:24:30:3f:64:49:da:be:87:63:c0:c0: 0a:cf:28:16:2d:76:9d:52:3d:3a:e6:5f:5b:d4:85: e2:ad:e1:82:7f:40:4a:bc:80:2f:2a:7a:80:60:67: a8:02:21:f5:60:bd:56:20:44:e1:de:83:9f:a1:e4: 5d:da:d6:ee:51:8f:a9:4f:50:5e:99:d2:87:b0:5d: 3a:32:95:97:f8:cf:5c:9d:69:14:6e:1c:86:da:ff: 1b:0e:18:a6:69:1b:c4:70:21:cc:2e:fb:bb:61:b5: 13:0b:38:5d:ef:05:a8:35:3f:6f:fb:65:20:71:01: 7d:ab:f8:4b:6b:3d:f4:05:c1:6a:07:e0:81:62:33: 63:02:c0:32:a6:90:94:8c:02:3e:4f:74:db:b5:ec: 37:00:3a:0d:99:fd:eb:16:3c:8b:33:42:10:20:7b: 3b:45:25:65:43:05:52:05:ea:b5:7d:81:44:63:56: 4a:73:4d:d6:3c:68:3c:27:33:bc:93:62:6b:53:b9: e9:db:25:14:38:a7:36:8d:c1:82:f6:86:dd:3d:2d: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DA:2C:40:70:6B:97:B6:05:4E:8F:38:6E:AF:74:A1:1C:6C:CB:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/287239a1-1e01-32b7-ae43-c63a2d5e1cb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.143.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:31:b1:d0:42:35:d6:b3:e5:eb:4a:66:f7:6f:78:fc:bc:e5: 7e:57:4d:e6:fd:5f:15:2b:a2:9e:b9:fa:d9:3d:a1:99:79:b8: ea:20:5d:cc:bc:cb:8b:87:25:94:81:bd:9f:d2:22:2a:78:d3: f3:31:b8:18:3b:65:80:c8:b4:d6:ef:1c:2b:d9:8b:4c:8b:b5: e8:fb:6c:d9:af:bd:64:c4:55:08:84:38:ba:1d:55:6d:95:c9: c1:ab:98:f7:f4:e6:a0:eb:54:f9:83:fc:e6:85:50:5c:33:93: f0:40:87:47:7f:44:70:46:6c:45:52:8a:5b:3c:08:fd:0b:18: 2c:be:ab:3f:71:f6:b7:bc:47:b1:21:0b:60:65:5b:1e:51:e8: 5b:2e:f9:e5:29:c7:bb:4f:81:00:23:7b:62:7c:2a:ba:a2:d0: 43:7a:1a:ae:20:cc:0a:4b:11:c2:46:47:74:bd:e3:d0:93:64: 93:63:d8:a7:6e:dd:71:bb:9b:c6:7b:32:98:04:64:a3:9a:47: 8f:94:f8:ce:d3:4d:1e:8d:f5:f4:a2:07:fc:7f:26:16:80:e8: c9:6c:5c:a9:7b:a3:b7:75:80:d3:0d:b9:c4:70:e8:9d:4c:b8: 4a:9b:95:ae:f5:88:72:80:31:24:ae:e8:8d:8e:ac:88:a0:13: 70:ae:2f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqc+t8wQTrG7I+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWYwYjMzZDEtYjExZS00YzE0LWIzZDMtYzIwZTAwOTZhN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieJaw08u930Y1GA4jKShrM9+KWrO4bX8Nz7+ o5N9u6f+cKMzdOdrSvoUthY74C43JDA/ZEnavodjwMAKzygWLXadUj065l9b1IXi reGCf0BKvIAvKnqAYGeoAiH1YL1WIETh3oOfoeRd2tbuUY+pT1BemdKHsF06MpWX +M9cnWkUbhyG2v8bDhimaRvEcCHMLvu7YbUTCzhd7wWoNT9v+2UgcQF9q/hLaz30 BcFqB+CBYjNjAsAyppCUjAI+T3Tbtew3ADoNmf3rFjyLM0IQIHs7RSVlQwVSBeq1 fYFEY1ZKc03WPGg8JzO8k2JrU7np2yUUOKc2jcGC9obdPS30XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3aLEBwa5e2BU6POG6vdKEcbMsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg3MjM5YTEtMWUwMS0z MmI3LWFlNDMtYzYzYTJkNWUxY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSY8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkxsdBCNdaz5etKZvdvePy85X5XTeb9XxUrop65+tk9oZl5uOogXcy8 y4uHJZSBvZ/SIip40/MxuBg7ZYDItNbvHCvZi0yLtej7bNmvvWTEVQiEOLodVW2V ycGrmPf05qDrVPmD/OaFUFwzk/BAh0d/RHBGbEVSils8CP0LGCy+qz9x9re8R7Eh C2BlWx5R6Fsu+eUpx7tPgQAje2J8Krqi0EN6Gq4gzApLEcJGR3S949CTZJNj2Kdu 3XG7m8Z7MpgEZKOaR4+U+M7TTR6N9fSiB/x/JhaA6MlsXKl7o7d1gNMNucRw6J1M uEqbla71iHKAMSSu6I2OrIigE3CuL5g= -----END CERTIFICATE-----Generated at Tue Nov 4 23:06:40 2025 by rpki-client