$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2db6c43f-f0d9-365b-a27f-7f5dba327e90.roa File: 2db6c43f-f0d9-365b-a27f-7f5dba327e90.roa (raw, json) Hash identifier: ePza4FzE11J9DTabfhKn7DoBLQdXTV4x9ONOjTrb9wA= Subject key identifier: 42:54:BF:E7:37:A6:CD:31:D8:D7:C2:A2:75:51:A8:A8:A9:70:87:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB920EC8A9A95AE4F37B1A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2db6c43f-f0d9-365b-a27f-7f5dba327e90.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33489 IP address blocks: 73.192.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:20:ec:8a:9a:95:ae:4f:37:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=70fda1fe-d0a8-4faf-b654-6abf11476c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c6:b6:84:39:a1:05:0d:a2:11:cc:0e:06:41: 19:ff:ff:b5:23:51:80:98:a3:0f:27:f0:12:b8:7a: 50:97:e1:38:2c:ba:0d:e0:13:34:a2:e7:b1:e8:55: b5:ae:a6:77:f3:eb:c9:c8:f0:87:ab:44:5d:3c:a5: 42:e1:89:ab:49:01:15:d7:db:54:54:05:86:80:f9: 6f:a6:a2:77:00:c8:ae:30:cb:f6:ed:85:b2:8b:8b: 59:6d:3f:da:b9:5c:45:31:84:49:ee:1e:7c:88:1e: ff:b5:69:97:e6:8e:45:34:12:b5:ad:92:83:0f:0b: a4:fe:a3:1a:ce:a5:e5:e7:6e:58:be:56:21:e9:00: 08:87:84:bc:3e:36:a6:1e:e5:12:ee:45:91:82:9a: 70:35:29:67:c1:89:3d:94:2c:e5:31:1d:a6:90:33: 84:1a:a1:50:aa:58:9a:f3:a0:54:21:65:8b:71:33: b6:6e:ea:7f:8a:f7:4b:00:9d:ce:5e:95:3e:f7:a2: 06:dd:e0:76:ec:8b:d6:85:69:06:e5:a9:99:f9:af: 8e:9a:55:6d:9d:37:14:eb:35:d0:66:c3:36:a0:a8: 2a:b6:68:d2:7c:54:69:99:a0:44:31:15:0c:31:88: 2c:3e:b1:46:ec:b7:6c:fb:4c:0f:82:3e:1c:97:d2: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:54:BF:E7:37:A6:CD:31:D8:D7:C2:A2:75:51:A8:A8:A9:70:87:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2db6c43f-f0d9-365b-a27f-7f5dba327e90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.192.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:99:00:9e:f1:9b:72:e8:ef:bf:7b:3d:b6:ef:25:bf:6e:bb: 30:37:ff:2c:6e:a9:47:a8:98:5b:45:5d:4e:a3:98:0c:da:cb: 3b:50:35:64:ed:a0:0a:3c:38:5b:41:cf:f2:95:62:b7:00:d9: 20:56:4b:60:ad:24:52:a1:5a:22:35:3c:d4:9f:14:ba:4e:d2: 52:e5:6a:a7:ae:8e:b6:fb:29:4c:43:ed:9f:8b:af:bf:a2:d7: 6a:56:bc:1d:75:5c:e1:1e:09:19:64:95:0e:cc:96:d2:7d:44: 6d:e0:9a:13:dd:59:1c:05:23:28:81:03:5c:cd:a3:f0:a2:7a: 55:33:55:3a:6d:d7:e7:45:79:c6:ef:07:76:ef:66:71:12:b4: 32:8a:21:8c:fa:63:af:20:c5:b4:50:32:5a:05:af:cf:07:6a: 6b:1a:d1:b8:e3:a1:aa:e7:eb:13:94:e2:75:26:c6:d3:f6:72: 3f:e3:07:2a:aa:3e:79:4b:1b:72:e5:33:42:db:e0:8f:f1:53: a7:bb:82:6d:31:90:ac:8f:31:3f:ce:12:25:8c:67:fd:19:2a: 6f:f2:65:59:12:98:7e:10:6a:58:db:ab:0d:b6:a7:78:6a:af: f9:af:85:36:8f:b9:46:ef:22:68:ea:9c:c7:28:60:ae:2d:1f: 69:25:5d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uSDsipqVrk83saAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzBmZGExZmUtZDBhOC00ZmFmLWI2NTQtNmFiZjExNDc2YzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsa2hDmhBQ2iEcwOBkEZ//+1I1GAmKMPJ/AS uHpQl+E4LLoN4BM0ouex6FW1rqZ38+vJyPCHq0RdPKVC4YmrSQEV19tUVAWGgPlv pqJ3AMiuMMv27YWyi4tZbT/auVxFMYRJ7h58iB7/tWmX5o5FNBK1rZKDDwuk/qMa zqXl525YvlYh6QAIh4S8PjamHuUS7kWRgppwNSlnwYk9lCzlMR2mkDOEGqFQqlia 86BUIWWLcTO2bup/ivdLAJ3OXpU+96IG3eB27IvWhWkG5amZ+a+OmlVtnTcU6zXQ ZsM2oKgqtmjSfFRpmaBEMRUMMYgsPrFG7Lds+0wPgj4cl9KRvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJUv+c3ps0x2NfConVRqKipcIcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRiNmM0M2YtZjBkOS0z NjViLWEyN2YtN2Y1ZGJhMzI3ZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHScAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKZAJ7xm3Lo7797PbbvJb9uuzA3/yxuqUeomFtFXU6jmAzayztQNWTt oAo8OFtBz/KVYrcA2SBWS2CtJFKhWiI1PNSfFLpO0lLlaqeujrb7KUxD7Z+Lr7+i 12pWvB11XOEeCRlklQ7MltJ9RG3gmhPdWRwFIyiBA1zNo/CielUzVTpt1+dFecbv B3bvZnEStDKKIYz6Y68gxbRQMloFr88Hamsa0bjjoarn6xOU4nUmxtP2cj/jByqq PnlLG3LlM0Lb4I/xU6e7gm0xkKyPMT/OEiWMZ/0ZKm/yZVkSmH4Qaljbqw22p3hq r/mvhTaPuUbvImjqnMcoYK4tH2klXQ4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:56:56 2025 by rpki-client