$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f70fb98-25c2-36f5-aea2-26e16d7eac74.roa File: 2f70fb98-25c2-36f5-aea2-26e16d7eac74.roa (raw, json) Hash identifier: gcYjqSFsLsoooP6c/F65M0BS6iJlWhZEnAZy8pYjI0A= Subject key identifier: 4A:B1:B6:52:2E:72:05:22:91:F6:92:EC:EC:8C:0C:26:33:C8:D8:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A910C89CE06824C3580480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f70fb98-25c2-36f5-aea2-26e16d7eac74.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.166.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:10:c8:9c:e0:68:24:c3:58:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=eba4f1d9-7408-4c60-8966-02c6992f142c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:af:6b:94:3f:4f:50:01:ea:a7:c1:47:5e: bc:12:8e:ed:2f:bd:44:db:4a:56:9c:22:3c:0f:bb: e4:a6:ef:cd:ba:a9:14:bb:40:12:d5:83:4b:63:fe: a3:9b:9e:8f:ee:a2:b1:75:e9:df:ac:a8:6a:8a:de: f5:b4:bc:5e:01:81:f9:d4:fc:be:9a:a7:2d:13:80: 74:b6:39:07:f8:12:4d:09:18:aa:36:28:bb:35:3e: 04:24:a5:6f:d2:1b:ed:ca:3b:06:8f:40:fc:ab:1e: 5c:db:54:7d:1d:8e:f1:14:e6:c4:bf:2e:7d:d2:d5: 89:a7:aa:f2:5f:88:9a:71:52:36:13:27:2a:6e:c9: dc:2b:b0:66:fd:7f:c6:43:2e:6b:7f:62:83:6b:ce: 11:d5:13:c7:9b:47:30:cc:9a:ec:e0:e9:91:ac:4a: 05:31:94:fa:76:33:3f:7b:60:c0:49:32:dd:bf:39: dd:62:c3:22:cd:a6:0d:59:2f:cb:9f:e0:51:4c:09: d3:12:85:74:51:72:00:a9:68:75:9a:53:7c:8a:f8: 95:c1:bf:1a:eb:60:92:04:81:e6:1d:d8:57:9f:d3: 64:17:e6:94:82:5e:4f:28:75:2a:6c:57:09:ec:3c: 14:6f:c0:a7:15:b5:54:13:ef:90:da:00:32:82:8b: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B1:B6:52:2E:72:05:22:91:F6:92:EC:EC:8C:0C:26:33:C8:D8:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f70fb98-25c2-36f5-aea2-26e16d7eac74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.166.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4c:42:d1:d2:93:50:62:6a:5e:c4:12:58:b2:e5:93:3b:56: ee:6d:98:6a:1b:49:a4:e0:93:ce:43:a5:f7:cb:04:9e:a7:4b: d6:4b:27:0b:76:ef:4b:2f:d8:87:81:c7:f5:21:aa:95:f2:7d: f4:56:82:2b:ab:0f:bd:e0:28:d9:94:06:9e:95:25:cc:b0:36: 7a:e0:6e:ea:28:63:4f:62:cf:b2:93:41:7e:9c:17:bf:cd:fe: 9c:53:a0:85:0e:cd:11:10:cc:1e:f9:16:e1:82:a0:82:64:80: 72:fd:dc:29:3e:80:b4:cf:5a:1a:5f:33:89:c0:80:80:db:a9: 77:06:88:99:5a:e5:69:40:22:29:5a:be:3f:3f:d2:0f:91:c4: 9b:9a:0b:c9:46:47:fe:a5:7e:89:db:6e:bb:d7:21:b3:db:cd: 80:8c:41:b6:14:ba:ab:c7:8e:01:3d:65:76:d7:8f:6a:36:a2: 61:59:4b:d2:90:86:49:97:e9:87:e7:b7:c5:f8:b9:c1:a1:11: 02:a5:3e:2b:b7:da:50:9a:f9:38:13:97:54:79:4f:ce:c5:e7: 71:72:72:d1:6f:2b:4c:be:e4:79:38:b9:d8:cd:95:43:88:94: ab:51:8b:9c:44:ed:61:b3:41:0d:f5:26:da:4a:2a:47:9c:36: 79:c6:33:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqRDInOBoJMNYBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZWJhNGYxZDktNzQwOC00YzYwLTg5NjYtMDJjNjk5MmYxNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrCva5Q/T1AB6qfBR168Eo7tL71E20pWnCI8 D7vkpu/NuqkUu0AS1YNLY/6jm56P7qKxdenfrKhqit71tLxeAYH51Py+mqctE4B0 tjkH+BJNCRiqNii7NT4EJKVv0hvtyjsGj0D8qx5c21R9HY7xFObEvy590tWJp6ry X4iacVI2EycqbsncK7Bm/X/GQy5rf2KDa84R1RPHm0cwzJrs4OmRrEoFMZT6djM/ e2DASTLdvzndYsMizaYNWS/Ln+BRTAnTEoV0UXIAqWh1mlN8iviVwb8a62CSBIHm HdhXn9NkF+aUgl5PKHUqbFcJ7DwUb8CnFbVUE++Q2gAygotTdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqxtlIucgUikfaS7OyMDCYzyNgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY3MGZiOTgtMjVjMi0z NmY1LWFlYTItMjZlMTZkN2VhYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZMQtHSk1Bial7EEliy5ZM7Vu5tmGobSaTgk85DpffLBJ6nS9ZLJwt2 70sv2IeBx/UhqpXyffRWgiurD73gKNmUBp6VJcywNnrgbuooY09iz7KTQX6cF7/N /pxToIUOzREQzB75FuGCoIJkgHL93Ck+gLTPWhpfM4nAgIDbqXcGiJla5WlAIila vj8/0g+RxJuaC8lGR/6lfonbbrvXIbPbzYCMQbYUuqvHjgE9ZXbXj2o2omFZS9KQ hkmX6Yfnt8X4ucGhEQKlPiu32lCa+TgTl1R5T87F53FyctFvK0y+5Hk4udjNlUOI lKtRi5xE7WGzQQ31JtpKKkecNnnGMyE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:01:15 2025 by rpki-client