$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b1fa940-b930-340f-b691-5bca5756e7ed.roa File: 3b1fa940-b930-340f-b691-5bca5756e7ed.roa (raw, json) Hash identifier: gp1JHtIi7OmYZP+NbJhbDDoOarrxRkbxwbXSik6R0+4= Subject key identifier: FE:B9:C1:18:EC:52:63:07:6E:85:32:3C:BC:69:E0:9B:CB:5A:14:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B13256D5CD715DFCA19F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b1fa940-b930-340f-b691-5bca5756e7ed.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 73.137.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:13:25:6d:5c:d7:15:df:ca:19:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=ff88d714-a4d0-474f-b769-2d9a7f77dfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:28:f2:5f:5c:48:84:50:49:4c:14:50:ef: da:6c:a6:08:8e:09:35:a4:89:66:77:9a:0d:d9:60: e0:05:25:91:2a:d2:3f:d6:4e:74:c8:44:bc:e2:e8: 69:e3:0f:1f:4b:aa:7b:99:7c:a1:ce:a8:56:32:75: c6:29:23:35:98:cd:c3:56:28:fd:a1:00:a4:2f:33: af:d5:7b:e0:c1:ac:d0:ec:80:08:86:cc:33:02:37: 97:1f:fe:c3:91:39:91:11:51:3b:ab:da:84:d7:4c: 09:86:75:35:64:3f:bd:18:2a:c1:1c:14:59:82:e3: f2:d2:52:25:87:b3:9a:45:15:cd:21:82:e7:20:4b: 72:48:74:b5:41:57:3d:06:5c:85:78:76:c9:73:db: f1:8a:45:03:05:71:d6:e6:64:21:c8:20:a4:27:2a: 12:29:92:8f:2a:37:df:2f:0a:29:e2:a8:83:45:6c: 4d:71:83:d4:a6:5d:f4:d0:d4:07:3f:72:a8:39:c2: 2f:24:13:28:cb:ac:ba:34:46:3c:4c:93:fd:93:c0: 24:63:16:ac:96:ea:5a:5b:0e:e5:48:12:9d:aa:87: 12:af:1c:83:9c:71:fa:57:73:c5:7b:94:e4:b4:dc: a3:7e:68:b1:03:e6:6b:25:e6:f0:7d:08:0a:15:6e: d2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:C1:18:EC:52:63:07:6E:85:32:3C:BC:69:E0:9B:CB:5A:14:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b1fa940-b930-340f-b691-5bca5756e7ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.137.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:1c:94:f4:5b:b2:65:0d:4c:78:67:36:e6:e4:d5:f5:62:53: 16:1d:ee:ae:d3:70:78:44:11:d5:c9:c9:e1:b6:6e:89:9a:88: ba:4a:c0:f5:c7:21:95:54:d7:74:7b:43:6b:f3:3e:0c:a8:dc: 57:ce:a8:52:63:64:31:6b:bc:5f:7d:3f:76:fa:a6:10:dd:6a: ac:b8:dd:8c:08:35:de:79:cd:df:a4:89:10:f4:3d:bc:cb:17: c3:3a:e6:da:71:47:52:52:18:e2:0f:d0:a7:cc:ee:3a:f6:37: 6a:19:89:e4:ea:80:ce:de:88:db:6a:f2:d3:82:e9:82:78:23: 6d:96:fe:02:0d:b4:7a:9a:a8:65:eb:85:8d:64:f8:ad:52:c2: 22:36:6d:27:8f:d7:96:62:c2:5c:a1:b2:11:f2:f0:ac:25:40: b4:f9:fa:30:1f:7c:1a:26:65:33:74:c9:8f:59:85:bc:49:34: 2d:54:36:ea:0f:aa:ae:31:ce:ac:21:ba:10:5e:f7:5a:5f:2f: 15:a5:96:ee:20:2b:3b:8e:b9:ea:a3:cb:ac:c7:04:94:c0:c7: 24:ec:a4:80:66:c3:3d:63:d5:b5:b5:7c:e3:5f:e0:ca:07:77: 68:ae:dd:ba:65:47:ac:75:b0:e5:b2:24:c6:69:92:2a:4a:31: 14:cf:fe:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCxMlbVzXFd/KGfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZmY4OGQ3MTQtYTRkMC00NzRmLWI3NjktMmQ5YTdmNzdkZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomgo8l9cSIRQSUwUUO/abKYIjgk1pIlmd5oN 2WDgBSWRKtI/1k50yES84uhp4w8fS6p7mXyhzqhWMnXGKSM1mM3DVij9oQCkLzOv 1XvgwazQ7IAIhswzAjeXH/7DkTmREVE7q9qE10wJhnU1ZD+9GCrBHBRZguPy0lIl h7OaRRXNIYLnIEtySHS1QVc9BlyFeHbJc9vxikUDBXHW5mQhyCCkJyoSKZKPKjff Lwop4qiDRWxNcYPUpl300NQHP3KoOcIvJBMoy6y6NEY8TJP9k8AkYxaslupaWw7l SBKdqocSrxyDnHH6V3PFe5TktNyjfmixA+ZrJebwfQgKFW7SxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP65wRjsUmMHboUyPLxp4JvLWhSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2IxZmE5NDAtYjkzMC0z NDBmLWI2OTEtNWJjYTU3NTZlN2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASYlqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANIclPRbsmUNTHhnNubk1fViUxYd7q7TcHhEEdXJyeG2bomaiLpKwPXH IZVU13R7Q2vzPgyo3FfOqFJjZDFrvF99P3b6phDdaqy43YwINd55zd+kiRD0PbzL F8M65tpxR1JSGOIP0KfM7jr2N2oZieTqgM7eiNtq8tOC6YJ4I22W/gINtHqaqGXr hY1k+K1SwiI2bSeP15ZiwlyhshHy8KwlQLT5+jAffBomZTN0yY9ZhbxJNC1UNuoP qq4xzqwhuhBe91pfLxWllu4gKzuOueqjy6zHBJTAxyTspIBmwz1j1bW1fONf4MoH d2iu3bplR6x1sOWyJMZpkipKMRTP/ic= -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:54 2025 by rpki-client