$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d8dbe9e-3939-3a8e-8fdb-786d1a1e33c3.roa File: 3d8dbe9e-3939-3a8e-8fdb-786d1a1e33c3.roa (raw, json) Hash identifier: JtadAV0ySmUPIlVPnkhKRoeWNijV0AmZcjUXaBX+crQ= Subject key identifier: 6C:56:24:DB:5C:F7:C5:26:DE:7E:38:20:CC:CE:0C:B4:A8:2C:3E:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8558EBE31FD0B1BD4BC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d8dbe9e-3939-3a8e-8fdb-786d1a1e33c3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.234.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:55:8e:be:31:fd:0b:1b:d4:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=10ed2865-d51f-4411-a06e-e143e6545e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:ae:9d:c1:95:68:85:f7:19:8d:8e:0f:f0: fc:16:73:50:24:ad:5e:40:13:8f:cc:11:bc:be:b5: 73:68:89:4e:0f:c9:c8:38:0d:f9:3e:b2:f9:7d:c4: fb:91:b9:6e:7d:aa:3a:d8:b3:fc:e7:fe:41:b5:eb: ad:53:dd:d3:71:68:e4:59:ad:87:e9:78:02:7a:07: 6a:11:be:40:ac:a0:41:a1:a2:06:cb:63:70:af:6e: f6:30:80:df:6e:b5:8e:ff:b6:b3:27:86:5c:7b:eb: 90:39:59:f1:7a:a0:2c:82:59:31:af:cc:32:1d:ec: 9a:f8:93:18:6c:d9:41:e6:8c:be:d4:d4:f2:03:a5: c9:67:ed:b2:ad:a9:aa:e8:de:6c:85:a8:c0:ae:57: 0b:0a:27:9a:e8:75:21:84:38:c0:5a:58:ee:e6:1c: 4a:86:42:4b:5e:44:ef:99:f3:ff:61:5d:87:58:a1: 0c:9c:de:83:cd:19:70:41:5c:10:84:3a:f6:e1:d3: 08:d4:fb:11:03:0e:0a:a4:ac:67:e0:55:36:21:27: e6:b8:79:35:ad:e5:c9:da:64:0a:1f:92:a1:7f:d4: 02:f5:1b:ab:cd:8e:13:72:8b:7a:aa:72:00:39:2c: 1a:84:ff:f3:79:da:d0:7e:88:a3:e8:7e:57:57:5b: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:56:24:DB:5C:F7:C5:26:DE:7E:38:20:CC:CE:0C:B4:A8:2C:3E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d8dbe9e-3939-3a8e-8fdb-786d1a1e33c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.234.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:02:08:63:56:f0:68:9a:6e:8f:76:18:78:15:58:07:df:1b: 27:b7:f9:6a:bf:90:63:2a:5d:d7:78:27:ae:3e:e7:b9:a9:b5: df:24:e1:35:5e:47:96:55:95:eb:7c:90:dc:43:0d:68:43:cf: 89:96:5c:06:9d:4f:15:80:ef:b9:57:40:d2:60:0d:55:2b:01: be:8e:fa:c5:f3:25:4e:33:2a:49:77:cb:68:94:2b:0e:0e:83: e7:d6:4b:d2:6b:29:b0:ed:99:bb:06:df:54:03:7a:58:d4:cc: b2:37:11:27:c8:1e:4a:ae:15:4c:5e:61:f7:32:3f:5f:66:7e: 4b:d4:e4:90:61:0e:e5:b6:8a:3a:93:18:eb:a1:bd:23:49:af: 6d:79:fb:92:3c:a6:81:ae:c3:4c:df:3b:64:df:d8:83:4c:df: 97:58:97:59:8e:53:ff:ed:15:75:8b:4c:0a:57:73:d1:40:d2: 72:b8:a4:bb:4f:ec:3a:40:f8:74:92:df:16:1f:6e:7d:0e:e5: 9a:bf:cd:ba:7c:6b:0c:df:69:65:ba:d2:8a:97:41:ee:6b:82: eb:81:99:b9:47:f6:d5:94:6c:68:1b:03:cf:8a:f7:7a:5e:ac: ee:91:2a:88:59:73:ee:dc:d4:e6:ea:fc:13:81:a3:03:e3:02: 07:ec:bd:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqFWOvjH9CxvUvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTBlZDI4NjUtZDUxZi00NDExLWEwNmUtZTE0M2U2NTQ1ZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUCuncGVaIX3GY2OD/D8FnNQJK1eQBOPzBG8 vrVzaIlOD8nIOA35PrL5fcT7kblufao62LP85/5BteutU93TcWjkWa2H6XgCegdq Eb5ArKBBoaIGy2Nwr272MIDfbrWO/7azJ4Zce+uQOVnxeqAsglkxr8wyHeya+JMY bNlB5oy+1NTyA6XJZ+2yramq6N5shajArlcLCiea6HUhhDjAWlju5hxKhkJLXkTv mfP/YV2HWKEMnN6DzRlwQVwQhDr24dMI1PsRAw4KpKxn4FU2ISfmuHk1reXJ2mQK H5Khf9QC9RurzY4Tcot6qnIAOSwahP/zedrQfoij6H5XV1s+YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxWJNtc98Um3n44IMzODLSoLD7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q4ZGJlOWUtMzkzOS0z YThlLThmZGItNzg2ZDFhMWUzM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASeq9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8CCGNW8Giabo92GHgVWAffGye3+Wq/kGMqXdd4J64+57mptd8k4TVe R5ZVlet8kNxDDWhDz4mWXAadTxWA77lXQNJgDVUrAb6O+sXzJU4zKkl3y2iUKw4O g+fWS9JrKbDtmbsG31QDeljUzLI3ESfIHkquFUxeYfcyP19mfkvU5JBhDuW2ijqT GOuhvSNJr215+5I8poGuw0zfO2Tf2INM35dYl1mOU//tFXWLTApXc9FA0nK4pLtP 7DpA+HSS3xYfbn0O5Zq/zbp8awzfaWW60oqXQe5rguuBmblH9tWUbGgbA8+K93pe rO6RKohZc+7c1Obq/BOBowPjAgfsvWI= -----END CERTIFICATE-----Generated at Wed Nov 5 03:38:45 2025 by rpki-client