$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48f4fa54-59d3-3655-99c0-99fb2fe3e595.roa File: 48f4fa54-59d3-3655-99c0-99fb2fe3e595.roa (raw, json) Hash identifier: 8bGq7LS4UNa+e8M5Sv5XdXaU9oSkTEE5+X3Qnrw++LE= Subject key identifier: 7D:81:E1:DA:51:AB:D9:58:40:F8:0F:42:8B:B8:83:1C:2C:03:00:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA79615EF491AA2407F540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48f4fa54-59d3-3655-99c0-99fb2fe3e595.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 73.161.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:79:61:5e:f4:91:aa:24:07:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1c679650-c05a-489f-9d52-655361f9aa17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:ef:e5:68:70:df:44:90:5f:c0:9a:8c:76: 0b:20:f2:be:47:6b:ed:c5:7f:89:1e:95:11:02:eb: 0c:9d:5e:a4:dd:c0:8c:18:2d:be:c1:a9:66:49:58: de:dc:82:ee:80:ed:85:6d:f7:60:a5:fb:52:ce:9c: 17:bd:9f:75:80:57:55:48:67:9f:16:25:ec:73:14: b2:c5:11:1b:1c:71:9e:78:50:fb:8a:02:62:ce:e7: 1b:2a:2f:cc:6e:79:b8:7d:88:51:f4:5d:1f:ec:a6: 53:c6:44:0d:61:f2:97:d8:b9:5f:9a:6a:2d:06:cd: 00:06:65:2c:bc:62:8b:94:73:c3:f8:7c:d2:fc:fb: d4:b0:24:8e:05:0c:79:2d:52:8c:06:2c:8a:16:b1: c9:5f:41:36:5d:ce:dd:58:b5:f3:14:94:54:02:de: e0:a8:a8:cf:2f:af:fe:59:e5:6d:a7:e8:7b:8b:6e: 4a:8f:49:6d:7f:c6:83:a9:03:82:d6:55:c5:be:24: 92:e9:75:cf:21:53:a9:7b:16:23:38:65:f2:47:4d: 65:80:3b:f4:66:6a:f6:dc:f5:bb:40:2f:aa:b2:aa: ee:e1:a7:16:84:27:fb:f3:39:81:f4:de:09:20:51: 1e:ef:72:89:16:23:25:30:92:72:10:a8:17:af:cc: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:81:E1:DA:51:AB:D9:58:40:F8:0F:42:8B:B8:83:1C:2C:03:00:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48f4fa54-59d3-3655-99c0-99fb2fe3e595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5f:52:61:3f:be:1d:6f:e0:a3:51:d6:f6:3e:cd:0a:49:a4: 2c:f0:f7:3c:f1:49:5d:1a:c8:d6:0a:36:49:a0:45:cb:bd:05: 14:9c:6a:8a:1e:8e:33:2f:58:4a:b1:1e:90:15:2e:35:28:5f: 84:e3:3b:2f:7a:2d:49:05:7f:38:fc:14:61:9a:cc:1c:bb:00: f0:08:9b:b5:0c:0f:94:8b:a9:17:a5:1c:88:11:ac:21:04:c4: 8a:f5:b2:f7:a6:b8:3b:72:83:e1:bb:ad:7e:f9:a2:5e:c7:f5: 54:f8:68:ae:83:fb:57:6b:df:f1:b9:53:48:47:5a:ec:10:bc: 1c:05:be:ed:fb:9d:fe:f2:b6:19:66:c9:aa:c2:77:24:80:b9: fa:56:95:83:71:1f:35:53:4d:18:0f:23:40:2d:f6:34:de:db: 2e:ab:9e:5a:5d:e9:77:24:de:17:2e:ad:c7:0e:b3:1f:74:cc: eb:57:0f:6c:83:83:e1:6f:df:e7:7c:38:1d:9d:a6:e6:c4:6f: fc:34:3e:7f:0c:24:a7:fd:52:d1:c9:df:17:4e:ab:18:98:76: d3:4b:f5:85:50:93:84:06:82:9c:c0:cd:cb:2c:78:fb:23:b8: ed:1c:4e:59:af:25:35:cc:cb:2c:e1:b6:fd:4e:21:21:c6:7e: 9b:2d:06:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqnlhXvSRqiQH9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWM2Nzk2NTAtYzA1YS00ODlmLTlkNTItNjU1MzYxZjlhYTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tfv5Whw30SQX8CajHYLIPK+R2vtxX+JHpUR AusMnV6k3cCMGC2+walmSVje3ILugO2FbfdgpftSzpwXvZ91gFdVSGefFiXscxSy xREbHHGeeFD7igJizucbKi/Mbnm4fYhR9F0f7KZTxkQNYfKX2LlfmmotBs0ABmUs vGKLlHPD+HzS/PvUsCSOBQx5LVKMBiyKFrHJX0E2Xc7dWLXzFJRUAt7gqKjPL6/+ WeVtp+h7i25Kj0ltf8aDqQOC1lXFviSS6XXPIVOpexYjOGXyR01lgDv0Zmr23PW7 QC+qsqru4acWhCf78zmB9N4JIFEe73KJFiMlMJJyEKgXr8wuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2B4dpRq9lYQPgPQou4gxwsAwBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDhmNGZhNTQtNTlkMy0z NjU1LTk5YzAtOTlmYjJmZTNlNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaF2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1fUmE/vh1v4KNR1vY+zQpJpCzw9zzxSV0ayNYKNkmgRcu9BRScaooe jjMvWEqxHpAVLjUoX4TjOy96LUkFfzj8FGGazBy7APAIm7UMD5SLqRelHIgRrCEE xIr1svemuDtyg+G7rX75ol7H9VT4aK6D+1dr3/G5U0hHWuwQvBwFvu37nf7ythlm yarCdySAufpWlYNxHzVTTRgPI0At9jTe2y6rnlpd6Xck3hcurccOsx90zOtXD2yD g+Fv3+d8OB2dpubEb/w0Pn8MJKf9UtHJ3xdOqxiYdtNL9YVQk4QGgpzAzcssePsj uO0cTlmvJTXMyyzhtv1OISHGfpstBuc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:34:18 2025 by rpki-client