$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0582bd-e457-39aa-9f64-2e2b0ae0a629.roa File: 4d0582bd-e457-39aa-9f64-2e2b0ae0a629.roa (raw, json) Hash identifier: MwLw+QdUsFX8PbYG9eTd+D5Yefnke57jsPpxHcpD6PA= Subject key identifier: 59:B1:73:6D:49:A1:0B:2E:7E:71:84:A6:0D:14:50:8C:B4:3A:B1:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC198F8C62C2BE69C10EC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0582bd-e457-39aa-9f64-2e2b0ae0a629.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 73.160.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:98:f8:c6:2c:2b:e6:9c:10:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8a94836e-9d17-4cf1-8556-7c857e135b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:11:54:90:19:5c:40:ba:e4:1d:fc:97:92: a1:92:24:52:77:4a:7c:79:4a:89:3c:71:48:f6:fd: 8c:40:0d:dc:d4:f8:7b:0f:93:00:0a:9e:7a:12:23: f8:1b:5f:a1:ed:25:36:75:83:af:ec:b8:77:06:f9: 70:0a:d6:69:5b:47:03:c2:ee:f6:bf:68:1c:d1:c3: 83:4d:51:df:fe:68:ca:3e:63:74:19:cd:d5:15:e9: 59:8d:6a:b4:16:72:59:df:50:30:9c:40:94:75:8c: dd:be:2f:61:55:cd:db:14:72:27:d8:61:b8:b4:85: ca:02:9b:d5:b4:45:00:08:be:40:f7:35:47:69:c4: 2b:b5:7c:98:06:78:e3:9b:9d:f6:ad:b5:4f:a9:2d: de:2a:b4:99:7c:d6:f1:8f:b8:37:9a:79:7b:e1:87: 75:ce:6d:20:4c:5a:1c:d8:81:27:9a:c5:84:1e:66: 75:a2:30:c9:a7:30:0b:d1:fc:3d:66:e0:de:e1:42: 17:5b:c4:d2:6b:11:50:11:6a:36:91:de:f3:9b:8f: 1f:7b:bf:ce:0a:da:86:8e:6c:58:0b:3a:4e:d0:36: e8:46:81:1a:49:21:1c:5f:90:84:33:52:5c:f6:a1: ad:68:b2:a2:7e:0b:7f:4f:ff:23:87:20:0f:a7:66: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:73:6D:49:A1:0B:2E:7E:71:84:A6:0D:14:50:8C:B4:3A:B1:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d0582bd-e457-39aa-9f64-2e2b0ae0a629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.160.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:1c:f3:65:99:b7:a7:f9:3d:06:99:c5:42:f7:35:48:9d:70: 66:e9:b3:e7:18:3d:85:1f:c2:5c:79:8d:7f:e1:cc:94:9f:c4: ba:98:1d:b8:af:c9:32:c9:36:33:b1:67:91:31:ee:22:f9:50: 85:81:c8:fa:97:3a:46:47:e4:85:35:e6:2a:51:fa:24:43:9a: ad:cb:56:f9:e6:17:8c:26:4a:2b:df:52:5f:97:54:ea:c5:48: c8:8b:a4:b8:c6:ec:bf:54:70:29:a7:43:0e:79:0e:6c:0a:95: f6:9b:57:62:9a:7a:9c:5a:89:24:25:48:31:e9:1c:6a:bb:d2: 56:da:79:d9:9d:c0:10:09:96:04:79:98:47:8b:f7:1d:5e:d2: 05:c1:36:5e:ac:33:cb:fc:12:4c:d2:4e:89:5e:95:fd:b0:a8: 5b:54:a1:7e:03:23:56:d5:ff:f7:a7:cd:74:ef:46:ef:fe:84: 71:ed:16:d6:f8:a8:93:09:77:9c:8d:23:a7:6c:fb:fd:00:50: 58:9e:80:2e:1b:58:03:61:80:15:8c:6d:63:d4:30:b6:5e:70: eb:c9:09:7d:0f:75:30:39:93:53:48:42:d5:29:a7:c2:4a:2b: 44:2e:a6:06:df:1d:1d:dc:48:08:dc:70:d7:ee:04:42:64:eb: 54:36:96:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswZj4xiwr5pwQ7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGE5NDgzNmUtOWQxNy00Y2YxLTg1NTYtN2M4NTdlMTM1YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSERVJAZXEC65B38l5KhkiRSd0p8eUqJPHFI 9v2MQA3c1Ph7D5MACp56EiP4G1+h7SU2dYOv7Lh3BvlwCtZpW0cDwu72v2gc0cOD TVHf/mjKPmN0Gc3VFelZjWq0FnJZ31AwnECUdYzdvi9hVc3bFHIn2GG4tIXKApvV tEUACL5A9zVHacQrtXyYBnjjm532rbVPqS3eKrSZfNbxj7g3mnl74Yd1zm0gTFoc 2IEnmsWEHmZ1ojDJpzAL0fw9ZuDe4UIXW8TSaxFQEWo2kd7zm48fe7/OCtqGjmxY CzpO0DboRoEaSSEcX5CEM1Jc9qGtaLKifgt/T/8jhyAPp2byzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmxc21JoQsufnGEpg0UUIy0OrFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQwNTgyYmQtZTQ1Ny0z OWFhLTlmNjQtMmUyYjBhZTBhNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsc82WZt6f5PQaZxUL3NUidcGbps+cYPYUfwlx5jX/hzJSfxLqYHbiv yTLJNjOxZ5Ex7iL5UIWByPqXOkZH5IU15ipR+iRDmq3LVvnmF4wmSivfUl+XVOrF SMiLpLjG7L9UcCmnQw55DmwKlfabV2KaepxaiSQlSDHpHGq70lbaedmdwBAJlgR5 mEeL9x1e0gXBNl6sM8v8EkzSTolelf2wqFtUoX4DI1bV//enzXTvRu/+hHHtFtb4 qJMJd5yNI6ds+/0AUFiegC4bWANhgBWMbWPUMLZecOvJCX0PdTA5k1NIQtUpp8JK K0QupgbfHR3cSAjccNfuBEJk61Q2lqM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:17 2025 by rpki-client