$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59e4e853-f6c3-37fc-97c6-af03034d6600.roa File: 59e4e853-f6c3-37fc-97c6-af03034d6600.roa (raw, json) Hash identifier: QhWPrClQ2FAKWE/yRtAw36S2ipNADLqO4AN2s2TnWQU= Subject key identifier: 37:DF:5A:D7:D2:4B:2F:7E:5C:64:66:31:C9:C1:0E:F8:CE:15:6B:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9D3ACDCEA7D023C013360 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59e4e853-f6c3-37fc-97c6-af03034d6600.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.149.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:d3:ac:dc:ea:7d:02:3c:01:33:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ecd245db-2162-40e3-b19b-fb37cff68428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:e0:8d:6a:48:d5:b5:c5:e3:91:f1:4d:da: 2b:9c:33:a7:bd:12:50:39:a3:75:41:84:df:bc:74: ac:6e:5b:b0:c9:42:6e:e5:16:14:e2:0f:a9:9d:36: 86:4e:9e:f4:5e:30:cf:05:12:b2:fe:81:e4:30:69: 7d:5d:86:0c:87:fc:0e:63:c8:4c:61:4a:8f:69:2b: 74:78:06:ac:37:c7:df:55:5f:d6:fa:8c:c5:53:83: a9:08:da:f0:da:90:91:81:d6:d3:24:31:de:81:51: 57:53:c0:fe:a8:2e:52:40:eb:1d:99:3b:51:9c:5e: 45:50:13:1c:93:2e:15:7e:3e:c0:dd:99:a4:1a:7e: ef:ce:af:2d:9d:b6:90:7b:df:fc:87:3d:a0:96:77: db:3d:dd:6f:f9:26:bf:dd:c0:ac:b3:d8:cb:34:59: 5b:42:19:7c:7e:e3:26:c7:56:9c:57:15:8b:72:0b: 1c:e4:ae:93:bd:86:0d:e0:57:ea:93:a7:8c:b8:d4: 6e:47:5f:71:ec:74:8e:26:95:ee:b9:cf:1a:b8:24: 5e:c3:59:03:ed:74:30:91:79:bc:b0:5b:75:f5:37: df:75:94:89:47:25:cb:99:ee:93:4e:1d:0e:3e:49: 80:86:48:4e:90:6d:00:5d:b5:f9:2b:2b:32:5a:72: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DF:5A:D7:D2:4B:2F:7E:5C:64:66:31:C9:C1:0E:F8:CE:15:6B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59e4e853-f6c3-37fc-97c6-af03034d6600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.149.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:43:ad:dc:1a:58:9d:9f:4b:ab:69:93:8e:ca:15:0d:9d:ba: 10:32:4f:c5:3c:32:99:33:55:c0:6b:b4:6d:28:ae:ae:25:08: ab:90:5e:4b:e1:d9:30:47:04:65:b5:bb:39:6f:9d:22:da:3a: bc:ec:a7:20:e8:cb:9e:6e:da:04:f9:51:dc:ea:44:71:a8:40: e6:7f:51:ef:08:b7:d3:ca:c2:4f:7b:9a:2e:39:f0:b7:63:f4: 3d:fe:d0:78:0f:b1:b2:f9:b1:a5:fb:51:20:fc:25:86:ab:10: ef:ef:cf:7b:d8:52:9c:f8:ca:bf:e7:67:77:91:13:c1:25:f4: 71:33:5d:0a:79:c5:f1:4f:c7:30:2a:7f:7f:7c:ff:25:80:4a: a7:6b:a3:27:c8:48:e9:67:0f:97:ed:91:84:55:97:cc:31:10: db:d7:68:11:75:17:bf:58:1e:9f:27:af:af:6d:70:06:b8:9f: 00:32:01:6d:dd:9e:23:8d:02:a5:7a:4c:91:f6:7d:a0:0a:f1: 43:41:b0:a9:04:81:a0:02:5a:14:ed:bc:f1:48:3f:ca:27:dd: 2f:8d:ee:47:9e:13:34:51:91:eb:49:10:09:d6:58:33:9c:67: 97:95:08:b4:04:2f:56:03:4b:fb:63:86:81:02:3e:a0:b1:0f: c0:7f:29:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqdOs3Op9AjwBM2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZWNkMjQ1ZGItMjE2Mi00MGUzLWIxOWItZmIzN2NmZjY4NDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYjgjWpI1bXF45HxTdornDOnvRJQOaN1QYTf vHSsbluwyUJu5RYU4g+pnTaGTp70XjDPBRKy/oHkMGl9XYYMh/wOY8hMYUqPaSt0 eAasN8ffVV/W+ozFU4OpCNrw2pCRgdbTJDHegVFXU8D+qC5SQOsdmTtRnF5FUBMc ky4Vfj7A3ZmkGn7vzq8tnbaQe9/8hz2glnfbPd1v+Sa/3cCss9jLNFlbQhl8fuMm x1acVxWLcgsc5K6TvYYN4Ffqk6eMuNRuR19x7HSOJpXuuc8auCRew1kD7XQwkXm8 sFt19TffdZSJRyXLme6TTh0OPkmAhkhOkG0AXbX5KysyWnKUhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDffWtfSSy9+XGRmMcnBDvjOFWvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTllNGU4NTMtZjZjMy0z N2ZjLTk3YzYtYWYwMzAzNGQ2NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdDrdwaWJ2fS6tpk47KFQ2duhAyT8U8MpkzVcBrtG0orq4lCKuQXkvh 2TBHBGW1uzlvnSLaOrzspyDoy55u2gT5UdzqRHGoQOZ/Ue8It9PKwk97mi458Ldj 9D3+0HgPsbL5saX7USD8JYarEO/vz3vYUpz4yr/nZ3eRE8El9HEzXQp5xfFPxzAq f398/yWASqdroyfISOlnD5ftkYRVl8wxENvXaBF1F79YHp8nr69tcAa4nwAyAW3d niONAqV6TJH2faAK8UNBsKkEgaACWhTtvPFIP8on3S+N7keeEzRRketJEAnWWDOc Z5eVCLQEL1YDS/tjhoECPqCxD8B/KS0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:44:02 2025 by rpki-client