$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5afdd259-e91d-386e-ab05-878e0b987526.roa File: 5afdd259-e91d-386e-ab05-878e0b987526.roa (raw, json) Hash identifier: DKK6LVRUDBts2qHcwaU+SUTJbxHDBEl3NlrqQuOPOoo= Subject key identifier: 81:A2:CE:E7:24:4B:DA:0D:DE:F6:23:2E:39:9F:18:E2:C8:61:22:1E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3F3330B962D6B0EB4E640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5afdd259-e91d-386e-ab05-878e0b987526.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 73.141.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:f3:33:0b:96:2d:6b:0e:b4:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bf9edcb9-5cf5-49de-8a7f-b394b8604382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:90:a5:79:01:d1:d3:49:fa:20:e5:89:d3: 5c:d1:31:9e:06:b6:87:88:91:79:fb:8c:8e:cc:45: 3b:65:90:18:5e:19:2b:a1:d9:61:76:7f:ff:c1:4c: 2b:d6:06:8d:ec:99:40:d8:04:00:ff:a4:b4:cd:0d: 6d:17:55:05:f0:f6:47:8a:48:dc:37:8c:94:4e:e4: b2:a7:f0:8f:85:4e:db:95:db:dd:12:81:0d:69:87: 2b:49:51:f5:0b:16:1d:4a:8e:7e:b2:ad:3b:0a:fa: ea:e2:ee:47:4a:c1:ef:ce:b1:52:83:2d:e1:9d:57: b7:d7:ea:52:1e:14:97:18:32:0e:07:8d:e2:41:22: 17:6a:62:d9:56:fc:28:8d:a7:ca:63:e4:c1:44:84: 3a:1b:54:c1:f2:eb:b1:bf:0c:e0:77:3e:a0:be:f1: b1:9e:c2:f7:46:c0:2f:db:28:9b:e1:2b:3d:60:b0: 3f:e1:19:2b:bb:1b:d5:98:5f:cf:05:d0:ac:ba:c3: 0d:19:fe:5b:ea:79:90:32:e9:a9:30:65:de:4a:f9: 2a:04:0d:d7:f5:c8:63:8f:a5:3f:32:4b:da:07:45: be:c5:53:b7:14:ea:e7:66:3f:30:77:cd:b1:2d:e2: 6c:b8:00:94:61:1b:2a:86:2c:d7:d5:57:42:95:7b: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A2:CE:E7:24:4B:DA:0D:DE:F6:23:2E:39:9F:18:E2:C8:61:22:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5afdd259-e91d-386e-ab05-878e0b987526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.141.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e8:05:fe:af:c7:48:d1:eb:08:0d:7a:75:27:c1:81:a6:01: fd:89:67:0a:42:6e:76:51:73:e6:94:f4:69:9e:1e:2d:0e:d5: f7:56:d2:c6:33:83:b8:d2:34:98:fb:4f:14:f9:50:b9:02:7c: 15:9b:40:07:90:a5:53:39:0f:a4:5e:62:11:9a:64:5a:40:a5: e1:b2:ab:d0:40:b1:48:fe:3f:80:00:a2:d4:89:21:6f:0c:14: 2d:68:22:28:11:7c:80:6d:80:c9:42:4b:a5:e1:f9:dd:c7:bc: 57:69:80:b6:d4:d7:29:3b:e3:95:91:85:0e:72:d9:bb:b6:fd: d5:a4:73:b5:b1:c5:11:ab:7d:ba:b8:99:28:04:57:3a:c2:cc: 53:4e:46:73:7f:07:ee:74:90:7b:f7:b9:1b:52:46:da:ea:ef: 52:c2:b4:ef:5e:1d:17:39:ac:01:85:2f:75:b4:a6:3c:42:b8: d5:fa:36:97:50:3a:81:4c:8e:71:62:13:8a:84:4e:4a:bd:9d: 09:17:ee:25:ec:03:d2:c3:1a:df:e9:96:38:6d:02:aa:70:49: e6:39:c5:2a:6d:ec:0f:01:1e:0d:70:eb:d3:72:a7:9b:fe:d3: 25:e0:6b:97:81:09:49:03:93:9f:9e:2b:6c:26:8a:3a:56:b0: 6f:5d:da:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw/MzC5Ytaw605kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmY5ZWRjYjktNWNmNS00OWRlLThhN2YtYjM5NGI4NjA0MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxOQpXkB0dNJ+iDlidNc0TGeBraHiJF5+4yO zEU7ZZAYXhkrodlhdn//wUwr1gaN7JlA2AQA/6S0zQ1tF1UF8PZHikjcN4yUTuSy p/CPhU7bldvdEoENaYcrSVH1CxYdSo5+sq07Cvrq4u5HSsHvzrFSgy3hnVe31+pS HhSXGDIOB43iQSIXamLZVvwojafKY+TBRIQ6G1TB8uuxvwzgdz6gvvGxnsL3RsAv 2yib4Ss9YLA/4RkruxvVmF/PBdCsusMNGf5b6nmQMumpMGXeSvkqBA3X9chjj6U/ MkvaB0W+xVO3FOrnZj8wd82xLeJsuACUYRsqhizX1VdClXtouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGizuckS9oN3vYjLjmfGOLIYSIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWFmZGQyNTktZTkxZC0z ODZlLWFiMDUtODc4ZTBiOTg3NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSY2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIToBf6vx0jR6wgNenUnwYGmAf2JZwpCbnZRc+aU9GmeHi0O1fdW0sYz g7jSNJj7TxT5ULkCfBWbQAeQpVM5D6ReYhGaZFpApeGyq9BAsUj+P4AAotSJIW8M FC1oIigRfIBtgMlCS6Xh+d3HvFdpgLbU1yk745WRhQ5y2bu2/dWkc7WxxRGrfbq4 mSgEVzrCzFNORnN/B+50kHv3uRtSRtrq71LCtO9eHRc5rAGFL3W0pjxCuNX6NpdQ OoFMjnFiE4qETkq9nQkX7iXsA9LDGt/pljhtAqpwSeY5xSpt7A8BHg1w69Nyp5v+ 0yXga5eBCUkDk5+eK2wmijpWsG9d2tM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:24 2025 by rpki-client