$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c6088-dd62-3c49-8246-68f79137e738.roa File: 8b8c6088-dd62-3c49-8246-68f79137e738.roa (raw, json) Hash identifier: wx1nCvwUKBaUEgVNr2c3lWaqxYI70OSGSHmPTED8/GA= Subject key identifier: 7B:A1:6B:2B:0A:7A:65:33:B4:00:CA:D5:7B:39:35:CE:EB:25:89:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B942E618BDBF21414BC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c6088-dd62-3c49-8246-68f79137e738.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 73.207.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:94:2e:61:8b:db:f2:14:14:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=0e9342f1-29e6-4a7f-b264-24885b583aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:00:1d:3f:48:86:69:7b:a9:66:ad:5c:4f: 4d:9b:8b:f4:ae:65:8f:da:df:87:26:d0:f9:c9:86: 25:f6:a1:7d:64:0b:b0:d8:ff:03:e5:90:f4:11:c1: 1c:62:b4:9d:f2:3b:0d:ce:69:6b:ba:59:09:6b:2c: 91:f0:2f:b1:bf:e5:64:1f:ce:38:32:d8:d1:73:48: a2:26:24:f0:2b:5e:6a:36:85:50:9d:43:2b:89:7b: 93:ac:a5:16:85:32:4d:79:b2:20:ce:c4:d5:59:9d: d3:bd:83:b6:cb:b4:e0:74:40:f7:37:e3:e2:e6:05: f2:78:9e:c3:64:4a:d4:cc:a2:b4:b9:11:80:b3:c1: fe:f5:8e:a7:a6:2b:71:bb:2b:a5:9a:9b:70:66:f4: 4f:d5:3c:c3:10:ec:da:4d:66:41:7f:01:22:0c:36: 0d:84:17:11:dd:1f:e4:c4:02:f2:e1:d2:10:f8:31: 49:ec:6d:6f:6e:4f:47:33:1e:06:66:5e:4c:d6:e8: a6:6e:eb:b3:22:a6:c1:13:1b:32:0a:b4:81:0c:2d: 5e:6a:a5:fa:d6:b2:c1:f8:5f:21:c9:ea:a3:b5:e6: c9:b1:ac:57:e7:6f:34:3a:a3:78:4a:e8:db:de:8c: d8:9f:b0:be:9e:18:ad:11:25:69:f0:de:39:a7:8d: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A1:6B:2B:0A:7A:65:33:B4:00:CA:D5:7B:39:35:CE:EB:25:89:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b8c6088-dd62-3c49-8246-68f79137e738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.207.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:07:7e:fa:57:d6:0f:c7:f4:d3:03:27:a6:e9:64:82:ee:8d: 36:2d:df:14:99:a5:a6:a8:3e:70:91:74:18:cb:b8:d0:58:03: 4e:98:b1:8a:7b:49:a4:58:26:c3:84:48:e8:ec:fe:d1:60:f2: 22:33:fe:63:17:fc:5d:b2:cf:e1:88:ef:2c:d6:40:52:c6:3f: db:8b:40:ba:3e:09:1e:17:d0:a6:ff:21:4b:8e:bb:66:9a:4e: 1a:65:d3:44:f3:b3:73:8b:f6:ce:20:f1:30:03:46:dd:63:bc: 3d:84:5d:50:87:5e:aa:f0:24:32:0f:af:2f:17:a0:22:43:46: c3:54:4a:5e:9a:bd:8a:cf:41:05:31:1b:40:c9:8e:c7:1b:4b: 93:c0:37:f3:68:5a:9b:e5:f0:1e:88:53:a1:91:eb:07:e3:de: 72:61:21:f8:0b:bf:47:cc:dc:aa:20:ca:77:c8:8c:32:71:72: 26:0b:d8:39:6a:88:a2:fd:94:66:29:3b:6a:c4:09:68:46:d1: 3e:47:75:94:1a:08:44:15:9f:c0:11:50:83:99:15:d6:f9:e5: 1d:55:5a:6a:53:7b:12:29:6c:ff:4a:62:13:5f:bb:c9:84:62: 08:43:00:67:fd:91:fd:0c:7b:8b:9e:a8:13:49:6a:fe:7e:fc: e4:f3:7c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC5QuYYvb8hQUvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MGU5MzQyZjEtMjllNi00YTdmLWIyNjQtMjQ4ODViNTgzYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZMAHT9Ihml7qWatXE9Nm4v0rmWP2t+HJtD5 yYYl9qF9ZAuw2P8D5ZD0EcEcYrSd8jsNzmlrulkJayyR8C+xv+VkH844MtjRc0ii JiTwK15qNoVQnUMriXuTrKUWhTJNebIgzsTVWZ3TvYO2y7TgdED3N+Pi5gXyeJ7D ZErUzKK0uRGAs8H+9Y6npitxuyulmptwZvRP1TzDEOzaTWZBfwEiDDYNhBcR3R/k xALy4dIQ+DFJ7G1vbk9HMx4GZl5M1uimbuuzIqbBExsyCrSBDC1eaqX61rLB+F8h yeqjtebJsaxX5280OqN4Sujb3ozYn7C+nhitESVp8N45p43jjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuhaysKemUztADK1Xs5Nc7rJYngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI4YzYwODgtZGQ2Mi0z YzQ5LTgyNDYtNjhmNzkxMzdlNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSc8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoHfvpX1g/H9NMDJ6bpZILujTYt3xSZpaaoPnCRdBjLuNBYA06YsYp7 SaRYJsOESOjs/tFg8iIz/mMX/F2yz+GI7yzWQFLGP9uLQLo+CR4X0Kb/IUuOu2aa Thpl00Tzs3OL9s4g8TADRt1jvD2EXVCHXqrwJDIPry8XoCJDRsNUSl6avYrPQQUx G0DJjscbS5PAN/NoWpvl8B6IU6GR6wfj3nJhIfgLv0fM3KogynfIjDJxciYL2Dlq iKL9lGYpO2rECWhG0T5HdZQaCEQVn8ARUIOZFdb55R1VWmpTexIpbP9KYhNfu8mE YghDAGf9kf0Me4ueqBNJav5+/OTzfA8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:06:05 2025 by rpki-client