$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a038b305-f7b6-3ef7-a668-4a54db45e27c.roa File: a038b305-f7b6-3ef7-a668-4a54db45e27c.roa (raw, json) Hash identifier: 1rpqdhWPel5afJ/lpbDmwc1RT+1ffw6BcjekCwGJOYk= Subject key identifier: 6C:33:18:44:9E:96:FF:59:DF:F9:34:A3:F4:8E:66:AC:2B:1F:19:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA08917CBCE4AC3C567900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a038b305-f7b6-3ef7-a668-4a54db45e27c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 73.253.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:08:91:7c:bc:e4:ac:3c:56:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2a7c2e69-ed98-48f3-9f5c-371ecb623a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:ad:0e:19:08:20:5f:cd:11:74:26:30:12: e0:bc:b7:da:8c:ec:28:f4:70:d9:1d:ca:3d:52:8f: 2f:16:82:67:ad:39:5d:90:e1:ea:b4:c0:a9:f9:f0: 08:93:67:d5:81:87:85:09:9e:fa:f3:dc:63:9f:cf: 75:01:05:b7:66:04:4e:9c:6e:02:a2:9c:87:ab:00: 64:bd:f9:43:57:99:fc:39:6d:86:73:1e:1d:01:f1: 55:02:d1:9d:66:17:0f:d3:ed:0b:4c:f0:9e:bd:3f: 2f:04:3a:57:b1:25:c2:54:b8:1f:4f:82:37:b5:3a: 21:0d:51:bb:01:f5:40:97:48:1d:5f:1a:91:01:d0: 7b:42:72:b4:95:51:f7:40:2b:85:fe:09:6e:35:89: 27:db:67:b5:f6:dd:c2:e9:d9:44:08:eb:34:8a:6c: 4c:d6:60:44:17:13:0e:07:c4:2a:d6:00:ad:b5:05: 38:5c:72:c3:f0:12:c2:33:cb:ef:bb:f9:36:e8:cf: c8:7b:01:78:37:5b:d1:fb:5b:ce:11:45:59:13:b4: 84:7b:c9:cd:86:91:ee:ae:5c:a1:de:66:a1:d6:3b: ac:22:0a:c6:c5:c9:2e:94:80:0f:2f:53:89:6b:95: 24:d3:04:10:ee:db:77:aa:0f:a1:97:d9:a2:43:f5: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:18:44:9E:96:FF:59:DF:F9:34:A3:F4:8E:66:AC:2B:1F:19:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a038b305-f7b6-3ef7-a668-4a54db45e27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.253.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:86:fc:92:de:5e:aa:af:ae:c6:b7:ef:3b:af:0b:8d:e5:99: 2f:62:bd:f0:6a:90:a4:e8:01:4b:ca:e2:fb:78:66:1a:77:e6: 7c:0a:9e:0a:b7:6c:c9:60:40:0b:88:43:0b:6d:26:3f:9e:6f: 0e:53:3e:ef:99:f0:c1:63:db:ad:25:77:ba:07:18:32:7b:df: 7a:29:35:17:3c:e0:66:98:a9:15:fe:c0:98:1b:43:d5:aa:f7: 30:7c:fc:e2:6f:c4:e3:33:61:93:ee:c6:0f:fe:5d:a2:31:18: 2c:a6:40:6a:b0:51:0d:b4:4c:ba:75:fe:4c:8a:df:74:f4:a2: c5:42:a7:e8:c9:e3:28:40:cf:e2:84:99:8d:03:27:55:8f:77: 3d:25:d6:16:57:94:4c:5a:fb:d2:b7:e7:5b:d5:80:67:fd:b5: 51:73:e7:83:75:54:60:53:53:a7:2e:33:d9:e2:93:70:3d:37: 84:85:5c:6a:9f:5a:82:10:04:fd:7d:a8:96:73:c1:52:cb:76: f5:c0:e0:0e:c4:23:73:3a:c8:38:3b:31:5a:b7:64:6d:3d:57: 70:a2:b3:17:b0:3d:72:e8:53:c4:c7:75:2c:9c:15:37:55:07: 44:46:c9:b1:8a:15:80:9c:b5:32:4b:40:cd:d0:00:a1:a9:3c: d4:77:70:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqgiRfLzkrDxWeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmE3YzJlNjktZWQ5OC00OGYzLTlmNWMtMzcxZWNiNjIzYTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnutDhkIIF/NEXQmMBLgvLfajOwo9HDZHco9 Uo8vFoJnrTldkOHqtMCp+fAIk2fVgYeFCZ7689xjn891AQW3ZgROnG4CopyHqwBk vflDV5n8OW2Gcx4dAfFVAtGdZhcP0+0LTPCevT8vBDpXsSXCVLgfT4I3tTohDVG7 AfVAl0gdXxqRAdB7QnK0lVH3QCuF/gluNYkn22e19t3C6dlECOs0imxM1mBEFxMO B8Qq1gCttQU4XHLD8BLCM8vvu/k26M/IewF4N1vR+1vOEUVZE7SEe8nNhpHurlyh 3mah1jusIgrGxckulIAPL1OJa5Uk0wQQ7tt3qg+hl9miQ/WgqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwzGESelv9Z3/k0o/SOZqwrHxm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTAzOGIzMDUtZjdiNi0z ZWY3LWE2NjgtNGE1NGRiNDVlMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSf0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaG/JLeXqqvrsa37zuvC43lmS9ivfBqkKToAUvK4vt4Zhp35nwKngq3 bMlgQAuIQwttJj+ebw5TPu+Z8MFj260ld7oHGDJ733opNRc84GaYqRX+wJgbQ9Wq 9zB8/OJvxOMzYZPuxg/+XaIxGCymQGqwUQ20TLp1/kyK33T0osVCp+jJ4yhAz+KE mY0DJ1WPdz0l1hZXlExa+9K351vVgGf9tVFz54N1VGBTU6cuM9nik3A9N4SFXGqf WoIQBP19qJZzwVLLdvXA4A7EI3M6yDg7MVq3ZG09V3CisxewPXLoU8THdSycFTdV B0RGybGKFYCctTJLQM3QAKGpPNR3cPQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:06:17 2025 by rpki-client