$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b66518-5132-3d88-8f09-0eb85908243a.roa File: a9b66518-5132-3d88-8f09-0eb85908243a.roa (raw, json) Hash identifier: REDSQy/O+LqXRPI7uvUEsbqAvBMrLQOcuVKWZbPMMB4= Subject key identifier: 9D:1E:82:7B:3E:D1:D0:F3:BD:E5:23:56:2C:6D:36:08:2A:07:4C:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC51BCAD0F4CC40D40C0380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b66518-5132-3d88-8f09-0eb85908243a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.158.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:1b:ca:d0:f4:cc:40:d4:0c:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bb7d9756-8914-4ad2-bc1d-6227a6512766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:01:cd:04:22:0e:ab:a8:e9:b8:14:aa:b8:52: de:00:85:81:0f:5e:15:2a:e4:9e:e4:ab:ce:7d:4a: 20:c2:b3:05:95:c5:16:9b:43:3c:df:d9:ea:54:28: fc:e9:8d:53:f6:4c:7a:db:89:13:f6:dc:dd:e2:75: d4:e3:62:45:fb:9d:43:a2:b0:de:b7:8e:3a:29:53: a5:ac:c4:1f:06:9a:01:49:34:9d:35:99:94:39:ad: 96:dd:44:32:c0:f0:44:d4:7c:64:42:33:ad:75:19: 19:38:42:46:79:b9:13:79:81:af:20:d4:ff:c4:47: 96:49:74:77:57:3d:ce:c8:98:25:ee:0a:53:58:df: f3:30:d9:e1:0c:97:a6:8f:27:99:ba:2d:97:d4:cd: 84:2d:e6:ff:fa:84:67:a1:8e:18:1e:f1:40:45:9f: 04:04:39:45:64:17:22:e7:6a:b6:65:b1:e8:3c:78: 85:4b:9b:3a:34:38:e9:70:69:9c:90:c6:fa:1a:a2: 9d:cc:8b:c3:7e:69:11:70:12:ea:14:52:51:37:36: 8f:80:5f:7b:7a:2a:7d:52:08:a1:a5:3c:b8:14:58: f0:25:f7:ad:fe:98:4e:7b:86:dd:5d:e2:10:c1:e0: 5f:03:ab:fd:19:55:5a:d8:15:7f:9c:40:dd:d3:c0: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1E:82:7B:3E:D1:D0:F3:BD:E5:23:56:2C:6D:36:08:2A:07:4C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b66518-5132-3d88-8f09-0eb85908243a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d4:75:8d:f2:0c:96:82:98:e9:b1:3d:06:74:d8:4d:9e:99: 01:e4:2f:9a:63:d6:c7:3e:b5:db:82:e8:02:91:f8:98:a7:43: 8e:ff:dc:08:52:2d:bc:f4:57:d9:08:5d:8b:d6:c4:41:9c:a7: 43:d6:8f:a0:71:65:be:50:c1:06:57:e3:f0:39:1f:44:90:e6: c2:3f:82:94:34:10:57:1b:d3:a5:9e:22:a9:59:2a:14:93:b1: bb:e6:d0:c2:13:42:b4:0a:48:16:74:07:af:7a:66:d5:e6:80: 9e:7d:27:9e:77:3f:e4:90:d0:ff:8b:15:ae:20:7d:ca:21:ec: a3:cc:4a:4b:0e:c1:df:8f:0f:b3:0c:31:65:25:e8:ae:49:26: be:bf:2d:95:98:81:85:eb:63:88:dc:f6:54:8a:3d:67:7d:a2: 15:f1:16:f1:4c:ed:80:6d:95:6b:89:50:d3:e1:47:4f:1d:f8: c9:25:97:2e:58:e3:da:25:21:51:2f:f1:de:59:23:82:7e:6f: 2b:0c:a3:a7:c9:82:93:19:46:0b:92:7b:5a:c1:9a:0b:e1:1b: d5:57:4d:d1:45:a8:03:0b:37:d5:5b:1f:ca:6d:a3:4d:39:2d: 21:2f:4c:da:d3:39:ef:da:c8:65:ac:b7:7e:b8:65:f8:45:a7: c8:37:16:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxRvK0PTMQNQMA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmI3ZDk3NTYtODkxNC00YWQyLWJjMWQtNjIyN2E2NTEyNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAHNBCIOq6jpuBSquFLeAIWBD14VKuSe5KvO fUogwrMFlcUWm0M839nqVCj86Y1T9kx624kT9tzd4nXU42JF+51DorDet446KVOl rMQfBpoBSTSdNZmUOa2W3UQywPBE1HxkQjOtdRkZOEJGebkTeYGvINT/xEeWSXR3 Vz3OyJgl7gpTWN/zMNnhDJemjyeZui2X1M2ELeb/+oRnoY4YHvFARZ8EBDlFZBci 52q2ZbHoPHiFS5s6NDjpcGmckMb6GqKdzIvDfmkRcBLqFFJRNzaPgF97eip9Ugih pTy4FFjwJfet/phOe4bdXeIQweBfA6v9GVVa2BV/nEDd08DWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0egns+0dDzveUjVixtNggqB0wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTliNjY1MTgtNTEzMi0z ZDg4LThmMDktMGViODU5MDgyNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXUdY3yDJaCmOmxPQZ02E2emQHkL5pj1sc+tduC6AKR+JinQ47/3AhS Lbz0V9kIXYvWxEGcp0PWj6BxZb5QwQZX4/A5H0SQ5sI/gpQ0EFcb06WeIqlZKhST sbvm0MITQrQKSBZ0B696ZtXmgJ59J553P+SQ0P+LFa4gfcoh7KPMSksOwd+PD7MM MWUl6K5JJr6/LZWYgYXrY4jc9lSKPWd9ohXxFvFM7YBtlWuJUNPhR08d+Mklly5Y 49olIVEv8d5ZI4J+bysMo6fJgpMZRguSe1rBmgvhG9VXTdFFqAMLN9VbH8pto005 LSEvTNrTOe/ayGWst364ZfhFp8g3Fpc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:47:35 2025 by rpki-client