$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b14250fd-0c1d-3756-a897-ec1b07e86303.roa File: b14250fd-0c1d-3756-a897-ec1b07e86303.roa (raw, json) Hash identifier: nPLS+61PsyGvKQq8omqWsUbhtrUvablYikTOqtLhcVs= Subject key identifier: 1F:55:F5:1C:F7:0A:20:3C:1B:57:D7:EC:CC:54:A4:44:9C:21:9D:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7C229CE74CC3D2D481680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b14250fd-0c1d-3756-a897-ec1b07e86303.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.157.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:c2:29:ce:74:cc:3d:2d:48:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fc42ae90-7ffb-460a-bb35-eadc8a10c599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dd:b3:eb:f7:ec:6d:59:81:97:60:82:78:d4: 02:87:05:7d:50:90:11:e3:d3:36:2f:db:c1:eb:65: 9e:bb:12:f7:30:65:75:4a:d8:5e:39:d8:1b:03:38: af:7f:3e:fa:0e:a7:aa:2a:23:21:56:74:72:e9:b3: 77:d4:48:b2:47:c5:44:f3:99:7c:12:9d:7f:3b:c4: e6:bb:ad:79:df:ba:c7:26:96:26:3e:06:29:c9:57: a7:20:d0:47:77:6a:35:0b:d6:67:55:c4:cb:2a:2b: bb:43:9a:37:72:ed:72:2b:5a:4c:96:0c:a8:5e:b6: 78:61:db:72:4c:fd:f7:12:71:e5:ea:3f:cb:8d:9b: 72:d9:cd:65:ed:74:da:14:4c:92:7f:af:3f:af:09: 89:de:44:10:0d:5f:ad:1c:7d:0b:ef:61:a9:bc:9f: 97:e3:03:6c:04:78:1c:3a:5c:5f:ca:32:70:71:8c: 3f:d8:58:e8:bb:99:dc:3a:f1:0b:08:8a:71:35:fa: 6b:6e:f1:82:a5:c9:16:cb:97:f1:9e:7c:3a:d8:f9: 29:d1:04:5a:42:2b:92:51:86:c1:e5:6f:9c:c6:41: 79:1f:23:6c:71:f7:70:f2:93:6d:c3:65:8b:93:19: cf:56:0e:1a:4b:65:08:e0:ec:fb:65:69:b7:bf:4f: 96:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:55:F5:1C:F7:0A:20:3C:1B:57:D7:EC:CC:54:A4:44:9C:21:9D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b14250fd-0c1d-3756-a897-ec1b07e86303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.157.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a0:d3:a9:3f:99:0a:dc:38:04:7b:23:41:f5:35:35:27:0f: c6:6c:66:08:ba:3f:ba:1c:7d:40:8a:eb:a0:de:5e:65:0e:bc: 94:e8:8b:0e:a7:fd:dd:02:ef:44:08:76:08:cf:5a:d2:d4:a3: ad:36:b2:e3:4b:76:85:ce:9a:58:bb:79:86:fa:ad:1e:9c:d1: 5a:fc:0d:a3:71:4d:1b:f3:0c:25:63:56:e6:a8:18:3e:b5:06: f2:18:72:9f:f4:ea:aa:ab:16:e9:e2:fa:9f:19:03:c8:e0:a4: 1b:a6:a5:c7:6a:40:5c:de:a3:e8:46:2a:d6:3c:89:b4:f4:56: 57:df:a1:88:bd:14:a8:ec:f7:4d:b1:ab:fc:f7:00:a9:c3:28: 45:83:ba:36:bd:5d:9a:1c:b7:72:ed:1a:45:50:f6:94:b2:36: 2e:5a:10:f6:7b:a6:3c:c5:39:b0:85:a2:3c:c8:d5:f9:fb:1d: ac:91:95:0e:ee:1b:2d:5a:b2:82:22:aa:06:75:70:80:11:14: 3e:df:5d:7f:1a:79:de:d8:ae:ed:7f:75:8f:b9:77:7f:02:8f: 2a:3c:6e:4c:70:ff:d3:4b:6d:b6:98:c9:84:12:bd:1f:99:5c: 24:0d:82:7c:6b:20:36:52:11:55:89:6e:7c:65:dc:15:64:fa: 2e:b4:e1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp8IpznTMPS1IFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmM0MmFlOTAtN2ZmYi00NjBhLWJiMzUtZWFkYzhhMTBjNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid2z6/fsbVmBl2CCeNQChwV9UJAR49M2L9vB 62WeuxL3MGV1StheOdgbAzivfz76DqeqKiMhVnRy6bN31EiyR8VE85l8Ep1/O8Tm u61537rHJpYmPgYpyVenINBHd2o1C9ZnVcTLKiu7Q5o3cu1yK1pMlgyoXrZ4Ydty TP33EnHl6j/LjZty2c1l7XTaFEySf68/rwmJ3kQQDV+tHH0L72GpvJ+X4wNsBHgc OlxfyjJwcYw/2Fjou5ncOvELCIpxNfprbvGCpckWy5fxnnw62Pkp0QRaQiuSUYbB 5W+cxkF5HyNscfdw8pNtw2WLkxnPVg4aS2UI4Oz7ZWm3v0+WGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9V9Rz3CiA8G1fX7MxUpEScIZ0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjE0MjUwZmQtMGMxZC0z NzU2LWE4OTctZWMxYjA3ZTg2MzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqg06k/mQrcOAR7I0H1NTUnD8ZsZgi6P7ocfUCK66DeXmUOvJToiw6n /d0C70QIdgjPWtLUo602suNLdoXOmli7eYb6rR6c0Vr8DaNxTRvzDCVjVuaoGD61 BvIYcp/06qqrFuni+p8ZA8jgpBumpcdqQFzeo+hGKtY8ibT0VlffoYi9FKjs902x q/z3AKnDKEWDuja9XZoct3LtGkVQ9pSyNi5aEPZ7pjzFObCFojzI1fn7HayRlQ7u Gy1asoIiqgZ1cIARFD7fXX8aed7Yru1/dY+5d38Cjyo8bkxw/9NLbbaYyYQSvR+Z XCQNgnxrIDZSEVWJbnxl3BVk+i604cg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:03:15 2025 by rpki-client