$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89d8f57-a76f-39fa-9382-fe86cf385d7d.roa File: c89d8f57-a76f-39fa-9382-fe86cf385d7d.roa (raw, json) Hash identifier: etK+2TQ030k2L/WPTDLVH23WJ/aG7yGOPKUngFNMnWE= Subject key identifier: 85:96:D9:39:BF:29:AE:7C:53:FD:68:2B:5C:35:C3:1B:B4:77:67:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9704E3C29025E83105AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89d8f57-a76f-39fa-9382-fe86cf385d7d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.157.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:70:4e:3c:29:02:5e:83:10:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=cea22d8c-45e0-4a16-ae26-cf04bfcc4e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ef:24:6c:39:04:b0:59:c1:3c:6f:14:ab:0c: e5:69:87:86:c0:e9:88:7f:55:eb:d7:49:00:94:56: c1:53:0c:45:7c:91:69:b5:81:52:65:2a:1e:b8:d9: 08:1f:e9:46:af:29:d9:80:01:00:01:01:94:a2:b9: 62:d6:a2:d5:e7:b0:26:4a:4d:30:90:7b:2a:19:46: 5f:68:0a:0c:3a:be:63:99:16:05:dc:bd:be:72:c5: 1a:b8:23:0b:37:23:e7:82:38:ef:18:07:5a:e1:95: df:e3:4a:2c:fd:67:8c:c5:5f:96:c0:d2:ca:5f:2d: 8c:2e:92:47:96:a9:12:56:46:df:3d:ae:25:4d:c3: 2c:5a:c4:4b:71:00:58:02:5a:13:52:90:06:2c:c6: d6:21:de:24:80:d0:65:a2:97:50:4c:9e:8d:ff:49: e0:f1:cc:6a:72:f5:b3:77:07:8f:fb:9c:62:7f:33: 85:e3:b5:0f:da:b7:9f:bc:42:53:c4:a4:ce:6b:65: 6a:f2:08:16:af:a0:6c:e2:24:d8:34:0b:8f:02:aa: 44:cf:8c:09:f2:b7:86:04:ca:bc:9a:1e:42:fb:23: 2a:0a:a1:20:79:53:fd:e1:ea:80:30:59:ad:5e:f5: 83:d7:36:2f:c4:93:82:48:ec:20:f9:c4:a8:95:dd: 6b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:96:D9:39:BF:29:AE:7C:53:FD:68:2B:5C:35:C3:1B:B4:77:67:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89d8f57-a76f-39fa-9382-fe86cf385d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.157.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c0:41:09:c7:07:90:99:fa:93:ba:41:19:22:e3:87:73:20: 68:5b:11:6c:da:bf:db:4d:c2:b4:fc:e6:31:56:20:e0:90:ee: c2:53:1d:c9:9b:73:d2:99:3b:27:23:37:89:80:ce:24:bf:27: 55:25:a1:f7:04:e9:94:e5:c1:0c:61:2d:82:0d:e1:06:7f:a2: fc:4f:84:f3:c5:a6:2c:ff:34:89:9e:2d:6b:6b:9a:c3:66:85: 86:d3:2f:32:0c:b8:09:90:7c:db:70:35:0e:a8:9f:84:f2:a3: f3:43:62:1c:3e:ae:0d:3e:a2:89:06:6c:23:7c:f5:be:52:cb: 81:4b:b2:d7:41:f7:5c:3f:06:d4:d7:47:e6:c1:5f:95:f9:96: 16:4a:c6:4c:44:e7:c1:72:59:ba:45:b8:a6:7e:11:43:bc:2a: 2c:da:47:dd:ca:df:8f:0b:37:19:57:f1:78:9a:71:cc:51:fa: 68:bc:2c:88:4e:83:78:19:fa:7e:ed:ae:d4:e7:07:ae:30:36: 44:db:73:01:75:fe:cb:91:23:db:98:08:05:2c:0b:c4:61:7e: 52:82:21:bb:94:02:8a:46:74:80:bf:1b:1f:16:75:33:14:81: 6c:fb:15:70:cf:e5:cf:db:ef:62:43:22:19:cf:ea:d5:8e:53: a5:c8:61:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqXBOPCkCXoMQWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Y2VhMjJkOGMtNDVlMC00YTE2LWFlMjYtY2YwNGJmY2M0ZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+8kbDkEsFnBPG8UqwzlaYeGwOmIf1Xr10kA lFbBUwxFfJFptYFSZSoeuNkIH+lGrynZgAEAAQGUorli1qLV57AmSk0wkHsqGUZf aAoMOr5jmRYF3L2+csUauCMLNyPngjjvGAda4ZXf40os/WeMxV+WwNLKXy2MLpJH lqkSVkbfPa4lTcMsWsRLcQBYAloTUpAGLMbWId4kgNBlopdQTJ6N/0ng8cxqcvWz dweP+5xifzOF47UP2refvEJTxKTOa2Vq8ggWr6Bs4iTYNAuPAqpEz4wJ8reGBMq8 mh5C+yMqCqEgeVP94eqAMFmtXvWD1zYvxJOCSOwg+cSold1r6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWW2Tm/Ka58U/1oK1w1wxu0d2cqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzg5ZDhmNTctYTc2Zi0z OWZhLTkzODItZmU4NmNmMzg1ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnAQQnHB5CZ+pO6QRki44dzIGhbEWzav9tNwrT85jFWIOCQ7sJTHcmb c9KZOycjN4mAziS/J1UlofcE6ZTlwQxhLYIN4QZ/ovxPhPPFpiz/NImeLWtrmsNm hYbTLzIMuAmQfNtwNQ6on4Tyo/NDYhw+rg0+ookGbCN89b5Sy4FLstdB91w/BtTX R+bBX5X5lhZKxkxE58FyWbpFuKZ+EUO8KizaR93K348LNxlX8XiaccxR+mi8LIhO g3gZ+n7trtTnB64wNkTbcwF1/suRI9uYCAUsC8RhflKCIbuUAopGdIC/Gx8WdTMU gWz7FXDP5c/b72JDIhnP6tWOU6XIYco= -----END CERTIFICATE-----Generated at Wed Nov 5 19:44:13 2025 by rpki-client