$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9011bee-f94b-31c0-ada3-72d27c555255.roa File: d9011bee-f94b-31c0-ada3-72d27c555255.roa (raw, json) Hash identifier: ZLA8+wDfYyjp81DuW1eizmM4Q0EBPsront9qEeNAbXQ= Subject key identifier: 68:69:47:84:D7:C7:E1:C7:B8:B6:66:C8:22:74:C2:F0:FA:1B:3C:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC467A1F0740042F470FA40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9011bee-f94b-31c0-ada3-72d27c555255.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 73.168.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:67:a1:f0:74:00:42:f4:70:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=6b9b504a-f56e-4fda-b5bf-4a71896e0ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e0:70:ae:13:34:49:2b:4f:04:dd:ef:70:b8: cf:3b:dc:28:30:30:1c:73:67:b0:83:08:0a:e9:48: 9a:30:31:89:0a:48:6c:f3:4c:68:d5:96:c4:3d:90: d4:c8:2a:14:a9:89:dc:6d:6e:7a:12:6b:82:2c:e7: 82:9b:c7:55:d2:80:61:64:4a:34:a4:bf:7a:74:03: 66:6a:e0:92:24:8e:7e:55:c5:7d:96:8c:e1:81:91: 2f:1d:d2:18:4d:ed:28:43:d2:05:9f:16:13:7a:7d: 3f:40:29:b4:eb:15:5f:07:5f:d7:aa:e4:99:c4:4b: e8:4d:06:13:a7:e7:c8:e6:df:69:bc:79:21:be:71: 48:0a:eb:d9:07:00:38:cb:58:7d:b2:72:43:fc:e7: 9b:61:8e:c5:47:86:3f:48:bb:e4:ff:20:e6:ce:2e: 81:67:c0:5c:13:fa:8a:4c:b3:2a:6b:a3:8c:b4:88: 94:d5:63:00:67:9e:23:c1:c2:b7:0a:c6:e7:f4:87: 69:6a:a5:e6:7a:65:07:43:63:d7:c6:2e:bb:73:e1: 84:96:82:af:bd:35:42:06:d2:82:87:6a:d6:25:22: c8:a0:ee:0a:f9:66:4b:3d:8d:30:57:38:17:c8:0e: f4:93:d1:12:37:de:41:fc:a4:c5:8d:e9:b0:bb:69: 71:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:69:47:84:D7:C7:E1:C7:B8:B6:66:C8:22:74:C2:F0:FA:1B:3C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9011bee-f94b-31c0-ada3-72d27c555255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.168.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:68:7a:b4:43:33:48:fd:df:30:f8:b9:93:a4:34:de:b0:48: 50:a0:40:1c:9b:82:1c:1c:ec:d4:e7:42:7b:5b:4e:62:b5:e4: 96:57:46:62:58:45:49:32:75:01:ed:db:60:d7:53:13:9a:16: f6:d0:f2:b6:8b:b3:d7:91:ea:f7:e8:3a:01:d5:2e:99:83:c6: e8:bc:a2:87:70:ca:d2:69:3d:5b:2a:bc:7a:a5:40:20:47:33: 8e:0c:52:e2:56:e1:24:c9:9d:16:8a:ee:b2:c1:d8:9e:73:86: 03:96:7a:22:4e:27:8d:5a:da:80:b5:53:08:29:9d:5f:ea:7f: 97:99:d5:6b:8e:30:e0:69:c8:50:72:0d:19:23:0a:95:f4:af: 61:d0:89:6f:99:1a:9d:7e:1d:ea:88:f7:5e:bf:c2:4d:74:84: 18:58:a5:bf:c2:b7:c2:1c:9a:8f:0f:c5:7f:7d:8f:91:77:72: 7d:82:27:00:83:10:94:a6:55:c2:74:86:06:15:2d:f6:51:9f: b2:dd:8d:c1:7e:e6:fc:da:18:7a:41:52:14:1e:8d:78:75:82: e8:0b:89:f9:38:fb:b8:c9:c9:f3:87:50:c7:56:e2:70:22:d3: 0d:cf:78:78:4a:8e:3f:c0:70:34:99:57:89:9a:63:bc:c7:61: 43:45:e9:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxGeh8HQAQvRw+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NmI5YjUwNGEtZjU2ZS00ZmRhLWI1YmYtNGE3MTg5NmUwZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOBwrhM0SStPBN3vcLjPO9woMDAcc2ewgwgK 6UiaMDGJCkhs80xo1ZbEPZDUyCoUqYncbW56EmuCLOeCm8dV0oBhZEo0pL96dANm auCSJI5+VcV9lozhgZEvHdIYTe0oQ9IFnxYTen0/QCm06xVfB1/XquSZxEvoTQYT p+fI5t9pvHkhvnFICuvZBwA4y1h9snJD/OebYY7FR4Y/SLvk/yDmzi6BZ8BcE/qK TLMqa6OMtIiU1WMAZ54jwcK3Csbn9IdpaqXmemUHQ2PXxi67c+GEloKvvTVCBtKC h2rWJSLIoO4K+WZLPY0wVzgXyA70k9ESN95B/KTFjemwu2lxZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhpR4TXx+HHuLZmyCJ0wvD6GzzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkwMTFiZWUtZjk0Yi0z MWMwLWFkYTMtNzJkMjdjNTU1MjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSahsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGloerRDM0j93zD4uZOkNN6wSFCgQBybghwc7NTnQntbTmK15JZXRmJY RUkydQHt22DXUxOaFvbQ8raLs9eR6vfoOgHVLpmDxui8oodwytJpPVsqvHqlQCBH M44MUuJW4STJnRaK7rLB2J5zhgOWeiJOJ41a2oC1UwgpnV/qf5eZ1WuOMOBpyFBy DRkjCpX0r2HQiW+ZGp1+HeqI916/wk10hBhYpb/Ct8Icmo8PxX99j5F3cn2CJwCD EJSmVcJ0hgYVLfZRn7LdjcF+5vzaGHpBUhQejXh1gugLifk4+7jJyfOHUMdW4nAi 0w3PeHhKjj/AcDSZV4maY7zHYUNF6Sc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:17:13 2025 by rpki-client