$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec406b92-f9cf-3b31-b81f-6f781ec74b50.roa File: ec406b92-f9cf-3b31-b81f-6f781ec74b50.roa (raw, json) Hash identifier: NgmGxJWMr16uR3I6LtdnZQ1WzFLgAghSc+BVszZwuX4= Subject key identifier: B6:56:FD:09:F3:9C:D2:31:49:94:AE:9E:75:CC:C8:A3:F8:E1:F0:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC52A8EEA06D3395A5E5900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec406b92-f9cf-3b31-b81f-6f781ec74b50.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.189.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:2a:8e:ea:06:d3:39:5a:5e:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7eea04d8-0c12-44d3-9a90-97452314b1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:91:fc:0e:07:7c:d4:6b:0e:3d:2f:33:8d: 71:2a:16:43:7c:e1:ea:95:b4:77:da:df:17:4e:21: cd:52:07:45:b9:97:ef:c0:c8:db:a1:33:03:3b:51: 10:82:0f:70:e3:eb:1b:dd:95:87:2e:f7:d4:69:50: 96:7b:4f:8b:15:92:0f:62:fd:33:a3:52:1a:ed:82: 74:77:aa:40:4c:21:45:88:e7:81:2f:9d:ec:c5:f9: fc:d9:a1:ae:bb:5b:8c:cf:2a:76:0e:e4:f8:8d:d3: ed:f3:11:dc:16:56:db:06:87:23:10:02:78:79:3c: 65:d7:02:db:56:0e:0b:1c:1d:e1:ab:b0:da:ba:e9: c8:7f:e1:c8:35:10:04:fd:09:4f:99:bc:d2:74:b1: f4:dc:76:6c:7e:cc:fc:66:56:1a:1f:19:25:09:e2: c1:c9:b6:b8:4b:4a:b3:b0:06:d9:b2:08:37:16:a6: 39:41:ed:49:2a:57:20:ff:77:e1:56:91:95:4a:9b: db:96:38:94:43:83:c5:bf:fe:f0:ed:cd:e0:fb:51: 9b:d2:24:6a:64:8c:9d:d4:68:2b:80:8a:e3:ef:fc: af:c3:5e:17:1e:b8:ff:4d:5c:55:b3:ac:55:e0:cc: 89:cc:45:a6:05:06:6e:b4:45:3d:04:ed:51:a9:28: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:56:FD:09:F3:9C:D2:31:49:94:AE:9E:75:CC:C8:A3:F8:E1:F0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec406b92-f9cf-3b31-b81f-6f781ec74b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.189.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:61:8c:e7:1c:2e:4e:90:63:cb:01:0c:39:b9:7c:70:ba:f0: f3:44:bc:76:8b:a4:c8:fb:a1:17:83:1c:29:80:37:07:d1:81: 19:57:11:11:86:9a:aa:9d:ca:ef:80:31:cd:77:ef:8f:c6:58: d1:04:60:2e:4c:4b:08:73:f9:56:9a:43:1a:33:ea:80:11:11: 4a:dd:69:f0:ce:13:16:5b:22:54:7a:e6:6f:1c:7f:8b:12:ab: 02:0d:2f:ef:2b:a2:c4:e6:c4:ee:78:9b:09:db:10:f8:0b:77: 26:41:04:91:57:26:3e:5e:fc:cf:21:0c:62:18:51:09:98:eb: a5:eb:12:3a:05:3a:c1:16:78:7b:70:35:de:a0:fe:7f:3e:32: 83:c9:28:0c:ab:f1:e7:f0:79:d7:cc:8d:96:40:69:ec:ff:db: ae:cb:ff:2a:9d:1d:80:40:72:43:47:20:76:65:f0:2d:ec:f2: c5:83:01:c0:ef:c4:d6:f9:98:da:e3:5e:80:3a:40:db:02:3b: 03:88:4c:dd:d0:80:da:f7:54:ec:62:ea:1e:c1:df:9a:bf:ac: 77:c5:94:80:97:17:ab:06:3e:1e:9b:9c:8d:88:fa:03:58:b4: b1:ba:20:64:83:9f:93:4d:5f:4d:3e:14:70:da:e9:35:43:6c: fa:28:6e:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxSqO6gbTOVpeWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2VlYTA0ZDgtMGMxMi00NGQzLTlhOTAtOTc0NTIzMTRiMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZCR/A4HfNRrDj0vM41xKhZDfOHqlbR32t8X TiHNUgdFuZfvwMjboTMDO1EQgg9w4+sb3ZWHLvfUaVCWe0+LFZIPYv0zo1Ia7YJ0 d6pATCFFiOeBL53sxfn82aGuu1uMzyp2DuT4jdPt8xHcFlbbBocjEAJ4eTxl1wLb Vg4LHB3hq7DauunIf+HINRAE/QlPmbzSdLH03HZsfsz8ZlYaHxklCeLByba4S0qz sAbZsgg3FqY5Qe1JKlcg/3fhVpGVSpvbljiUQ4PFv/7w7c3g+1Gb0iRqZIyd1Ggr gIrj7/yvw14XHrj/TVxVs6xV4MyJzEWmBQZutEU9BO1RqShtnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZW/QnznNIxSZSunnXMyKP44fAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWM0MDZiOTItZjljZi0z YjMxLWI4MWYtNmY3ODFlYzc0YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxhjOccLk6QY8sBDDm5fHC68PNEvHaLpMj7oReDHCmANwfRgRlXERGG mqqdyu+AMc1374/GWNEEYC5MSwhz+VaaQxoz6oAREUrdafDOExZbIlR65m8cf4sS qwINL+8rosTmxO54mwnbEPgLdyZBBJFXJj5e/M8hDGIYUQmY66XrEjoFOsEWeHtw Nd6g/n8+MoPJKAyr8efwedfMjZZAaez/267L/yqdHYBAckNHIHZl8C3s8sWDAcDv xNb5mNrjXoA6QNsCOwOITN3QgNr3VOxi6h7B35q/rHfFlICXF6sGPh6bnI2I+gNY tLG6IGSDn5NNX00+FHDa6TVDbPoobtA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:03:28 2025 by rpki-client