$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa5f7895-2119-37d2-b937-dc1f69d1b812.roa File: fa5f7895-2119-37d2-b937-dc1f69d1b812.roa (raw, json) Hash identifier: iu9Syi9fV8xqohLTphCmTBmTZSQaH/md5CT89tG/meU= Subject key identifier: 41:38:A7:09:91:CC:64:D8:A5:4A:48:BA:A2:A0:BA:7B:C9:D0:9C:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC53F5C815BFE8B730A6100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa5f7895-2119-37d2-b937-dc1f69d1b812.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 73.241.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:3f:5c:81:5b:fe:8b:73:0a:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f6ab32d9-3f9d-4a36-b8cd-7261f900b97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:cc:92:34:80:c7:0b:14:ac:57:95:0c:91: b1:3e:fd:39:27:cc:71:4a:0e:60:2b:28:db:11:55: eb:a9:c4:8c:df:e3:10:1c:ac:88:fe:78:0e:d8:a2: e2:0c:e2:5a:52:24:52:4d:fa:47:15:84:f0:af:7c: fd:5f:74:2b:8e:46:13:6c:94:36:8a:d9:18:6d:a7: df:4d:ef:90:c8:a2:65:4e:4f:7d:87:f3:41:7a:e0: 06:45:a1:7c:bd:03:35:aa:1a:7a:56:1e:0e:36:15: 76:ca:33:01:c4:e9:1e:83:1b:94:cc:04:bf:e0:aa: 74:05:5f:35:01:c7:f2:d2:97:96:8e:63:40:ea:f3: 5a:5c:7a:7d:17:20:dc:f9:1a:19:14:dc:6e:92:34: 0c:e4:76:2a:4e:2a:55:18:3a:35:e5:cc:a1:94:cb: b2:3c:95:a4:e3:cc:23:58:ae:5a:33:1d:3f:81:1d: ff:61:13:3a:e4:68:82:5f:7a:9f:c2:47:81:e9:5e: ad:f9:c0:27:ab:ae:af:ad:72:a0:ed:0a:c8:10:3f: 12:d2:17:c6:7b:1b:92:d7:48:4b:d1:31:46:bd:45: 64:ca:cc:d0:c0:d4:b1:35:63:a7:03:64:3b:d0:be: 0f:f2:38:ca:ca:88:0e:29:23:18:d9:a6:37:15:e5: e4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:38:A7:09:91:CC:64:D8:A5:4A:48:BA:A2:A0:BA:7B:C9:D0:9C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa5f7895-2119-37d2-b937-dc1f69d1b812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.241.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b3:97:6f:f4:37:0c:41:6c:46:2a:6e:c8:2f:2b:51:5b:15: 5d:f0:bb:df:05:b4:ed:e7:c1:6c:e1:ba:b2:76:93:2a:82:48: 7a:d1:a4:37:cc:74:f7:7b:a5:97:60:88:8b:fe:7f:7e:f9:13: 40:ee:f4:88:13:30:bd:38:5d:cb:f7:fb:15:c2:e9:77:98:8d: d4:4c:99:58:3b:af:fa:9d:fd:7f:c5:9d:d0:b8:93:7d:fc:e5: 3e:61:72:1c:c0:b7:7d:45:cd:05:08:f4:93:80:36:17:76:ef: 5c:2d:2d:e3:ba:5a:b2:a0:39:28:12:54:b1:2e:5e:df:d5:29: 4d:62:f0:07:c4:53:b4:ef:69:31:43:44:68:99:d4:cb:48:9e: 89:0d:80:d5:e0:13:05:5a:1e:14:f2:f4:ac:d4:d1:45:a9:33: 11:d3:29:83:5c:86:ee:61:3b:09:20:3e:08:54:df:69:74:79: 01:83:f7:ff:ab:f1:51:be:ec:7a:ae:7f:fc:6e:6f:fe:ed:c4: b5:85:06:2e:3d:2a:5d:60:10:59:99:38:11:5d:b2:86:95:3b: 8f:bc:6e:a9:53:e1:57:e1:05:8b:35:da:00:81:fd:21:b3:07: d5:02:c2:7b:79:fd:8a:10:f6:26:46:f4:30:47:2a:7b:b2:2f: 94:2e:88:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxT9cgVv+i3MKYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjZhYjMyZDktM2Y5ZC00YTM2LWI4Y2QtNzI2MWY5MDBiOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsLMkjSAxwsUrFeVDJGxPv05J8xxSg5gKyjb EVXrqcSM3+MQHKyI/ngO2KLiDOJaUiRSTfpHFYTwr3z9X3QrjkYTbJQ2itkYbaff Te+QyKJlTk99h/NBeuAGRaF8vQM1qhp6Vh4ONhV2yjMBxOkegxuUzAS/4Kp0BV81 Acfy0peWjmNA6vNaXHp9FyDc+RoZFNxukjQM5HYqTipVGDo15cyhlMuyPJWk48wj WK5aMx0/gR3/YRM65GiCX3qfwkeB6V6t+cAnq66vrXKg7QrIED8S0hfGexuS10hL 0TFGvUVkyszQwNSxNWOnA2Q70L4P8jjKyogOKSMY2aY3FeXkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE4pwmRzGTYpUpIuqKgunvJ0Jw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE1Zjc4OTUtMjExOS0z N2QyLWI5MzctZGMxZjY5ZDFiODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+zl2/0NwxBbEYqbsgvK1FbFV3wu98FtO3nwWzhurJ2kyqCSHrRpDfM dPd7pZdgiIv+f375E0Du9IgTML04Xcv3+xXC6XeYjdRMmVg7r/qd/X/FndC4k338 5T5hchzAt31FzQUI9JOANhd271wtLeO6WrKgOSgSVLEuXt/VKU1i8AfEU7TvaTFD RGiZ1MtInokNgNXgEwVaHhTy9KzU0UWpMxHTKYNchu5hOwkgPghU32l0eQGD9/+r 8VG+7Hquf/xub/7txLWFBi49Kl1gEFmZOBFdsoaVO4+8bqlT4VfhBYs12gCB/SGz B9UCwnt5/YoQ9iZG9DBHKnuyL5QuiGg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:47 2025 by rpki-client