$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa98d772-0c36-3728-a173-2ff376c83a8e.roa File: fa98d772-0c36-3728-a173-2ff376c83a8e.roa (raw, json) Hash identifier: WneLH8eMGaHtmdebLVETtfGuhkgvlq+YOIsqLKq2QkM= Subject key identifier: C4:F1:E5:2D:3C:D6:38:FF:7B:3A:E1:96:01:38:AE:E1:49:53:A2:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9214E9AADE35EAE968540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa98d772-0c36-3728-a173-2ff376c83a8e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.32.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:21:4e:9a:ad:e3:5e:ae:96:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=cf469bd4-0013-4d91-aff6-e9c776645c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:72:22:aa:95:b7:aa:98:9c:ce:5f:65:22: fe:75:70:ba:22:a1:18:32:c5:41:a6:4e:e5:12:f4: b9:dc:23:85:c4:33:6c:0a:e0:9a:95:de:4a:1e:43: 25:b1:51:70:50:37:71:e3:3e:22:6f:69:34:f2:d9: 79:e8:cc:c0:1a:2a:5a:7a:5a:b8:b7:b4:44:29:5b: 1b:64:5d:8f:2e:93:59:ac:0c:f6:eb:a5:a1:e7:ad: f9:dc:bd:25:35:33:50:4e:ae:01:7a:0f:d8:4f:2f: 22:41:64:f1:a3:f6:e0:8d:2a:f8:15:de:37:f1:b3: 2b:8c:a6:35:c1:b5:a1:73:7d:87:7f:3f:c2:75:53: e2:4a:bc:41:f9:ba:6c:85:ea:2c:f2:ad:80:31:77: 34:21:a1:f5:f2:0c:8a:ef:48:67:d8:1f:a3:b6:a8: 76:39:46:0b:9e:1b:94:ae:aa:52:38:aa:01:9e:cc: 97:48:74:57:f4:1c:7b:8c:4f:61:78:32:ce:6b:af: 9d:54:a1:d0:90:7c:4b:1c:80:63:c2:46:fe:08:40: 1a:9d:49:b7:6a:4c:ee:64:54:5a:60:d2:44:d7:69: b3:c2:d5:a6:3c:f4:59:c8:11:3d:1f:58:66:97:7a: 41:df:d6:24:83:e7:92:19:7f:84:be:57:20:c5:b7: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F1:E5:2D:3C:D6:38:FF:7B:3A:E1:96:01:38:AE:E1:49:53:A2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa98d772-0c36-3728-a173-2ff376c83a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.32.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:34:9c:cb:6c:2c:10:28:fd:b9:3b:b2:bc:f8:f0:22:eb:53: d2:fc:d2:43:c3:72:de:d2:81:dc:88:27:a8:4c:df:07:af:2f: 98:4c:db:aa:7d:e4:ee:66:e1:70:7d:4e:1d:ca:cb:19:56:4f: 14:9c:80:77:6b:b5:c8:38:d0:b0:31:d3:18:8a:84:9b:b4:c2: b5:39:54:1c:88:75:41:35:3a:80:f9:9b:8f:4c:11:f5:f8:de: cf:7f:cd:b3:a4:0f:3d:86:1b:46:83:3c:80:2b:09:e1:dd:1b: 2a:01:a9:a8:d4:6d:58:c7:59:cf:f3:0f:e6:a3:f1:fd:60:53: 94:d0:16:1c:9b:3c:1a:fb:7f:ae:f4:2e:12:19:a1:19:25:cb: 63:7b:72:5b:a6:f8:fe:f0:95:2c:d6:c2:db:5f:29:c4:77:d3: da:d3:f2:a7:d7:83:db:c4:d5:55:04:57:89:68:59:2b:96:39: c7:30:0d:0e:8c:3b:2a:b1:34:1e:1b:e0:c3:03:44:af:1c:a6: e5:db:fa:8d:4c:ba:0f:9c:02:75:96:8f:f5:be:24:41:d0:62: d9:1f:53:84:f6:71:de:4a:d3:ba:aa:cd:33:a9:ae:fb:fb:e7: 53:eb:75:cf:1e:e1:de:5d:a2:a4:6e:48:fe:2f:49:81:ef:97: ee:66:c3:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqSFOmq3jXq6WhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Y2Y0NjliZDQtMDAxMy00ZDkxLWFmZjYtZTljNzc2NjQ1YzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyutyIqqVt6qYnM5fZSL+dXC6IqEYMsVBpk7l EvS53COFxDNsCuCald5KHkMlsVFwUDdx4z4ib2k08tl56MzAGipaelq4t7REKVsb ZF2PLpNZrAz266Wh56353L0lNTNQTq4Beg/YTy8iQWTxo/bgjSr4Fd438bMrjKY1 wbWhc32Hfz/CdVPiSrxB+bpsheos8q2AMXc0IaH18gyK70hn2B+jtqh2OUYLnhuU rqpSOKoBnsyXSHRX9Bx7jE9heDLOa6+dVKHQkHxLHIBjwkb+CEAanUm3akzuZFRa YNJE12mzwtWmPPRZyBE9H1hml3pB39Ykg+eSGX+EvlcgxbfjIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTx5S081jj/ezrhlgE4ruFJU6IRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE5OGQ3NzItMGMzNi0z NzI4LWExNzMtMmZmMzc2YzgzYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANc0nMtsLBAo/bk7srz48CLrU9L80kPDct7SgdyIJ6hM3wevL5hM26p9 5O5m4XB9Th3KyxlWTxScgHdrtcg40LAx0xiKhJu0wrU5VByIdUE1OoD5m49MEfX4 3s9/zbOkDz2GG0aDPIArCeHdGyoBqajUbVjHWc/zD+aj8f1gU5TQFhybPBr7f670 LhIZoRkly2N7clum+P7wlSzWwttfKcR309rT8qfXg9vE1VUEV4loWSuWOccwDQ6M OyqxNB4b4MMDRK8cpuXb+o1Mug+cAnWWj/W+JEHQYtkfU4T2cd5K07qqzTOprvv7 51Prdc8e4d5doqRuSP4vSYHvl+5mwzU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:15:47 2025 by rpki-client