$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08c67a52-e5b7-3de5-b313-c02f82baf134.roa File: 08c67a52-e5b7-3de5-b313-c02f82baf134.roa (raw, json) Hash identifier: idgbeGgYnbILrcPeuF2oO2X7Ac05pz7ykropp6TQOqQ= Subject key identifier: 03:E9:35:81:16:F9:AB:1C:B4:3B:C8:C7:F1:59:B1:2D:85:16:C3:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9AA23A5A0A022049D2800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08c67a52-e5b7-3de5-b313-c02f82baf134.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 73.242.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:aa:23:a5:a0:a0:22:04:9d:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=23bacdba-3702-4ea2-b20e-b888e1ef0dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:68:de:55:2a:c3:72:78:1d:7a:dd:85:b6:11: be:bf:d6:81:09:92:73:85:ea:26:46:e2:30:2d:66: b1:f9:f5:66:5f:37:ba:ad:2e:c7:0d:fc:04:0d:49: 5c:45:1a:07:47:e7:b6:d6:6e:63:b5:3c:c7:d4:aa: 32:c2:af:80:e8:a6:4b:6b:b8:a8:19:c1:9a:38:4b: 6d:68:31:6c:bb:ad:0b:16:7e:df:4c:97:b8:85:8a: 50:3e:1f:5a:1c:fd:ab:b4:2b:38:4b:73:34:9e:20: 19:41:a8:6a:9d:cb:d3:a8:a7:54:fb:0a:68:73:a8: db:cb:5c:3d:1d:c7:d9:32:22:c9:26:38:71:3e:c1: 73:18:e0:dd:6d:fb:d7:a0:88:fd:b5:2e:0a:22:7f: 50:ea:33:99:99:44:8b:33:55:80:60:6d:e9:e7:09: 71:49:64:20:d0:c8:47:78:ba:37:d8:39:5e:8d:ba: de:94:54:8d:58:45:8a:e6:50:04:6f:a5:6d:c0:41: 60:d6:5d:f6:3b:5a:d6:3a:af:a3:a4:3a:44:90:6e: cc:ed:ce:e3:f9:f5:50:9f:9e:32:81:f0:26:5b:16: b6:16:e9:08:f7:b3:58:fd:21:af:98:ff:4f:04:97: 6c:75:30:a4:4e:b3:ec:1a:e1:50:60:69:f1:a3:21: b2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:35:81:16:F9:AB:1C:B4:3B:C8:C7:F1:59:B1:2D:85:16:C3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08c67a52-e5b7-3de5-b313-c02f82baf134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.242.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:ca:c8:0e:a3:81:9c:35:31:8e:74:5c:ba:fc:52:08:7f:db: 35:21:8f:e7:69:9f:9f:12:d7:bb:87:25:ad:8f:99:1e:a5:6e: f3:0b:20:99:7c:52:14:bc:56:96:c4:2c:c1:22:ae:ec:9f:41: e6:88:d1:1d:bf:35:2a:62:c6:71:56:a8:29:52:68:2e:39:b4: 08:9f:ed:8b:48:df:12:30:ae:08:5a:2a:bb:d0:b4:ce:23:1d: dc:6c:90:9b:2d:23:5a:75:cd:ac:cb:64:bf:ae:12:b7:e1:88: 81:27:5b:f0:02:54:b6:43:32:92:15:e5:14:b6:c1:ba:2c:49: 4c:d3:39:b3:63:22:ca:5c:4a:b3:2c:06:05:6b:d9:83:a2:e9: 81:7f:d6:b7:47:f2:48:50:11:30:a2:96:81:cc:18:d7:53:7d: 9d:77:e3:3b:a2:40:11:4a:b9:37:d9:f6:30:01:2a:be:14:9b: 71:e9:1c:b0:aa:58:46:8f:d8:e1:49:61:f1:ff:5f:94:ba:8c: 16:d0:d7:ba:c8:46:33:65:fc:ad:5d:74:f9:4e:21:8f:42:bb: d6:4a:9c:0a:78:0f:bd:f7:1f:83:34:7d:00:a4:3a:fc:d4:97: a3:80:53:57:ea:3f:fe:45:e3:14:57:f8:4a:fa:e2:94:7d:2e: 4f:64:0a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uaojpaCgIgSdKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MjNiYWNkYmEtMzcwMi00ZWEyLWIyMGUtYjg4OGUxZWYwZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2jeVSrDcngdet2FthG+v9aBCZJzheomRuIw LWax+fVmXze6rS7HDfwEDUlcRRoHR+e21m5jtTzH1Koywq+A6KZLa7ioGcGaOEtt aDFsu60LFn7fTJe4hYpQPh9aHP2rtCs4S3M0niAZQahqncvTqKdU+wpoc6jby1w9 HcfZMiLJJjhxPsFzGODdbfvXoIj9tS4KIn9Q6jOZmUSLM1WAYG3p5wlxSWQg0MhH eLo32DlejbrelFSNWEWK5lAEb6VtwEFg1l32O1rWOq+jpDpEkG7M7c7j+fVQn54y gfAmWxa2FukI97NY/SGvmP9PBJdsdTCkTrPsGuFQYGnxoyGyNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPpNYEW+asctDvIx/FZsS2FFsPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhjNjdhNTItZTViNy0z ZGU1LWIzMTMtYzAyZjgyYmFmMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTKyA6jgZw1MY50XLr8Ugh/2zUhj+dpn58S17uHJa2PmR6lbvMLIJl8 UhS8VpbELMEiruyfQeaI0R2/NSpixnFWqClSaC45tAif7YtI3xIwrghaKrvQtM4j HdxskJstI1p1zazLZL+uErfhiIEnW/ACVLZDMpIV5RS2wbosSUzTObNjIspcSrMs BgVr2YOi6YF/1rdH8khQETCiloHMGNdTfZ134zuiQBFKuTfZ9jABKr4Um3HpHLCq WEaP2OFJYfH/X5S6jBbQ17rIRjNl/K1ddPlOIY9Cu9ZKnAp4D733H4M0fQCkOvzU l6OAU1fqP/5F4xRX+Er64pR9Lk9kCn4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:19 2025 by rpki-client