$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d22e51-a079-3775-951a-a2c1daad3962.roa File: 08d22e51-a079-3775-951a-a2c1daad3962.roa (raw, json) Hash identifier: GH+ijjstQ6Uj8Zx/ukXjpZLCkJsl6AUVQm6VGOheejQ= Subject key identifier: E8:5B:BE:8B:FC:C8:97:82:D7:2B:74:3A:65:91:36:48:D4:2C:15:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A911080A0E684C6BD85880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d22e51-a079-3775-951a-a2c1daad3962.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 73.166.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:11:08:0a:0e:68:4c:6b:d8:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7da9b58c-a8d6-49fa-8791-046be3505b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:94:af:9b:18:c1:a3:36:b4:61:77:32:74: d1:18:69:0f:ba:10:20:5b:fd:11:c3:c6:cd:83:9b: 3d:22:96:9c:85:b5:5f:d6:e6:5d:e2:f9:04:41:1b: b9:bb:d7:c9:f5:0f:91:d0:4a:04:e5:3b:e0:7f:35: 9a:e9:12:37:c0:ce:8f:2a:bd:06:32:77:d8:cf:9d: aa:0e:55:b3:08:f4:f8:34:7c:d5:25:1b:89:9c:d0: f4:fb:4d:ce:aa:41:a6:36:3f:3b:c2:8a:8d:88:ba: 6b:90:97:be:46:4d:77:68:02:3a:9b:be:a7:af:56: 10:dd:7f:c6:3e:bb:30:52:42:74:c7:f9:31:16:9b: 12:45:ec:7b:e3:86:ad:da:38:bb:ba:25:89:84:b6: f8:66:db:9d:66:8b:72:a4:c5:ac:1f:eb:4a:ac:a7: 49:4c:5a:92:1f:6f:31:90:96:11:16:57:58:6a:df: f2:0b:b8:36:5a:f2:e2:88:c0:9d:88:4c:c5:bc:af: d9:d8:8d:27:ec:b8:ec:df:cf:94:3e:b0:2b:91:06: 57:d9:5c:5c:81:e3:22:7d:08:79:40:4b:8e:2c:61: 09:d1:21:cf:5b:b3:67:b5:c4:25:d6:a1:b8:d8:64: 0b:b1:d3:aa:e4:75:99:f9:ff:58:44:de:c8:5b:af: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5B:BE:8B:FC:C8:97:82:D7:2B:74:3A:65:91:36:48:D4:2C:15:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d22e51-a079-3775-951a-a2c1daad3962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.166.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:91:e6:0a:0f:d8:45:1a:b4:2d:b2:20:39:d2:69:1c:4d:19: 66:cf:1b:f2:c2:c9:fd:3a:be:e7:e5:08:7d:5f:21:de:60:c6: 7c:88:45:fd:39:da:93:bd:86:09:a5:2e:61:d5:fe:a6:77:47: e8:b8:41:8f:fc:b5:26:20:78:61:11:aa:a1:2e:2c:37:27:3d: 65:6e:f3:ee:24:c0:14:ee:eb:53:54:2b:f1:66:1d:f1:10:e0: 3f:0b:f5:b2:6b:19:c2:f5:54:f0:c1:e9:49:b7:e2:a0:5a:99: ed:78:ca:74:a0:a3:9d:70:bd:15:87:b8:d1:ef:ed:65:da:5f: 5b:c8:d7:db:ac:58:de:b8:a4:a3:76:d4:92:ed:bc:0f:b2:b0: ab:65:63:05:ed:6b:51:96:c6:06:64:7b:47:96:ec:b3:6e:89: e9:0f:dd:64:67:7c:42:d9:d7:19:65:83:ee:e9:e2:7d:b4:54: 94:8f:f8:e2:b6:db:66:61:1e:f2:ac:62:9e:7b:50:46:04:75: d2:6b:10:8f:f4:f6:2e:06:88:e4:5a:ca:60:53:ad:94:aa:f8: df:6a:ef:56:98:6d:2d:a1:be:dc:76:52:3f:9a:0e:60:08:38: a0:d8:cc:4e:8a:33:3e:1a:e3:d4:77:f5:34:9b:fb:14:1b:c5: 77:42:89:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqREICg5oTGvYWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2RhOWI1OGMtYThkNi00OWZhLTg3OTEtMDQ2YmUzNTA1Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPaUr5sYwaM2tGF3MnTRGGkPuhAgW/0Rw8bN g5s9IpachbVf1uZd4vkEQRu5u9fJ9Q+R0EoE5TvgfzWa6RI3wM6PKr0GMnfYz52q DlWzCPT4NHzVJRuJnND0+03OqkGmNj87woqNiLprkJe+Rk13aAI6m76nr1YQ3X/G PrswUkJ0x/kxFpsSRex744at2ji7uiWJhLb4ZtudZotypMWsH+tKrKdJTFqSH28x kJYRFldYat/yC7g2WvLiiMCdiEzFvK/Z2I0n7Ljs38+UPrArkQZX2VxcgeMifQh5 QEuOLGEJ0SHPW7NntcQl1qG42GQLsdOq5HWZ+f9YRN7IW6/DhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhbvov8yJeC1yt0OmWRNkjULBVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhkMjJlNTEtYTA3OS0z Nzc1LTk1MWEtYTJjMWRhYWQzOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiR5goP2EUatC2yIDnSaRxNGWbPG/LCyf06vuflCH1fId5gxnyIRf05 2pO9hgmlLmHV/qZ3R+i4QY/8tSYgeGERqqEuLDcnPWVu8+4kwBTu61NUK/FmHfEQ 4D8L9bJrGcL1VPDB6Um34qBame14ynSgo51wvRWHuNHv7WXaX1vI19usWN64pKN2 1JLtvA+ysKtlYwXta1GWxgZke0eW7LNuiekP3WRnfELZ1xllg+7p4n20VJSP+OK2 22ZhHvKsYp57UEYEddJrEI/09i4GiORaymBTrZSq+N9q71aYbS2hvtx2Uj+aDmAI OKDYzE6KMz4a49R39TSb+xQbxXdCiek= -----END CERTIFICATE-----Generated at Tue Oct 21 06:27:55 2025 by rpki-client