$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab56aa0-d5de-33f2-a2b0-09c388c9c00b.roa File: 0ab56aa0-d5de-33f2-a2b0-09c388c9c00b.roa (raw, json) Hash identifier: K3NrXDaW0XuM0LhjAzjUylbH1N3YvdckC3WRD0UuJu8= Subject key identifier: 6A:6B:7E:E1:74:57:37:BF:77:91:E3:A0:66:4C:1B:43:9F:3A:D5:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB724CEDB2E358AAD9F01C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab56aa0-d5de-33f2-a2b0-09c388c9c00b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 73.19.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:24:ce:db:2e:35:8a:ad:9f:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e2af1789-f9cf-4d59-b8dd-60e992798f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:f6:7d:4b:13:03:88:b8:c2:e8:3e:20:24: e3:8c:7c:43:f6:da:d9:8e:65:26:57:74:38:65:9b: ac:7f:5e:38:59:ce:83:39:21:e7:cf:d5:30:57:f7: 7a:5f:e8:bd:81:7c:5d:e2:4c:12:51:80:33:f8:7c: 8d:3a:90:73:4f:34:1e:2b:de:32:37:e7:63:10:ae: b1:20:49:e6:58:fa:7d:f0:3f:c0:9b:34:a6:8a:e2: 59:4a:60:64:86:5e:ad:87:b7:ee:37:6e:6e:24:72: 71:14:5f:77:a9:0a:45:90:43:ef:9d:21:95:5a:3f: 60:8b:ae:2a:6f:58:36:82:68:e6:ab:82:47:f2:9c: 8a:2b:57:50:41:4a:83:49:3c:a0:8e:ec:6f:9e:0d: d8:25:ec:57:23:9c:0e:af:a0:6e:78:29:45:0c:23: 39:25:5d:50:5c:6a:44:3b:c8:4c:54:25:ed:5c:5d: 35:0a:f0:b8:ba:52:5c:bf:4b:11:25:77:8b:e7:0b: af:21:15:7c:ba:10:c0:ee:bd:ec:a8:08:ac:cc:8f: b5:39:eb:81:c8:07:ba:f2:25:c6:ae:64:4f:82:85: 59:0b:5a:c5:40:a6:86:70:52:0c:cf:52:f9:5b:d7: 0d:b7:15:d2:54:de:de:3a:6f:22:9c:93:32:a9:6a: fb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6B:7E:E1:74:57:37:BF:77:91:E3:A0:66:4C:1B:43:9F:3A:D5:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab56aa0-d5de-33f2-a2b0-09c388c9c00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.19.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bd:9b:d7:46:49:a9:ba:81:eb:d1:55:3d:21:35:a6:4e:27: 29:8b:d4:dc:a6:5e:af:10:1e:0c:eb:85:1d:f2:9d:b7:8b:98: 0a:95:3e:c8:a3:58:c9:2d:8e:37:1b:0c:a6:42:82:34:bb:04: d6:f7:24:65:93:c7:da:51:e9:0d:6e:5e:ef:47:6c:ad:48:73: 8f:d2:af:2e:53:68:57:04:b7:3d:1f:74:44:a4:75:62:0b:cd: f3:c1:e7:84:82:40:3f:b6:ce:83:1a:fd:38:56:35:cf:4c:19: 4e:d9:ba:34:30:16:64:46:98:81:5f:db:cc:95:60:88:46:28: 1a:8d:2b:89:e9:a6:38:58:91:25:72:df:11:b3:6f:55:bf:16: ab:e3:0b:bd:b1:dd:55:d8:50:8f:a5:7e:1b:f8:83:11:f2:09: 76:90:ea:74:10:d9:8c:0c:74:2a:0b:89:6d:25:af:1e:f9:57: c3:eb:dd:50:a5:67:fb:e4:f7:56:1f:fd:86:bb:f2:a5:74:74: 4b:ba:2a:00:34:86:b3:9f:40:6b:81:9d:ed:66:6e:eb:6c:78: 5a:3f:6a:ff:6f:22:26:97:ca:91:93:77:25:b2:d2:ec:5c:30: 0b:33:98:2f:6a:f6:36:b1:db:a9:84:f7:10:bc:c9:88:bd:7e: 14:b0:1b:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tyTO2y41iq2fAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTJhZjE3ODktZjljZi00ZDU5LWI4ZGQtNjBlOTkyNzk4ZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4v2fUsTA4i4wug+ICTjjHxD9trZjmUmV3Q4 ZZusf144Wc6DOSHnz9UwV/d6X+i9gXxd4kwSUYAz+HyNOpBzTzQeK94yN+djEK6x IEnmWPp98D/AmzSmiuJZSmBkhl6th7fuN25uJHJxFF93qQpFkEPvnSGVWj9gi64q b1g2gmjmq4JH8pyKK1dQQUqDSTygjuxvng3YJexXI5wOr6BueClFDCM5JV1QXGpE O8hMVCXtXF01CvC4ulJcv0sRJXeL5wuvIRV8uhDA7r3sqAiszI+1OeuByAe68iXG rmRPgoVZC1rFQKaGcFIMz1L5W9cNtxXSVN7eOm8inJMyqWr7DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGprfuF0Vze/d5HjoGZMG0OfOtW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFiNTZhYTAtZDVkZS0z M2YyLWEyYjAtMDljMzg4YzljMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRPCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm9m9dGSam6gevRVT0hNaZOJymL1NymXq8QHgzrhR3ynbeLmAqVPsij WMktjjcbDKZCgjS7BNb3JGWTx9pR6Q1uXu9HbK1Ic4/Sry5TaFcEtz0fdESkdWIL zfPB54SCQD+2zoMa/ThWNc9MGU7ZujQwFmRGmIFf28yVYIhGKBqNK4nppjhYkSVy 3xGzb1W/FqvjC72x3VXYUI+lfhv4gxHyCXaQ6nQQ2YwMdCoLiW0lrx75V8Pr3VCl Z/vk91Yf/Ya78qV0dEu6KgA0hrOfQGuBne1mbutseFo/av9vIiaXypGTdyWy0uxc MAszmC9q9jax26mE9xC8yYi9fhSwG6w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:30 2025 by rpki-client