$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/121c569d-7f51-3854-8f8c-bcab82c62226.roa File: 121c569d-7f51-3854-8f8c-bcab82c62226.roa (raw, json) Hash identifier: ACnGwyXZk0CH5VNiMyACVxIqmej41sOosLH78+82n/M= Subject key identifier: 51:27:3C:A2:38:1D:87:50:89:B0:9D:CE:43:5B:34:8C:9F:7A:30:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8BB3BCA6BF220944DCA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/121c569d-7f51-3854-8f8c-bcab82c62226.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 73.58.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:bb:3b:ca:6b:f2:20:94:4d:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4bb1ff6b-a38e-45e9-8c93-16fb1908367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:40:64:ad:44:41:ba:a3:90:e8:18:55:06: f1:b3:ca:79:88:8a:15:b5:06:f1:b0:30:8b:5b:e9: 59:33:37:2d:0a:a9:03:3b:3d:21:a0:10:5b:81:10: 32:70:d5:f6:44:ee:b7:7c:4b:c1:55:df:ff:d9:36: 6f:54:c2:48:c2:37:ae:71:5d:56:b3:dc:c9:48:ca: 52:d0:2e:7f:36:f9:ba:b6:9f:9a:f3:d1:f0:d1:4b: 7d:85:9e:d5:27:6f:29:2b:d5:5c:b1:92:55:5d:d7: f4:f3:49:43:be:f9:2b:4a:9c:ec:b7:e0:8a:a6:99: 17:d6:47:91:15:d9:ab:5a:83:39:4f:6a:36:7f:a0: a9:7d:eb:58:8a:c2:76:e9:07:2b:3b:dc:4f:b5:92: 31:1b:4c:fa:b2:0a:1e:7a:cc:ac:be:a3:bc:9e:0c: a7:c8:d8:05:6d:81:e6:9a:2e:eb:be:04:fa:a2:d7: eb:f6:ec:4d:fe:7b:10:17:5e:83:de:0c:40:b3:32: d4:a9:0f:97:74:64:82:9e:5f:5b:9c:ee:c2:db:26: 85:a9:2a:f7:ff:74:6b:d6:f7:f6:07:e5:94:f1:90: 50:e1:4d:72:bf:19:e3:84:b9:b2:83:bf:42:11:58: 4b:27:05:a4:26:63:57:64:02:9b:4a:d4:d5:36:62: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:27:3C:A2:38:1D:87:50:89:B0:9D:CE:43:5B:34:8C:9F:7A:30:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/121c569d-7f51-3854-8f8c-bcab82c62226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.58.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d7:5a:24:f8:eb:ed:30:28:47:d3:b9:5b:2e:33:82:63:16: d7:95:5d:aa:53:17:e1:8a:c4:71:41:e4:70:9f:53:a2:4a:f2: bc:f3:60:74:de:cd:ae:e1:b4:a6:7a:b4:27:25:ee:6c:f0:35: 71:99:b0:bc:a0:43:e3:49:a1:a8:96:2b:13:5d:6c:de:5f:7b: 29:eb:78:1a:bf:c5:c1:f6:c4:20:d2:06:4d:d9:40:0d:1b:6f: c2:26:8e:a6:a2:3e:f1:37:14:c8:7a:de:d1:4a:c3:1d:fa:fb: 52:ac:07:ea:d9:46:1d:64:62:22:f7:5e:f4:2c:31:23:f0:0b: 9e:c3:46:42:b7:dd:5e:21:88:37:3e:b0:49:8a:ed:fc:ba:01: 37:d6:78:ed:07:b6:30:43:bc:21:2c:b8:51:92:36:be:cf:07: 36:bc:d9:a1:1d:b3:a2:47:21:cc:99:22:8c:f4:e7:6e:18:08: 9d:5b:6f:2a:ab:e2:9e:1d:cd:d7:2b:42:89:0f:5b:22:75:95: ac:8d:29:89:c0:c5:f2:1d:a5:a9:61:ec:7b:5c:81:4d:94:76: 9e:f2:42:21:28:12:6a:d2:7b:81:c2:2f:f7:54:61:60:54:6d: 08:59:a1:0c:d5:5b:8f:18:8d:ca:3b:ef:89:bb:fb:30:d8:bd: f4:cb:75:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uLs7ymvyIJRNyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NGJiMWZmNmItYTM4ZS00NWU5LThjOTMtMTZmYjE5MDgzNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/NAZK1EQbqjkOgYVQbxs8p5iIoVtQbxsDCL W+lZMzctCqkDOz0hoBBbgRAycNX2RO63fEvBVd//2TZvVMJIwjeucV1Ws9zJSMpS 0C5/Nvm6tp+a89Hw0Ut9hZ7VJ28pK9VcsZJVXdf080lDvvkrSpzst+CKppkX1keR FdmrWoM5T2o2f6CpfetYisJ26QcrO9xPtZIxG0z6sgoeesysvqO8ngynyNgFbYHm mi7rvgT6otfr9uxN/nsQF16D3gxAszLUqQ+XdGSCnl9bnO7C2yaFqSr3/3Rr1vf2 B+WU8ZBQ4U1yvxnjhLmyg79CEVhLJwWkJmNXZAKbStTVNmJNQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEnPKI4HYdQibCdzkNbNIyfejDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTIxYzU2OWQtN2Y1MS0z ODU0LThmOGMtYmNhYjgyYzYyMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSTqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLXWiT46+0wKEfTuVsuM4JjFteVXapTF+GKxHFB5HCfU6JK8rzzYHTe za7htKZ6tCcl7mzwNXGZsLygQ+NJoaiWKxNdbN5feynreBq/xcH2xCDSBk3ZQA0b b8ImjqaiPvE3FMh63tFKwx36+1KsB+rZRh1kYiL3XvQsMSPwC57DRkK33V4hiDc+ sEmK7fy6ATfWeO0HtjBDvCEsuFGSNr7PBza82aEds6JHIcyZIoz0524YCJ1bbyqr 4p4dzdcrQokPWyJ1layNKYnAxfIdpalh7HtcgU2Udp7yQiEoEmrSe4HCL/dUYWBU bQhZoQzVW48Yjco774m7+zDYvfTLdf0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:44 2025 by rpki-client