$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fc494c7-33e3-3fc2-b6b0-ba27c3a3b125.roa File: 2fc494c7-33e3-3fc2-b6b0-ba27c3a3b125.roa (raw, json) Hash identifier: UUl3slrrlcDzDJ7ns4w5fw1tvyWmsF/CAeVMXEYFPuQ= Subject key identifier: BF:A8:42:58:67:48:5D:72:51:7E:E3:F8:51:B3:01:9D:1D:32:0A:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A76D03C740F93B8A943960 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fc494c7-33e3-3fc2-b6b0-ba27c3a3b125.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 73.44.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:6d:03:c7:40:f9:3b:8a:94:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=90c830f5-fc8c-42a7-827e-a11c0c3185f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0d:9c:e0:29:7f:1a:2d:ae:54:71:2b:ca:c4: 96:17:bd:e9:ea:51:a7:26:1f:9d:86:8e:dc:dd:da: 91:45:75:a8:74:1d:49:59:8f:c4:d4:55:33:46:61: 3c:b8:aa:c5:10:23:01:6c:21:ac:50:f4:93:65:41: bf:fb:ef:00:eb:60:37:8d:f3:d9:54:e1:04:99:4b: 44:b2:78:1e:db:26:05:d2:e6:22:66:9a:58:0d:ce: 77:0a:24:b8:95:92:ea:81:0d:9a:9e:ef:af:07:a8: 9a:d3:dc:5f:3a:22:2c:d0:82:01:9c:bc:77:09:0e: f0:66:10:d4:4b:6f:0c:8e:a5:f4:03:bf:51:27:ec: e4:bc:2a:06:00:9e:94:11:1d:7e:e1:22:4f:b9:25: 16:a4:91:c1:61:48:fa:3b:f9:ab:4a:b0:cd:7c:6c: 2c:0b:55:0c:05:2d:af:01:47:7f:f8:75:e5:7e:38: 6a:95:08:0d:07:26:1d:6d:10:79:13:1a:61:1a:7b: 90:e0:cd:a8:b2:3e:b8:cc:7e:51:c3:6f:03:df:55: e4:2f:10:fd:d5:76:3d:26:e6:16:7e:56:6d:ae:b7: 5a:5d:eb:37:c6:fe:a7:59:60:5e:d3:f7:8b:d4:57: 33:27:b5:39:69:91:cd:c9:6b:63:71:eb:52:b3:2f: 51:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A8:42:58:67:48:5D:72:51:7E:E3:F8:51:B3:01:9D:1D:32:0A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fc494c7-33e3-3fc2-b6b0-ba27c3a3b125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.44.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:65:bd:00:83:e9:9a:b0:3c:0c:90:94:63:35:dd:5b:1e:2c: 1e:34:09:18:84:09:36:8b:19:d2:53:50:93:79:38:ef:9b:59: 4d:fd:95:25:e4:8d:52:43:81:73:aa:88:09:8f:e7:1d:ff:b4: 67:dc:1f:78:08:8e:b7:3f:11:b0:cc:62:bf:c9:63:d6:94:33: 94:65:3a:b0:d3:7a:e4:9d:33:f7:7b:86:7e:e1:dc:ff:3b:78: 6f:62:12:31:b6:f8:e0:84:a3:1f:40:e1:52:b9:d4:8c:7a:0d: 16:01:40:02:57:c1:5e:77:51:3d:97:67:d2:39:63:ef:14:62: 96:c0:c9:75:89:3d:cd:63:01:57:e4:0f:b5:dc:46:b1:d4:5a: d7:33:d2:4e:cb:fd:cc:1b:5c:bb:f2:a6:ab:37:b0:f1:3f:4e: 39:18:79:45:54:b6:8f:1e:59:0b:0b:e2:1d:34:62:ef:46:31: 55:56:5b:4f:61:9d:68:96:1e:80:27:bf:52:f9:e6:83:c8:71: fe:ac:95:67:d2:e9:36:a7:be:dd:b4:cd:a9:8b:85:09:e8:60: 4c:0d:16:59:da:c1:64:9a:7d:b3:57:3b:7f:df:22:54:19:60: 3f:58:b2:b8:bd:37:f2:be:af:94:00:fc:c1:e1:d0:d8:93:98: c1:5a:d6:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp20Dx0D5O4qUOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk OTBjODMwZjUtZmM4Yy00MmE3LTgyN2UtYTExYzBjMzE4NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw2c4Cl/Gi2uVHErysSWF73p6lGnJh+dho7c 3dqRRXWodB1JWY/E1FUzRmE8uKrFECMBbCGsUPSTZUG/++8A62A3jfPZVOEEmUtE snge2yYF0uYiZppYDc53CiS4lZLqgQ2anu+vB6ia09xfOiIs0IIBnLx3CQ7wZhDU S28MjqX0A79RJ+zkvCoGAJ6UER1+4SJPuSUWpJHBYUj6O/mrSrDNfGwsC1UMBS2v AUd/+HXlfjhqlQgNByYdbRB5ExphGnuQ4M2osj64zH5Rw28D31XkLxD91XY9JuYW flZtrrdaXes3xv6nWWBe0/eL1FczJ7U5aZHNyWtjcetSsy9R+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+oQlhnSF1yUX7j+FGzAZ0dMgr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZjNDk0YzctMzNlMy0z ZmMyLWI2YjAtYmEyN2MzYTNiMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSx+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFlvQCD6ZqwPAyQlGM13VseLB40CRiECTaLGdJTUJN5OO+bWU39lSXk jVJDgXOqiAmP5x3/tGfcH3gIjrc/EbDMYr/JY9aUM5RlOrDTeuSdM/d7hn7h3P87 eG9iEjG2+OCEox9A4VK51Ix6DRYBQAJXwV53UT2XZ9I5Y+8UYpbAyXWJPc1jAVfk D7XcRrHUWtcz0k7L/cwbXLvypqs3sPE/TjkYeUVUto8eWQsL4h00Yu9GMVVWW09h nWiWHoAnv1L55oPIcf6slWfS6Tanvt20zamLhQnoYEwNFlnawWSafbNXO3/fIlQZ YD9Ysri9N/K+r5QA/MHh0NiTmMFa1kg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:05 2025 by rpki-client