$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bed0d3c-504d-387a-8635-1ede65b5614b.roa File: 3bed0d3c-504d-387a-8635-1ede65b5614b.roa (raw, json) Hash identifier: 9VIWoYvtXYCr4a8L1nJvTncnD2kpNrZPBH4wuJNrApI= Subject key identifier: 8E:E6:A6:48:C2:2C:D3:D1:52:9B:91:92:9E:A0:99:68:D8:F5:90:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB77DC73BC56D1C57677C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bed0d3c-504d-387a-8635-1ede65b5614b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 21508 IP address blocks: 73.177.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:7d:c7:3b:c5:6d:1c:57:67:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1e94e694-1f6b-4483-8974-0616377038cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:df:cf:2e:5a:46:a1:43:02:a4:45:52:13: b6:91:1e:b4:0d:7b:ea:9f:4f:9e:11:57:7c:3e:0d: 95:de:36:82:d3:24:0e:b8:b9:de:85:3f:68:b6:0e: f0:ca:b2:43:be:24:af:9b:43:03:68:ef:73:c8:40: 7d:d5:90:7b:33:7f:34:ab:0d:49:bb:7b:ac:58:26: 25:cc:01:41:2c:d8:ab:a2:a1:2b:f6:01:9c:7e:8a: 42:cb:94:ac:b8:f7:b8:bc:f5:db:4b:70:e6:b8:59: fe:c0:9d:9f:4c:e0:87:82:08:3c:32:62:93:af:b8: 2e:a2:1a:bf:e7:26:95:41:e4:ab:96:35:f6:34:39: 42:7f:1e:24:38:75:f4:33:ea:4f:8e:50:12:ea:1d: 36:25:7b:63:62:0c:15:65:b6:2b:90:65:0a:0a:75: 73:bf:1b:b0:1d:b4:47:46:15:e4:76:77:e2:9a:c8: 8e:cd:96:1d:8a:d2:4a:67:3c:73:f8:2b:1d:64:87: ff:39:68:fa:12:0d:e9:ff:d5:13:ba:6a:a9:f6:b9: 64:53:90:19:b7:bf:57:10:31:07:bb:d8:17:65:7d: 46:1d:bf:6a:b9:62:58:d8:a3:ed:04:a6:72:47:78: fd:48:b2:03:77:10:82:1f:a6:92:97:58:dc:ad:b9: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E6:A6:48:C2:2C:D3:D1:52:9B:91:92:9E:A0:99:68:D8:F5:90:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bed0d3c-504d-387a-8635-1ede65b5614b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.177.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c4:a0:b8:b5:ff:62:99:7b:47:10:b8:9b:d7:99:ca:13:6e: ae:59:9e:0c:b1:97:16:f4:1e:1d:d4:1c:5b:8a:ba:89:2b:70: 1c:38:1d:af:48:3f:59:b0:9a:8f:bb:a9:a6:29:49:31:69:c7: 49:f6:61:9d:35:00:4e:4c:cf:2d:7f:13:6f:64:d0:f2:47:1a: 72:ea:c9:dc:0d:13:d2:2f:29:d9:7e:6b:0a:d3:c5:54:de:72: d4:07:7b:3c:fb:2a:78:52:8a:36:f7:aa:96:57:ab:25:67:61: d3:4b:c4:2b:05:0e:a7:aa:1b:c1:a6:23:3d:63:bc:fd:b5:88: aa:d1:dc:25:d0:46:0c:e4:18:1a:cf:7e:a5:03:9a:cf:12:56: 06:35:cb:c9:e5:07:0b:a9:58:8f:81:dc:11:1f:25:d7:fc:65: 49:3f:ad:d8:32:61:3d:fc:21:bd:fb:03:1f:c3:12:27:52:4c: 20:ce:49:21:d8:44:5e:68:93:4c:e2:3f:cd:d7:72:57:02:2f: f1:97:38:4d:f0:eb:81:9d:14:d1:8d:ee:93:cd:3b:1a:bd:cd: 8a:00:e6:a9:67:29:7b:29:95:bd:0b:89:4c:ae:9a:0b:b8:e1: d6:5f:be:62:4a:06:62:b1:4b:6e:16:91:c9:b4:6a:39:83:ee: 58:f8:e6:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9t33HO8VtHFdnfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWU5NGU2OTQtMWY2Yi00NDgzLTg5NzQtMDYxNjM3NzAzOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkPfzy5aRqFDAqRFUhO2kR60DXvqn0+eEVd8 Pg2V3jaC0yQOuLnehT9otg7wyrJDviSvm0MDaO9zyEB91ZB7M380qw1Ju3usWCYl zAFBLNiroqEr9gGcfopCy5SsuPe4vPXbS3DmuFn+wJ2fTOCHggg8MmKTr7guohq/ 5yaVQeSrljX2NDlCfx4kOHX0M+pPjlAS6h02JXtjYgwVZbYrkGUKCnVzvxuwHbRH RhXkdnfimsiOzZYditJKZzxz+CsdZIf/OWj6Eg3p/9UTumqp9rlkU5AZt79XEDEH u9gXZX1GHb9quWJY2KPtBKZyR3j9SLIDdxCCH6aSl1jcrbkPswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7mpkjCLNPRUpuRkp6gmWjY9ZDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JlZDBkM2MtNTA0ZC0z ODdhLTg2MzUtMWVkZTY1YjU2MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSbGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArEoLi1/2KZe0cQuJvXmcoTbq5Zngyxlxb0Hh3UHFuKuokrcBw4Ha9I P1mwmo+7qaYpSTFpx0n2YZ01AE5Mzy1/E29k0PJHGnLqydwNE9IvKdl+awrTxVTe ctQHezz7KnhSijb3qpZXqyVnYdNLxCsFDqeqG8GmIz1jvP21iKrR3CXQRgzkGBrP fqUDms8SVgY1y8nlBwupWI+B3BEfJdf8ZUk/rdgyYT38Ib37Ax/DEidSTCDOSSHY RF5ok0ziP83XclcCL/GXOE3w64GdFNGN7pPNOxq9zYoA5qlnKXsplb0LiUyumgu4 4dZfvmJKBmKxS24Wkcm0ajmD7lj45gw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:51 2025 by rpki-client