$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0f15b8-f5f6-3470-a758-0a58271e1a16.roa File: 3d0f15b8-f5f6-3470-a758-0a58271e1a16.roa (raw, json) Hash identifier: 0ekJQpmtrakpgmjv0nMhqP0dlW46jBnt32mtPk0aRCw= Subject key identifier: 76:7C:C1:75:70:A6:31:8C:A3:6C:CF:7C:90:C4:8E:6F:7D:4F:3D:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9A7CF4BD26E0751244450 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0f15b8-f5f6-3470-a758-0a58271e1a16.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 73.228.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:a7:cf:4b:d2:6e:07:51:24:44:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ed7ebf77-be04-4f39-8897-6d570102651c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3f:18:4f:21:45:7b:90:b6:60:01:39:d0:a7: ba:54:47:68:3f:9a:41:b3:c7:d2:8b:b2:33:55:2b: 7a:26:26:5d:15:8b:61:92:ff:b4:40:15:ec:44:e5: ef:60:8c:ca:27:db:1a:36:1a:f7:b3:fa:cc:ec:32: 6d:51:74:50:d0:4f:5b:59:80:e8:cb:3c:b4:d8:b6: 47:e2:64:4b:8e:71:c2:33:2e:0e:d5:15:c0:27:7c: 99:e3:6f:ed:b8:06:0f:23:83:24:7e:58:1a:d2:e8: 45:2b:fd:4f:d8:98:e7:d7:49:e2:d7:cf:98:a6:10: e2:09:af:d2:a5:d4:d1:b4:32:c6:01:03:90:67:ea: 6d:ec:06:71:8c:d6:4c:02:71:16:75:2d:f6:03:50: 72:f5:74:95:13:be:65:e0:7f:e1:0a:ff:02:9f:20: 7f:18:43:3d:cd:46:0f:84:68:76:f8:3a:e9:ef:32: d9:55:0b:7a:be:cf:c6:94:36:ea:e7:4f:86:19:4e: 40:40:ca:92:f5:7f:18:0f:1c:3f:e1:9e:61:96:c2: 79:d6:f6:6c:b6:84:60:0c:17:1e:b2:9a:7d:8e:cd: 3e:8f:ff:23:c5:be:86:e7:7f:04:27:55:3d:5d:5c: 45:56:51:6d:b6:1c:b0:0c:b8:57:0f:9a:be:42:2c: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7C:C1:75:70:A6:31:8C:A3:6C:CF:7C:90:C4:8E:6F:7D:4F:3D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0f15b8-f5f6-3470-a758-0a58271e1a16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b7:34:65:a9:11:9d:fa:5d:bc:d6:90:9e:24:3a:33:7f:08: e4:8f:18:ef:8e:6f:61:2e:bc:3d:a0:f7:bc:f4:f5:3b:d3:23: ef:e7:d9:7a:12:6b:df:90:29:14:05:f0:a9:be:8e:e3:76:4f: 52:a5:13:56:93:8a:6d:60:9c:3f:f2:97:94:db:a2:e1:1a:fe: 01:ea:9c:00:56:58:4d:17:8a:2f:d1:c7:dc:33:70:e9:4f:72: 22:7a:5b:ac:50:65:cd:fb:5f:ee:49:32:83:f4:f5:40:2e:82: d5:ff:96:fc:8b:bf:1b:5a:a6:b8:fe:ef:5e:86:0d:98:6a:bd: 85:40:12:21:ae:d8:46:ea:63:94:22:7a:88:86:40:c3:75:50: c4:f4:b0:0d:44:5a:9b:b1:37:c9:93:3e:21:4f:9c:b1:59:5f: 72:2c:2d:43:23:ba:3c:9f:69:b5:91:e5:ab:39:f7:73:29:22: 4c:62:91:84:ac:74:d9:8b:63:72:9f:3f:85:01:6d:af:e8:56: ea:66:d4:f1:2e:7f:d8:b0:57:86:0b:0d:06:3c:6f:72:f2:5f: a7:59:a3:7b:ee:56:c8:04:dc:5d:f1:21:df:aa:e0:de:e7:5d: 46:38:b2:cf:ec:95:12:69:4c:2e:6b:86:af:ba:c6:5c:50:db: aa:a5:f2:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uafPS9JuB1EkRFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZWQ3ZWJmNzctYmUwNC00ZjM5LTg4OTctNmQ1NzAxMDI2NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD8YTyFFe5C2YAE50Ke6VEdoP5pBs8fSi7Iz VSt6JiZdFYthkv+0QBXsROXvYIzKJ9saNhr3s/rM7DJtUXRQ0E9bWYDoyzy02LZH 4mRLjnHCMy4O1RXAJ3yZ42/tuAYPI4Mkflga0uhFK/1P2Jjn10ni18+YphDiCa/S pdTRtDLGAQOQZ+pt7AZxjNZMAnEWdS32A1By9XSVE75l4H/hCv8CnyB/GEM9zUYP hGh2+Drp7zLZVQt6vs/GlDbq50+GGU5AQMqS9X8YDxw/4Z5hlsJ51vZstoRgDBce spp9js0+j/8jxb6G538EJ1U9XVxFVlFtthywDLhXD5q+QiyCoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ8wXVwpjGMo2zPfJDEjm99Tz3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2QwZjE1YjgtZjVmNi0z NDcwLWE3NTgtMGE1ODI3MWUxYTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSeSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW3NGWpEZ36XbzWkJ4kOjN/COSPGO+Ob2EuvD2g97z09TvTI+/n2XoS a9+QKRQF8Km+juN2T1KlE1aTim1gnD/yl5TbouEa/gHqnABWWE0Xii/Rx9wzcOlP ciJ6W6xQZc37X+5JMoP09UAugtX/lvyLvxtaprj+716GDZhqvYVAEiGu2EbqY5Qi eoiGQMN1UMT0sA1EWpuxN8mTPiFPnLFZX3IsLUMjujyfabWR5as593MpIkxikYSs dNmLY3KfP4UBba/oVupm1PEuf9iwV4YLDQY8b3LyX6dZo3vuVsgE3F3xId+q4N7n XUY4ss/slRJpTC5rhq+6xlxQ26ql8pw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:55 2025 by rpki-client