$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43bc6a5a-6d1d-3f2a-9d3e-8d637fdec53a.roa File: 43bc6a5a-6d1d-3f2a-9d3e-8d637fdec53a.roa (raw, json) Hash identifier: GivOscvaN88jUIPDkqjGAqOZ2bqJ37uvPB3J3H6sxc4= Subject key identifier: 65:F7:E5:BC:1F:DB:84:A7:77:5D:5F:D4:7F:0C:E1:A0:35:C3:40:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD602F07D9599F0FC49D34 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43bc6a5a-6d1d-3f2a-9d3e-8d637fdec53a.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 73.2.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:60:2f:07:d9:59:9f:0f:c4:9d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=d5656f35-a5cd-4000-90a9-b20a80d46bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:0f:f5:a3:e9:90:9c:24:04:42:cd:84:22: 12:b3:1d:ca:6c:ae:23:27:91:66:e0:d9:02:af:e0: fb:7f:2c:1d:b3:96:3f:55:b8:47:91:e6:1b:41:a6: 0d:76:ec:f3:08:f2:be:56:7c:71:05:b6:eb:de:45: 11:e6:28:b2:c4:96:7a:9a:97:2f:a8:2d:d1:e3:3c: 6b:03:37:19:e4:97:b2:da:34:e4:91:9c:c8:ef:24: e5:13:72:97:13:35:5e:a6:3b:e2:0a:d9:9b:e9:dd: 2c:79:15:12:84:1e:8a:c8:f2:95:25:78:2f:2a:52: 34:b9:9b:f9:e4:02:95:67:33:9b:9f:fd:8c:e5:ca: 51:f9:75:56:ed:ab:0a:cd:74:7a:6d:81:3e:54:20: 6f:e6:f2:b0:05:2b:82:d6:cd:c2:42:86:ca:ae:de: ae:2a:a6:b5:45:40:9a:57:20:5c:72:25:5e:ad:0b: 12:5c:19:90:c9:fb:a3:e4:2b:da:7b:48:02:12:eb: f2:3d:54:2d:6e:e2:d9:2f:b2:80:8b:e9:ec:e7:25: 4a:05:d5:31:cd:a8:02:87:22:22:07:26:ce:69:dc: fa:71:59:70:5a:34:72:0f:48:8d:57:19:70:d1:ef: 61:d5:a1:02:0e:9c:f7:6b:5f:1b:3e:3c:0a:43:db: 9d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F7:E5:BC:1F:DB:84:A7:77:5D:5F:D4:7F:0C:E1:A0:35:C3:40:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43bc6a5a-6d1d-3f2a-9d3e-8d637fdec53a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.2.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:40:3c:21:8a:09:e3:d4:a7:2c:1c:52:c9:4e:cf:d7:bf:a8: 83:97:47:3c:b8:77:7f:9c:4b:57:8b:d8:40:ed:b2:c0:7e:9d: 73:9d:64:4e:24:99:06:70:30:20:22:27:01:e7:c1:0e:e4:0b: 44:e8:cb:e5:6e:6d:3e:36:7c:0c:1f:ea:e3:76:38:a1:19:36: 6e:38:e2:ff:25:37:4f:a5:09:18:59:37:46:d3:9d:1e:b6:86: 16:ec:a5:05:e8:f9:ae:af:90:68:6f:85:39:5b:49:0d:f3:f2: 88:6d:4b:28:f4:28:ab:98:5a:63:ce:3b:d8:56:75:f3:e6:51: 08:fe:05:be:f9:45:1f:37:a8:f7:75:f0:81:b7:c3:0c:55:93: ae:6f:6b:47:3f:f6:62:14:3a:ec:67:75:b7:a2:c1:10:3d:e0: ab:a6:e7:ee:9a:3a:8c:83:78:27:5c:f9:78:4c:23:7a:35:93: ff:49:80:d8:5e:42:ae:8e:ec:ae:86:74:fe:60:65:96:8a:01: bb:36:32:17:14:4b:06:f9:33:b3:37:21:1b:45:0c:52:8a:ec: 03:fe:cf:70:25:7e:0e:8e:ee:08:da:7f:24:ad:43:87:9d:f7: ea:86:79:ac:6f:1f:00:8b:fc:26:d0:13:8e:4c:1b:6e:01:09: 15:89:5a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3WAvB9lZnw/EnTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZDU2NTZmMzUtYTVjZC00MDAwLTkwYTktYjIwYTgwZDQ2YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+MP9aPpkJwkBELNhCISsx3KbK4jJ5Fm4NkC r+D7fywds5Y/VbhHkeYbQaYNduzzCPK+VnxxBbbr3kUR5iiyxJZ6mpcvqC3R4zxr AzcZ5Jey2jTkkZzI7yTlE3KXEzVepjviCtmb6d0seRUShB6KyPKVJXgvKlI0uZv5 5AKVZzObn/2M5cpR+XVW7asKzXR6bYE+VCBv5vKwBSuC1s3CQobKrt6uKqa1RUCa VyBcciVerQsSXBmQyfuj5Cvae0gCEuvyPVQtbuLZL7KAi+ns5yVKBdUxzagChyIi BybOadz6cVlwWjRyD0iNVxlw0e9h1aECDpz3a18bPjwKQ9ud0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX35bwf24Snd11f1H8M4aA1w0DDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNiYzZhNWEtNmQxZC0z ZjJhLTlkM2UtOGQ2MzdmZGVjNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSQLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVAPCGKCePUpywcUslOz9e/qIOXRzy4d3+cS1eL2EDtssB+nXOdZE4k mQZwMCAiJwHnwQ7kC0Toy+VubT42fAwf6uN2OKEZNm444v8lN0+lCRhZN0bTnR62 hhbspQXo+a6vkGhvhTlbSQ3z8ohtSyj0KKuYWmPOO9hWdfPmUQj+Bb75RR83qPd1 8IG3wwxVk65va0c/9mIUOuxndbeiwRA94Kum5+6aOoyDeCdc+XhMI3o1k/9JgNhe Qq6O7K6GdP5gZZaKAbs2MhcUSwb5M7M3IRtFDFKK7AP+z3Alfg6O7gjafyStQ4ed 9+qGeaxvHwCL/CbQE45MG24BCRWJWhs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:15 2025 by rpki-client