$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58220b8c-a4af-3db5-a8f3-6ec2fb794b2e.roa File: 58220b8c-a4af-3db5-a8f3-6ec2fb794b2e.roa (raw, json) Hash identifier: NN9zyMKeZR803R5oCCIvM4hDkqyVSmwGUFETFIPL/I0= Subject key identifier: 84:2E:0F:67:6E:F8:C7:8D:F9:9B:CF:B7:64:E2:02:64:77:B2:D9:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB72DA0B6AB08976B2547C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58220b8c-a4af-3db5-a8f3-6ec2fb794b2e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 73.121.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:2d:a0:b6:ab:08:97:6b:25:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=9480bbd3-82e9-49ab-a988-d74cafb061da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:22:fc:68:2d:cf:ca:76:a6:4f:db:ff:b6: b4:bc:c5:44:69:41:53:bb:e3:ac:ca:1c:cd:7a:7e: 65:fa:d3:d3:6b:89:5a:73:9f:a1:60:78:a1:2e:ca: 29:26:3e:5e:8a:54:16:7e:9e:75:62:95:5f:7e:31: 33:2c:a0:00:b1:b5:f7:93:66:b7:16:45:45:bc:95: 7b:a6:02:9b:0f:c9:55:7b:0c:d4:8a:7f:23:ee:c5: db:08:86:06:5b:61:fb:39:42:4e:11:6c:0c:66:29: c7:0e:7b:2b:8a:1b:a7:3a:c6:7e:60:fb:11:33:d7: 97:a8:a9:d3:8b:bd:bb:86:ab:96:0e:56:a3:42:7a: 6e:f1:01:0c:04:c7:c2:a8:62:c4:e5:13:92:0b:6d: 41:5e:e8:76:30:14:67:0e:9b:f8:c2:3b:2e:9a:56: 20:33:c6:35:a8:b6:a7:ee:a0:6f:0d:95:75:1c:b6: 47:fd:d4:a9:94:5d:09:f5:69:1d:34:ae:d7:35:8b: d1:31:da:ec:0b:6b:41:03:98:99:6e:31:07:ad:cf: 0f:f3:d9:02:90:5f:c2:2b:ec:6f:87:f0:86:2c:01: 75:28:6a:72:91:95:23:39:26:e9:23:02:bc:fa:2e: 6d:cc:ef:f6:e0:a5:4a:86:a0:e2:e0:49:6a:fa:61: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:0F:67:6E:F8:C7:8D:F9:9B:CF:B7:64:E2:02:64:77:B2:D9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58220b8c-a4af-3db5-a8f3-6ec2fb794b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.121.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9b:c7:44:dc:3e:dd:ee:33:31:7a:d3:a0:84:e3:f7:a8:9c: 9e:44:a4:59:d7:62:6b:94:c1:2a:8b:42:c6:d0:93:7e:9b:c9: 6c:6d:25:e4:39:6d:2f:d2:91:99:f3:05:10:b9:c7:aa:ac:75: 8a:39:a4:4c:1c:4b:0c:94:76:e7:fe:62:9a:b4:52:99:e6:9c: 7b:38:5f:08:83:51:12:04:77:f8:31:d6:e1:c1:00:29:dd:4d: f0:82:ae:3b:ad:45:4c:5c:b8:3f:71:4e:4d:69:b2:c0:7e:87: 6b:a1:f8:2c:8c:93:a1:6d:f7:da:a5:38:7b:4d:5e:d1:01:34: 08:16:9a:4d:f0:a5:7f:37:01:ae:08:12:b9:38:34:28:da:05: 26:ba:ca:51:73:7f:5d:0f:18:2b:7a:74:ab:f2:ce:dc:57:e1: 0b:df:93:80:ba:3e:ef:9c:94:f9:2b:64:56:f1:91:b4:03:20: fc:8d:aa:53:53:54:c5:c7:26:86:69:f6:8a:63:f9:e9:dc:a7: d0:1c:6f:bc:cb:a3:33:ef:7a:be:4f:19:45:24:af:3b:60:1c: ea:06:a5:3d:dc:10:96:1c:69:74:a9:2e:87:3b:c3:e5:08:aa: cc:5f:28:95:99:55:2c:14:c0:e8:b0:94:ca:88:5f:2b:2d:d1: 14:c9:71:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9ty2gtqsIl2slR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTQ4MGJiZDMtODJlOS00OWFiLWE5ODgtZDc0Y2FmYjA2MWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaoi/Ggtz8p2pk/b/7a0vMVEaUFTu+OsyhzN en5l+tPTa4lac5+hYHihLsopJj5eilQWfp51YpVffjEzLKAAsbX3k2a3FkVFvJV7 pgKbD8lVewzUin8j7sXbCIYGW2H7OUJOEWwMZinHDnsrihunOsZ+YPsRM9eXqKnT i727hquWDlajQnpu8QEMBMfCqGLE5ROSC21BXuh2MBRnDpv4wjsumlYgM8Y1qLan 7qBvDZV1HLZH/dSplF0J9WkdNK7XNYvRMdrsC2tBA5iZbjEHrc8P89kCkF/CK+xv h/CGLAF1KGpykZUjOSbpIwK8+i5tzO/24KVKhqDi4Elq+mEr6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQuD2du+MeN+ZvPt2TiAmR3stm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgyMjBiOGMtYTRhZi0z ZGI1LWE4ZjMtNmVjMmZiNzk0YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+bx0TcPt3uMzF606CE4/eonJ5EpFnXYmuUwSqLQsbQk36byWxtJeQ5 bS/SkZnzBRC5x6qsdYo5pEwcSwyUduf+Ypq0UpnmnHs4XwiDURIEd/gx1uHBACnd TfCCrjutRUxcuD9xTk1pssB+h2uh+CyMk6Ft99qlOHtNXtEBNAgWmk3wpX83Aa4I Erk4NCjaBSa6ylFzf10PGCt6dKvyztxX4Qvfk4C6Pu+clPkrZFbxkbQDIPyNqlNT VMXHJoZp9opj+encp9Acb7zLozPver5PGUUkrztgHOoGpT3cEJYcaXSpLoc7w+UI qsxfKJWZVSwUwOiwlMqIXyst0RTJceA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:12:34 2025 by rpki-client