$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cafbd40-e1d4-3ad1-be89-6cf81613a7cd.roa File: 5cafbd40-e1d4-3ad1-be89-6cf81613a7cd.roa (raw, json) Hash identifier: E7LsehiWn6p/crd4xTJArBVFyKyLAGbItlWI43Ktzhg= Subject key identifier: D5:88:81:C9:9F:FA:59:1F:16:66:13:CB:14:9C:F6:31:6B:CA:12:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD19E6BD4EF0007BB45A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cafbd40-e1d4-3ad1-be89-6cf81613a7cd.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 73.203.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:19:e6:bd:4e:f0:00:7b:b4:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=98396fbd-5b73-46e0-ab69-254bebb310ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:43:b1:cf:10:e6:0a:a7:0f:69:37:68:0b: 19:56:71:de:e9:99:3b:eb:c1:f1:8d:fe:9e:61:a4: e5:3e:8b:b8:25:a8:e1:f5:50:42:b1:79:0c:3f:64: 03:b9:7b:61:44:84:03:fd:2a:24:cd:a6:8a:fd:84: 72:07:ae:4d:5c:f2:44:b7:c9:7a:1c:7c:d3:6e:ea: 9e:97:16:ed:5e:a6:65:36:a7:e3:98:c2:5c:b7:50: 7f:3b:63:19:c2:82:06:2f:7d:76:d1:e1:16:32:e4: 44:dd:49:fe:5f:60:52:d9:cc:77:71:1b:c3:9e:cb: 74:2f:32:52:7a:a4:0e:93:48:cd:27:3b:56:ea:ca: e2:7f:df:9f:14:19:e0:f8:cf:e0:3d:60:ac:50:9a: 37:df:05:31:e8:13:41:82:a8:34:6a:73:49:82:55: e7:17:ac:55:ce:31:78:fb:e1:76:d5:fe:39:ac:cf: af:b3:11:10:22:6e:66:4d:ca:f3:a3:0f:21:9d:25: fe:79:50:e0:a9:a0:6c:a0:a8:0e:d5:45:47:ad:74: e1:7f:58:44:da:61:e9:84:ab:35:88:20:03:89:10: cd:93:2a:c1:fb:b5:89:af:9f:9c:f7:eb:f1:cc:21: a9:73:3e:31:1b:a5:24:52:69:30:11:91:82:da:8d: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:81:C9:9F:FA:59:1F:16:66:13:CB:14:9C:F6:31:6B:CA:12:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cafbd40-e1d4-3ad1-be89-6cf81613a7cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.203.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9a:b9:8a:44:a9:70:d2:29:07:80:4c:30:d8:c4:60:81:86: 47:2c:3d:9a:26:00:ae:84:3b:57:ef:b3:79:bb:cc:e0:4f:80: 9d:19:46:55:a1:b0:08:92:bb:6d:f0:a9:ea:e4:d0:c1:b0:9a: 52:6a:15:ff:67:39:76:dc:1c:ab:47:73:d3:46:43:66:45:5e: fa:6c:2e:1f:8c:7e:43:3c:2c:8d:63:fe:14:aa:98:3a:d6:9d: fc:2a:62:f9:89:71:c8:d6:c2:84:ff:16:18:16:4d:08:df:9e: 0c:47:26:0b:9f:19:4f:4f:9e:14:4e:cf:6d:dd:87:4e:2d:c1: ff:2e:2e:f7:7b:0a:49:87:41:bc:dd:8c:b6:ff:16:46:1e:d3: 3c:7d:10:05:fc:e4:44:0a:a6:eb:1f:31:6a:10:e0:f8:4c:cd: 15:b9:71:93:7e:50:99:cd:ea:6c:d3:0c:f9:78:b3:94:a4:ae: fe:46:2d:4c:cc:6e:6e:1e:9e:37:b2:51:e1:a0:52:40:55:9c: 53:d6:37:18:6b:03:9d:6a:9e:e1:7f:03:88:5e:0d:f2:89:64: c7:7d:4b:a1:67:bf:f6:e5:d1:b1:de:ea:5e:72:70:2e:99:29: 8f:ec:33:3a:6c:43:a1:c2:f9:2e:92:23:57:ac:fe:c2:5c:40: 0e:19:90:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3RnmvU7wAHu0WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OTgzOTZmYmQtNWI3My00NmUwLWFiNjktMjU0YmViYjMxMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw71Dsc8Q5gqnD2k3aAsZVnHe6Zk768Hxjf6e YaTlPou4Jajh9VBCsXkMP2QDuXthRIQD/SokzaaK/YRyB65NXPJEt8l6HHzTbuqe lxbtXqZlNqfjmMJct1B/O2MZwoIGL3120eEWMuRE3Un+X2BS2cx3cRvDnst0LzJS eqQOk0jNJztW6srif9+fFBng+M/gPWCsUJo33wUx6BNBgqg0anNJglXnF6xVzjF4 ++F21f45rM+vsxEQIm5mTcrzow8hnSX+eVDgqaBsoKgO1UVHrXThf1hE2mHphKs1 iCADiRDNkyrB+7WJr5+c9+vxzCGpcz4xG6UkUmkwEZGC2o3k9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWIgcmf+lkfFmYTyxSc9jFryhLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNhZmJkNDAtZTFkNC0z YWQxLWJlODktNmNmODE2MTNhN2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGauYpEqXDSKQeATDDYxGCBhkcsPZomAK6EO1fvs3m7zOBPgJ0ZRlWh sAiSu23wqerk0MGwmlJqFf9nOXbcHKtHc9NGQ2ZFXvpsLh+MfkM8LI1j/hSqmDrW nfwqYvmJccjWwoT/FhgWTQjfngxHJgufGU9PnhROz23dh04twf8uLvd7CkmHQbzd jLb/FkYe0zx9EAX85EQKpusfMWoQ4PhMzRW5cZN+UJnN6mzTDPl4s5Skrv5GLUzM bm4enjeyUeGgUkBVnFPWNxhrA51qnuF/A4heDfKJZMd9S6Fnv/bl0bHe6l5ycC6Z KY/sMzpsQ6HC+S6SI1es/sJcQA4ZkJM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:28 2025 by rpki-client