$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/840ff4de-860d-311f-a91f-b06205e1f61a.roa File: 840ff4de-860d-311f-a91f-b06205e1f61a.roa (raw, json) Hash identifier: QPFaG7TwjCwFQLJtJznsbbcfzWYqRH0IME7QDuSLjM8= Subject key identifier: B8:8C:E7:E1:85:FD:29:FD:B4:2C:DD:0E:0E:D5:B2:6B:18:B9:73:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB808FE94065B6863D8A6A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/840ff4de-860d-311f-a91f-b06205e1f61a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 73.65.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:08:fe:94:06:5b:68:63:d8:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=7f5740e1-92c1-437b-9b53-1c8fa89e4a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:0a:bf:7a:83:24:cd:63:1a:11:25:74:a2: a3:ee:8a:97:1f:a2:be:5e:90:1f:9e:d9:64:9f:d2: 90:89:57:12:31:69:d1:2e:29:a3:90:09:76:94:82: 27:92:4e:4a:91:7a:f9:28:59:f4:de:30:25:bd:ad: 76:ba:b8:fd:03:09:fc:a9:ba:b8:8b:5e:f1:d0:b6: ab:6f:54:1f:7b:d2:f3:6d:9a:27:bd:a0:01:1a:10: a5:e2:3f:ed:49:6c:8f:63:fe:de:2b:65:74:c2:d0: 25:2b:18:e7:cd:c4:0f:e3:17:5b:67:d7:6a:78:6b: 48:b2:bb:b5:ed:c3:57:70:ca:5e:02:3c:4c:5a:64: af:23:68:66:b8:de:d0:df:0c:24:b2:79:a6:37:01: 87:a6:4a:04:bc:48:7c:27:99:1c:f0:c7:12:09:37: bb:35:44:12:c9:ca:13:2f:99:cd:52:d6:9f:b8:ff: c9:31:5f:73:03:65:41:96:6f:3d:b6:2b:a2:a3:a3: a0:be:96:90:71:6b:52:05:37:c7:d0:fe:e6:da:c3: b1:cf:10:66:c3:0a:51:ac:6f:01:0f:f2:d4:b8:1e: c5:1f:42:34:25:83:f5:e4:1d:54:e5:e2:60:81:aa: f1:1e:d2:7a:5e:a9:f5:97:f5:2e:7f:6d:64:96:2d: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8C:E7:E1:85:FD:29:FD:B4:2C:DD:0E:0E:D5:B2:6B:18:B9:73:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/840ff4de-860d-311f-a91f-b06205e1f61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.65.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6b:cc:2a:55:d4:66:62:5c:64:3a:67:ee:97:15:71:7a:f3: 26:45:14:4f:73:b1:4b:5a:14:7b:91:b2:17:3a:52:64:ac:3d: b5:95:3b:54:3c:39:7e:85:58:d5:2c:2a:ac:6d:62:03:93:e1: 5b:b8:91:38:e4:63:a2:2f:59:71:30:4b:f4:d6:fa:a0:83:b0: f1:56:30:bb:7e:92:79:82:c5:dd:eb:fa:0f:a8:51:14:23:40: 90:95:f5:6a:56:c2:96:46:22:2d:87:d3:6f:0a:43:53:38:b4: 92:01:7f:bc:55:67:0e:97:7d:0c:80:fc:ae:07:4a:4a:ec:45: 0e:83:c8:16:b7:3f:0a:97:9b:2b:f9:f8:27:45:23:d2:03:c7: 62:98:18:8c:6c:4d:2e:a9:ff:ef:bc:b7:f2:ef:d7:51:6a:01: a6:3c:8b:9a:cc:1a:1c:17:19:b7:2c:9c:10:3a:68:8f:c0:ba: 57:0c:a1:34:79:08:c7:e7:3b:92:b1:7c:3a:65:7c:28:84:0f: 12:43:71:4c:71:3d:83:ae:94:01:b8:cc:46:8e:45:44:6a:d6: ca:65:9c:28:73:17:64:00:1f:61:f3:3c:53:4f:ba:5d:c1:ba: 0c:12:45:ad:67:89:45:9e:c8:0d:09:61:89:72:d1:e4:97:33: c3:9f:a9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uAj+lAZbaGPYpqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk N2Y1NzQwZTEtOTJjMS00MzdiLTliNTMtMWM4ZmE4OWU0YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2AKv3qDJM1jGhEldKKj7oqXH6K+XpAfntlk n9KQiVcSMWnRLimjkAl2lIInkk5KkXr5KFn03jAlva12urj9Awn8qbq4i17x0Lar b1Qfe9LzbZonvaABGhCl4j/tSWyPY/7eK2V0wtAlKxjnzcQP4xdbZ9dqeGtIsru1 7cNXcMpeAjxMWmSvI2hmuN7Q3wwksnmmNwGHpkoEvEh8J5kc8McSCTe7NUQSycoT L5nNUtafuP/JMV9zA2VBlm89tiuio6OgvpaQcWtSBTfH0P7m2sOxzxBmwwpRrG8B D/LUuB7FH0I0JYP15B1U5eJggarxHtJ6Xqn1l/Uuf21kli3sXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiM5+GF/Sn9tCzdDg7VsmsYuXM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQwZmY0ZGUtODYwZC0z MTFmLWE5MWYtYjA2MjA1ZTFmNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhrzCpV1GZiXGQ6Z+6XFXF68yZFFE9zsUtaFHuRshc6UmSsPbWVO1Q8 OX6FWNUsKqxtYgOT4Vu4kTjkY6IvWXEwS/TW+qCDsPFWMLt+knmCxd3r+g+oURQj QJCV9WpWwpZGIi2H028KQ1M4tJIBf7xVZw6XfQyA/K4HSkrsRQ6DyBa3PwqXmyv5 +CdFI9IDx2KYGIxsTS6p/++8t/Lv11FqAaY8i5rMGhwXGbcsnBA6aI/AulcMoTR5 CMfnO5KxfDplfCiEDxJDcUxxPYOulAG4zEaORURq1splnChzF2QAH2HzPFNPul3B ugwSRa1niUWeyA0JYYly0eSXM8OfqSw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:12:02 2025 by rpki-client