$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c1d62e7-35b1-339c-acda-121aa33ed394.roa File: 8c1d62e7-35b1-339c-acda-121aa33ed394.roa (raw, json) Hash identifier: ZJndoqA+uDjZZbmCZxvE6VgoWgqUs7oCMNg/+EIrfAo= Subject key identifier: C0:E0:89:88:42:13:98:8D:3E:46:1C:22:76:0B:05:26:FB:2E:5B:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A74BC89D18E7DF4E8D0A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c1d62e7-35b1-339c-acda-121aa33ed394.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33651 IP address blocks: 73.158.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:4b:c8:9d:18:e7:df:4e:8d:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=12f33744-16c0-44c9-a10e-b9b727f17131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:ac:44:80:a5:d3:8e:1f:97:f7:e0:fd:a5: 6d:07:76:00:00:a8:76:66:1b:13:11:20:ed:f9:85: 78:c2:40:cd:8d:5f:7f:a5:96:e5:b5:b3:ce:49:e6: d7:74:5d:22:51:84:de:6f:cf:71:13:00:ac:b3:fb: e1:6a:0f:0b:33:d2:95:95:f7:73:35:67:83:40:be: 43:8a:9d:a8:52:36:c3:0a:85:14:e2:4d:64:a0:c0: f1:1c:e0:94:85:ec:d2:fa:b2:09:de:33:89:cc:08: e3:9c:73:19:bb:aa:25:46:b5:ed:a1:51:5c:99:b6: c1:17:ec:9b:eb:27:93:c7:96:2f:26:e7:5e:a8:44: f1:87:22:47:af:ab:7c:70:87:b7:79:d4:47:0d:cb: 0b:89:01:4b:de:2d:b1:58:af:ed:4d:ce:51:6b:44: a1:5e:8a:be:22:65:44:50:01:c5:80:73:c6:ed:56: fa:05:78:f5:d1:72:e7:3d:d5:b8:b3:7e:7f:59:a9: 90:9e:4f:82:eb:ba:0b:1d:de:d1:4f:a8:a6:74:04: 48:04:50:e5:47:1f:a8:98:da:79:72:a9:bf:9b:fa: af:e9:84:83:3a:02:11:93:e6:ad:69:ad:1f:62:dd: d9:66:d6:b1:44:57:e1:2f:38:51:c0:18:9b:fb:40: 61:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E0:89:88:42:13:98:8D:3E:46:1C:22:76:0B:05:26:FB:2E:5B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c1d62e7-35b1-339c-acda-121aa33ed394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:c4:93:00:54:42:cc:03:77:c9:1e:1a:a1:ac:08:cb:36:48: 00:8c:11:39:46:50:51:aa:7c:cd:56:82:cb:2f:86:4d:75:0f: 58:40:25:16:5f:bd:d1:ed:4e:55:7e:88:76:fc:f3:12:e7:90: 37:a9:e9:87:55:6c:1b:1d:ee:14:fc:60:2b:f8:3a:79:8d:2f: 19:94:fd:3a:43:a7:6e:9e:15:04:d8:4d:31:90:36:db:96:97: 8e:a3:fa:f3:f4:c7:30:b3:c3:9a:0f:bc:6f:d5:a7:b9:22:69: 25:a3:89:6a:c3:b7:31:34:e3:bd:f2:f7:dd:97:9b:10:56:eb: 9e:1a:e2:fd:e3:30:4d:b0:a1:c1:46:2e:0b:d5:0e:a0:af:7f: 4a:e1:6c:08:92:a4:2a:cb:9d:c9:cd:de:19:23:13:39:6d:0b: 2e:47:ba:06:7d:7f:bc:94:50:35:60:fa:15:5b:3e:8b:9a:e8: fc:a6:b8:6a:f2:e6:a6:c7:f5:7c:94:99:b0:40:b0:6b:8b:b8: 37:f0:48:bb:0f:48:a5:33:12:0e:d2:38:35:0f:d5:93:fd:b7: 74:80:bc:76:5c:6f:8e:98:07:30:fa:3f:f9:13:41:70:31:54: b6:4f:2a:f3:f6:cf:e9:a3:9b:14:51:66:a4:70:77:ec:be:9e: b1:74:8b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp0vInRjn306NCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MTJmMzM3NDQtMTZjMC00NGM5LWExMGUtYjliNzI3ZjE3MTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieSsRICl044fl/fg/aVtB3YAAKh2ZhsTESDt +YV4wkDNjV9/pZbltbPOSebXdF0iUYTeb89xEwCss/vhag8LM9KVlfdzNWeDQL5D ip2oUjbDCoUU4k1koMDxHOCUhezS+rIJ3jOJzAjjnHMZu6olRrXtoVFcmbbBF+yb 6yeTx5YvJudeqETxhyJHr6t8cIe3edRHDcsLiQFL3i2xWK/tTc5Ra0ShXoq+ImVE UAHFgHPG7Vb6BXj10XLnPdW4s35/WamQnk+C67oLHd7RT6imdARIBFDlRx+omNp5 cqm/m/qv6YSDOgIRk+ataa0fYt3ZZtaxRFfhLzhRwBib+0BhNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDgiYhCE5iNPkYcInYLBSb7LlvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGMxZDYyZTctMzViMS0z MzljLWFjZGEtMTIxYWEzM2VkMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN3EkwBUQswDd8keGqGsCMs2SACMETlGUFGqfM1Wgssvhk11D1hAJRZf vdHtTlV+iHb88xLnkDep6YdVbBsd7hT8YCv4OnmNLxmU/TpDp26eFQTYTTGQNtuW l46j+vP0xzCzw5oPvG/Vp7kiaSWjiWrDtzE0473y992XmxBW654a4v3jME2wocFG LgvVDqCvf0rhbAiSpCrLncnN3hkjEzltCy5HugZ9f7yUUDVg+hVbPoua6PymuGry 5qbH9XyUmbBAsGuLuDfwSLsPSKUzEg7SODUP1ZP9t3SAvHZcb46YBzD6P/kTQXAx VLZPKvP2z+mjmxRRZqRwd+y+nrF0izc= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:45 2025 by rpki-client