$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b8ab34-f62e-36f7-a7eb-53e074996435.roa File: c2b8ab34-f62e-36f7-a7eb-53e074996435.roa (raw, json) Hash identifier: 3n4S4QWR6OFsOBIVIpMNRwa1WsAATeKH2k+N9e7j7k4= Subject key identifier: 99:D8:F0:12:2F:57:92:DA:C7:88:D8:E2:CD:F0:F9:18:3E:71:92:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A72FFC770AABA6C7B67400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b8ab34-f62e-36f7-a7eb-53e074996435.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 73.111.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:2f:fc:77:0a:ab:a6:c7:b6:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=b51cf064-16b6-45d6-bb86-5e56ba3dcac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:26:67:4d:a0:2c:6b:c3:09:2a:64:9e:92:ca: 26:93:6f:30:91:ec:38:29:a0:cc:ef:f5:6d:c7:29: 8c:42:45:8f:09:bf:b6:9c:8f:58:31:4a:85:e3:e3: 80:e8:9d:f4:60:c2:a4:c6:9a:6f:a0:22:70:5c:50: a9:be:c4:d4:5a:de:9b:fd:df:4f:58:26:6e:4b:60: ae:69:d1:70:a4:13:56:66:cd:f1:a0:58:cf:d3:95: 25:63:0d:61:6d:e2:e8:ec:40:4a:e2:43:a2:96:5b: 4a:4b:34:a0:1c:d6:0b:fa:49:c0:7e:a0:cc:43:ef: 76:7b:55:06:ca:0b:d7:a4:29:61:27:72:f4:9c:4c: 25:d7:68:4f:b2:be:d2:1e:bf:4c:46:a3:0a:58:c4: 05:a0:fb:9d:62:ea:9d:a6:69:bc:99:bd:b9:3f:be: 5b:d2:90:b8:7d:a9:23:27:3b:98:9e:8c:ff:ad:1b: cd:d0:bc:8d:c9:30:31:88:37:d5:18:da:ef:26:c7: d3:24:f0:71:1e:16:7e:e9:f2:39:b4:aa:2a:c2:48: 61:e6:61:ad:5f:bb:b2:74:21:0f:73:8a:48:6b:19: 89:d5:ca:b8:63:08:19:d9:53:92:20:77:de:a6:cf: a7:46:ae:fb:42:ac:09:6d:ae:88:57:28:d5:ff:a0: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D8:F0:12:2F:57:92:DA:C7:88:D8:E2:CD:F0:F9:18:3E:71:92:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2b8ab34-f62e-36f7-a7eb-53e074996435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.111.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1e:c5:c5:89:14:60:00:af:a6:97:f5:e6:9d:bf:a7:1c:65: e7:88:44:c5:cd:61:0c:89:f9:b2:e7:1d:45:0f:ec:47:a7:ac: a1:92:2e:3e:7e:7f:fc:2a:02:f4:37:ce:5c:e7:29:d1:82:a8: c3:a7:d4:35:bd:26:70:af:cb:85:94:eb:7a:5d:40:c1:b1:d5: 0c:e6:9e:26:a4:a5:a7:c9:1d:1c:6f:ce:b1:a6:de:b1:fb:72: 58:a6:e2:9f:0e:49:b8:51:a3:b0:86:16:0d:b0:64:bf:2d:33: 18:6b:7e:f6:00:d7:0e:56:c6:f6:03:b1:04:b5:07:b9:95:55: 13:c5:26:e5:1f:da:20:fc:9e:68:6f:06:4c:34:d6:7c:a3:01: 0e:94:59:14:82:91:04:09:6e:d1:b5:a6:5d:6a:2b:a5:17:7f: 53:ff:25:c0:cf:b4:34:7b:59:af:32:f7:96:b0:a5:e2:25:49: 90:50:0b:64:f9:9d:3b:50:98:c5:bc:23:8d:7a:4e:bb:23:5a: 68:4e:1e:9a:e3:64:b8:c2:5b:b7:8d:c5:e0:05:5e:e4:18:78: 69:d7:83:13:a4:ef:82:91:4a:91:65:2a:58:71:8a:5f:53:10: 82:0b:5c:9c:12:cb:8d:03:6a:cb:cf:53:3e:f4:0a:4d:43:79: 70:d3:0d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpy/8dwqrpse2dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YjUxY2YwNjQtMTZiNi00NWQ2LWJiODYtNWU1NmJhM2RjYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCZnTaAsa8MJKmSeksomk28wkew4KaDM7/Vt xymMQkWPCb+2nI9YMUqF4+OA6J30YMKkxppvoCJwXFCpvsTUWt6b/d9PWCZuS2Cu adFwpBNWZs3xoFjP05UlYw1hbeLo7EBK4kOilltKSzSgHNYL+knAfqDMQ+92e1UG ygvXpClhJ3L0nEwl12hPsr7SHr9MRqMKWMQFoPudYuqdpmm8mb25P75b0pC4fakj JzuYnoz/rRvN0LyNyTAxiDfVGNrvJsfTJPBxHhZ+6fI5tKoqwkhh5mGtX7uydCEP c4pIaxmJ1cq4YwgZ2VOSIHfeps+nRq77QqwJba6IVyjV/6DRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnY8BIvV5Lax4jY4s3w+Rg+cZJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzJiOGFiMzQtZjYyZS0z NmY3LWE3ZWItNTNlMDc0OTk2NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSW/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwexcWJFGAAr6aX9eadv6ccZeeIRMXNYQyJ+bLnHUUP7EenrKGSLj5+ f/wqAvQ3zlznKdGCqMOn1DW9JnCvy4WU63pdQMGx1QzmniakpafJHRxvzrGm3rH7 clim4p8OSbhRo7CGFg2wZL8tMxhrfvYA1w5WxvYDsQS1B7mVVRPFJuUf2iD8nmhv Bkw01nyjAQ6UWRSCkQQJbtG1pl1qK6UXf1P/JcDPtDR7Wa8y95awpeIlSZBQC2T5 nTtQmMW8I416TrsjWmhOHprjZLjCW7eNxeAFXuQYeGnXgxOk74KRSpFlKlhxil9T EIILXJwSy40DasvPUz70Ck1DeXDTDe0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:55 2025 by rpki-client