$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d7edfa-578c-33aa-8c9a-b883ba570ce8.roa File: c3d7edfa-578c-33aa-8c9a-b883ba570ce8.roa (raw, json) Hash identifier: /PtzfE5SqQQbU0z5lWpUQpyZgXbXQm53atw9aKdZ+vU= Subject key identifier: E1:03:80:7F:AC:14:4E:EF:84:BF:FF:58:B2:34:64:73:47:51:5C:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B4E772043D545D9CDCBF65380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d7edfa-578c-33aa-8c9a-b883ba570ce8.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 33661 IP address blocks: 73.28.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:20:43:d5:45:d9:cd:cb:f6:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=aa2db2f8-a2ce-4539-bbde-f2e2241ac9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e0:24:51:fb:a5:14:3f:c9:1c:58:fb:f6:d6: ed:37:f2:a0:2e:bd:44:7f:78:a0:6e:65:4f:2b:21: c9:3b:89:a2:2b:ef:44:39:d6:e1:15:9e:02:ef:eb: 6c:53:14:7b:ee:e8:ed:01:00:67:66:ff:40:5e:5a: 5e:15:e1:8a:ca:1f:cd:24:3e:f0:d7:a6:00:6d:d9: e4:60:0a:2e:41:67:85:31:95:8b:50:cb:89:b0:7e: 3f:7e:f7:3d:52:b2:5b:ff:b6:fb:43:0a:05:da:76: 60:a3:38:46:20:02:19:7a:08:0c:eb:96:bc:b0:1e: 33:a7:5b:6e:82:ca:39:a4:e7:31:6a:f1:31:43:ba: d3:92:5c:77:2e:81:fe:53:9d:3e:49:3c:2c:70:5a: 20:6f:f0:c4:40:6d:57:12:ba:d0:20:5f:61:7c:ad: da:f9:52:dd:a4:f4:4a:c4:60:62:a3:a9:96:bb:68: 17:19:61:9a:ee:d7:af:67:7c:c8:9c:27:15:ac:8a: c2:47:2b:26:9b:ff:4b:51:89:f4:c5:e0:94:56:56: 41:a8:a3:46:61:c8:09:43:50:e4:09:43:e1:b8:d5: 4d:82:5f:98:ee:dc:7d:d3:61:ab:7f:30:83:21:5f: 36:71:8c:1a:40:2b:32:7b:4c:c9:a8:50:52:f3:0e: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:03:80:7F:AC:14:4E:EF:84:BF:FF:58:B2:34:64:73:47:51:5C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3d7edfa-578c-33aa-8c9a-b883ba570ce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.28.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:bc:09:8a:23:03:d8:f0:e8:8c:2d:f7:99:d9:b5:a1:be:48: b3:b2:81:5f:f7:e3:d9:bb:0a:b3:f6:a9:2f:f1:dc:91:0b:d3: b7:5f:0a:d1:10:1a:78:d8:0f:d1:0e:e0:94:7d:d1:b6:91:44: 92:2e:b9:a8:3a:34:c7:f8:c2:a4:55:d2:cb:48:96:0a:64:19: ca:ca:f0:71:06:bb:7d:9e:77:7a:64:25:83:4c:56:39:52:a1: 62:3d:36:ce:ec:b7:2c:89:f0:b7:5d:62:b2:9f:52:40:b1:7e: 08:01:04:cf:83:e6:4f:12:db:8b:6b:89:5e:07:11:de:0a:5a: e9:09:51:ca:04:4c:d2:1e:8e:78:be:a9:99:9a:6d:1f:c6:47: 85:92:61:e9:1c:19:23:e8:1a:75:6f:cd:8a:a5:b3:bb:7f:2b: e2:d1:98:48:b5:a3:3e:3c:c1:ba:c8:6d:99:f5:a5:7f:f1:77: 0a:73:46:30:38:b1:ca:c5:65:2e:29:b9:9b:6f:b2:ac:69:9b: ca:52:0d:f2:33:86:48:31:d2:c7:eb:3d:11:69:54:9f:85:f4: fd:9c:f5:c1:66:41:f5:40:22:3a:05:7e:66:af:93:63:c9:86: 5a:e2:d0:eb:6d:b1:90:52:2a:4a:25:f1:6d:ee:a2:90:a0:78: 6a:27:ac:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyBD1UXZzcv2U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YWEyZGIyZjgtYTJjZS00NTM5LWJiZGUtZjJlMjI0MWFjOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+AkUfulFD/JHFj79tbtN/KgLr1Ef3igbmVP KyHJO4miK+9EOdbhFZ4C7+tsUxR77ujtAQBnZv9AXlpeFeGKyh/NJD7w16YAbdnk YAouQWeFMZWLUMuJsH4/fvc9UrJb/7b7QwoF2nZgozhGIAIZeggM65a8sB4zp1tu gso5pOcxavExQ7rTklx3LoH+U50+STwscFogb/DEQG1XErrQIF9hfK3a+VLdpPRK xGBio6mWu2gXGWGa7tevZ3zInCcVrIrCRysmm/9LUYn0xeCUVlZBqKNGYcgJQ1Dk CUPhuNVNgl+Y7tx902GrfzCDIV82cYwaQCsye0zJqFBS8w40hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEDgH+sFE7vhL//WLI0ZHNHUVwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzNkN2VkZmEtNTc4Yy0z M2FhLThjOWEtYjg4M2JhNTcwY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSRyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO8CYojA9jw6Iwt95nZtaG+SLOygV/349m7CrP2qS/x3JEL07dfCtEQ GnjYD9EO4JR90baRRJIuuag6NMf4wqRV0stIlgpkGcrK8HEGu32ed3pkJYNMVjlS oWI9Ns7styyJ8LddYrKfUkCxfggBBM+D5k8S24triV4HEd4KWukJUcoETNIejni+ qZmabR/GR4WSYekcGSPoGnVvzYqls7t/K+LRmEi1oz48wbrIbZn1pX/xdwpzRjA4 scrFZS4puZtvsqxpm8pSDfIzhkgx0sfrPRFpVJ+F9P2c9cFmQfVAIjoFfmavk2PJ hlri0OttsZBSKkol8W3uopCgeGonrIQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:07 2025 by rpki-client