$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc0f68a2-4687-3234-8613-a8e64b1c6600.roa File: cc0f68a2-4687-3234-8613-a8e64b1c6600.roa (raw, json) Hash identifier: tX+NeKC7a3sLE9BeGAJO8QhBod/CxQZvmXpEjyXoRyQ= Subject key identifier: 7C:99:E4:68:9A:BB:FB:1F:18:BE:F1:5F:36:51:1B:0A:1F:4D:6D:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD21BBEF1B1C376EE738E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc0f68a2-4687-3234-8613-a8e64b1c6600.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 73.59.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:21:bb:ef:1b:1c:37:6e:e7:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=9ab7b1df-3a2e-474e-8d83-ab44f0939712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b7:2f:b7:66:57:01:82:2b:47:4e:39:1e:cc: 36:74:42:c8:32:72:59:22:ca:b9:77:15:32:d6:0c: 89:d9:68:ad:b2:b1:e2:f2:d2:5e:72:ae:a6:1b:22: 2a:1b:70:b4:15:cd:a5:98:3f:55:b7:24:30:eb:72: d5:32:94:c3:5b:ae:96:67:31:5a:cf:6e:38:ad:48: 53:86:35:05:60:f4:22:24:2c:61:77:98:c2:ec:45: c7:0d:27:81:0a:04:a7:d2:08:76:cc:92:79:47:11: 36:93:2d:ae:21:6c:bc:4b:d4:ad:a6:c3:36:fb:32: be:c9:50:0a:a7:57:d0:2b:5a:3b:1b:e1:93:73:73: c9:7b:7f:84:74:b3:0e:e1:a9:d7:b8:94:2c:bf:6e: 16:45:81:a8:39:00:9a:e0:02:d7:d5:65:d3:8e:b8: 9c:1b:ea:c4:6b:2e:2a:06:3b:d9:38:08:9a:73:06: ca:a9:3c:67:8b:ab:3b:a7:6e:0e:dd:70:7c:6f:40: 66:52:82:1b:0a:f0:1f:d3:88:b3:af:c5:ba:42:9d: 7c:79:81:8a:18:98:86:8b:8a:f7:7a:ee:08:a6:12: ca:ce:d8:d3:fc:b8:9f:16:99:49:54:f1:5d:a6:d8: 45:ff:3e:16:3c:e0:14:d3:18:bc:c4:1d:66:96:65: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:99:E4:68:9A:BB:FB:1F:18:BE:F1:5F:36:51:1B:0A:1F:4D:6D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc0f68a2-4687-3234-8613-a8e64b1c6600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.59.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e7:66:b1:4c:a5:b3:f9:23:2d:f5:26:5b:9a:14:36:9d:09: 60:11:c1:b2:a6:a0:9c:23:f4:37:32:31:22:f0:0d:03:d6:ba: f6:26:fc:21:e8:b6:2c:fe:19:3e:32:37:2a:93:ab:3b:7d:58: d3:0b:9b:81:9f:48:2c:d8:b4:f9:ce:3e:f5:d4:aa:79:f0:bb: 71:e9:e4:36:39:5b:f2:34:84:cd:36:44:0a:e8:bc:4c:59:23: 06:35:e9:09:cb:9d:af:04:26:b5:5e:91:72:56:f2:2a:38:9e: 93:92:1e:97:b5:2d:97:21:4f:96:bb:76:c6:0d:cc:85:6a:11: 57:12:d4:72:d9:6f:5e:f3:a5:c7:4c:34:f7:78:bc:b2:98:b7: 2f:0a:db:5e:b9:e4:c4:49:25:45:5f:b1:1d:eb:b0:35:52:d4: ea:a1:e6:9d:97:a5:31:b4:06:90:f1:80:c2:76:c5:86:38:8b: 3b:b1:50:64:46:98:db:6f:a7:a6:fa:5e:50:a5:76:62:02:6d: dd:05:33:20:a9:d0:fe:43:61:d9:de:14:ce:fa:7d:4e:a8:b6: 20:04:df:2b:28:6c:81:44:29:21:fa:77:95:9d:80:e3:d5:2e: 34:73:46:5b:45:2a:84:5a:a9:e0:af:f8:9e:61:86:a7:04:f7: 27:1d:91:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3SG77xscN27nOOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OWFiN2IxZGYtM2EyZS00NzRlLThkODMtYWI0NGYwOTM5NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bcvt2ZXAYIrR045Hsw2dELIMnJZIsq5dxUy 1gyJ2WitsrHi8tJecq6mGyIqG3C0Fc2lmD9VtyQw63LVMpTDW66WZzFaz244rUhT hjUFYPQiJCxhd5jC7EXHDSeBCgSn0gh2zJJ5RxE2ky2uIWy8S9StpsM2+zK+yVAK p1fQK1o7G+GTc3PJe3+EdLMO4anXuJQsv24WRYGoOQCa4ALX1WXTjricG+rEay4q BjvZOAiacwbKqTxni6s7p24O3XB8b0BmUoIbCvAf04izr8W6Qp18eYGKGJiGi4r3 eu4IphLKztjT/LifFplJVPFdpthF/z4WPOAU0xi8xB1mlmUmuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyZ5Giau/sfGL7xXzZRGwofTW3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2MwZjY4YTItNDY4Ny0z MjM0LTg2MTMtYThlNjRiMWM2NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSTuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTnZrFMpbP5Iy31JluaFDadCWARwbKmoJwj9DcyMSLwDQPWuvYm/CHo tiz+GT4yNyqTqzt9WNMLm4GfSCzYtPnOPvXUqnnwu3Hp5DY5W/I0hM02RArovExZ IwY16QnLna8EJrVekXJW8io4npOSHpe1LZchT5a7dsYNzIVqEVcS1HLZb17zpcdM NPd4vLKYty8K21655MRJJUVfsR3rsDVS1Oqh5p2XpTG0BpDxgMJ2xYY4izuxUGRG mNtvp6b6XlCldmICbd0FMyCp0P5DYdneFM76fU6otiAE3ysobIFEKSH6d5WdgOPV LjRzRltFKoRaqeCv+J5hhqcE9ycdkcc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:27 2025 by rpki-client