$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f12a53-45dd-340c-a4f4-1a7cb258afc8.roa File: d1f12a53-45dd-340c-a4f4-1a7cb258afc8.roa (raw, json) Hash identifier: Q46SH51LT1xgPbcj0IhcWNiZNqD2N4rKepuSrRBaF3k= Subject key identifier: 8D:0E:01:6B:74:84:E5:BE:A7:0E:2B:07:94:F2:A0:51:09:74:54:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B4E773E3EDC817A1314628190 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f12a53-45dd-340c-a4f4-1a7cb258afc8.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 33661 IP address blocks: 73.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:3e:3e:dc:81:7a:13:14:62:81:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=5995d73e-ae51-4cc8-ab06-8e72eb9c0dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:cc:c2:bd:ac:7d:00:ad:52:27:68:1b:3c: 8d:be:45:c0:c7:38:01:f3:21:d8:ba:fb:11:7d:ce: f2:31:fd:0b:8e:7b:92:a7:4c:f9:63:70:dc:a7:df: 01:28:05:c3:96:1e:ec:30:bf:93:1f:b2:93:82:42: 5e:b6:50:ba:55:e2:77:0a:7b:bf:8b:e7:27:03:e6: 35:63:74:b5:b2:1a:fd:07:27:eb:b5:2d:5f:cd:ce: 55:62:02:cf:35:94:14:91:a5:5c:b9:4a:32:51:c3: d5:95:c2:cc:93:51:1b:94:cd:6e:5b:3a:05:f1:c5: ef:f6:81:b8:08:e6:74:36:76:2f:2c:49:bc:73:8f: 8f:29:2e:de:54:5a:6a:66:59:41:1b:4c:c6:25:e9: 30:c7:e2:16:4d:1e:2f:7f:73:05:ba:7d:f7:fa:49: 42:1e:9d:27:ba:cb:5b:69:65:f8:6d:9a:f9:18:a8: 7a:df:d7:23:80:9e:fa:97:89:11:28:26:99:85:15: 12:c9:ea:48:0f:64:c9:d0:1c:90:27:ea:0f:76:c0: 66:9a:f0:7b:b9:45:38:6f:34:a5:75:4c:32:a5:0e: a0:b9:07:ac:d3:39:06:79:52:43:7d:10:68:34:c6: ef:eb:4b:06:6a:0a:b4:f7:e9:fa:6f:00:39:10:e7: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:01:6B:74:84:E5:BE:A7:0E:2B:07:94:F2:A0:51:09:74:54:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f12a53-45dd-340c-a4f4-1a7cb258afc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e2:d4:de:65:2d:e2:27:07:8f:c9:71:79:ca:59:e5:a4:f3: 35:37:ab:20:6f:c3:98:3a:b9:f9:b3:0f:ff:5a:38:e3:ca:98: a4:10:4c:b3:32:3f:48:f0:20:34:4c:a1:54:16:02:ad:5e:5f: de:4b:a4:3f:da:60:cc:51:6d:ff:4a:3d:2a:73:d9:d3:ed:43: 71:80:6b:78:c5:e0:c4:30:28:39:41:02:10:bd:ca:6d:5e:73: 1f:f7:67:5c:57:7c:32:e3:0e:14:81:cd:ab:c6:20:60:fe:cc: 9f:67:e3:2c:50:d8:dc:c2:09:36:bb:7e:43:f1:29:1b:8b:c9: 8e:65:59:6f:ea:7f:b1:da:5e:7c:b1:48:53:26:64:75:09:7a: fb:8f:a2:00:d0:8b:d4:11:c0:e1:9c:e6:57:96:56:30:5f:e1: 1f:8a:04:ef:94:b2:bb:6f:2f:a1:0b:18:10:99:45:8b:b2:13: 36:36:14:38:84:b9:dc:90:fd:e1:eb:a7:f9:a4:ed:f2:b8:80: b9:86:a2:76:ca:02:46:3b:77:d9:fe:7e:37:2a:ba:4c:97:2b: 2f:cc:d8:41:cb:d5:bd:27:05:cd:0e:2f:22:d2:f7:41:e1:2b: ab:fb:3f:55:ee:7e:f4:43:21:0b:6d:a5:4a:a4:00:66:70:08: 57:94:16:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdz4+3IF6ExRigZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NTk5NWQ3M2UtYWU1MS00Y2M4LWFiMDYtOGU3MmViOWMwZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhLMwr2sfQCtUidoGzyNvkXAxzgB8yHYuvsR fc7yMf0LjnuSp0z5Y3Dcp98BKAXDlh7sML+TH7KTgkJetlC6VeJ3Cnu/i+cnA+Y1 Y3S1shr9ByfrtS1fzc5VYgLPNZQUkaVcuUoyUcPVlcLMk1EblM1uWzoF8cXv9oG4 COZ0NnYvLEm8c4+PKS7eVFpqZllBG0zGJekwx+IWTR4vf3MFun33+klCHp0nustb aWX4bZr5GKh639cjgJ76l4kRKCaZhRUSyepID2TJ0ByQJ+oPdsBmmvB7uUU4bzSl dUwypQ6guQes0zkGeVJDfRBoNMbv60sGagq09+n6bwA5EOeU2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0OAWt0hOW+pw4rB5TyoFEJdFRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFmMTJhNTMtNDVkZC0z NDBjLWE0ZjQtMWE3Y2IyNThhZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSRWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKri1N5lLeInB4/JcXnKWeWk8zU3qyBvw5g6ufmzD/9aOOPKmKQQTLMy P0jwIDRMoVQWAq1eX95LpD/aYMxRbf9KPSpz2dPtQ3GAa3jF4MQwKDlBAhC9ym1e cx/3Z1xXfDLjDhSBzavGIGD+zJ9n4yxQ2NzCCTa7fkPxKRuLyY5lWW/qf7HaXnyx SFMmZHUJevuPogDQi9QRwOGc5leWVjBf4R+KBO+UsrtvL6ELGBCZRYuyEzY2FDiE udyQ/eHrp/mk7fK4gLmGonbKAkY7d9n+fjcqukyXKy/M2EHL1b0nBc0OLyLS90Hh K6v7P1XufvRDIQttpUqkAGZwCFeUFgs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:53 2025 by rpki-client