$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8bd22f6-1c73-3f59-8458-bfabc5e0b807.roa File: d8bd22f6-1c73-3f59-8458-bfabc5e0b807.roa (raw, json) Hash identifier: GHuK9adXVYiej8kVd+w6bC4lQUzuLqvhuj9YP3GOtqs= Subject key identifier: 17:89:33:38:B3:C9:E0:65:E2:2F:0B:BB:1D:83:A1:06:10:62:FA:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7C1A60B826C62C0C720C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8bd22f6-1c73-3f59-8458-bfabc5e0b807.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 73.157.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:c1:a6:0b:82:6c:62:c0:c7:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4a30c49c-0490-4da7-b544-c3e1a4bd1b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:d3:c7:ee:1a:21:d0:c2:e1:a4:e4:47:46: 37:ba:f9:d4:36:55:32:96:55:f0:74:b7:8e:72:ca: 27:dc:a7:2a:13:7a:48:d8:0f:72:30:e4:41:43:44: 7c:9d:bf:b6:75:10:4a:91:64:28:7a:dc:a7:91:cc: bc:9e:69:e1:5d:a4:00:91:2b:64:75:2c:12:e5:f3: af:19:bd:5a:d0:a1:64:a3:76:93:ca:80:4e:3e:80: 58:cf:4d:a1:bf:cd:de:8b:a1:36:e2:8a:42:da:7f: 73:f2:02:be:3f:38:52:20:54:4d:77:2e:18:ef:4b: ad:ee:17:fb:6d:5a:bc:2b:bc:61:a6:9c:32:00:4c: b1:7f:13:42:b9:2c:77:32:98:b6:c0:c4:cc:92:25: b1:9e:ea:8d:d6:8a:c2:23:3a:f8:c8:90:4b:d5:17: 81:83:f8:01:96:33:5f:20:24:01:9e:b3:51:86:33: 22:07:68:c6:25:b7:5a:f5:7a:e3:1f:8b:c3:db:26: 4b:f5:34:2f:db:c3:0a:c4:07:1c:74:5d:72:15:6e: 91:d3:58:fa:e0:f7:d0:ae:ab:1f:de:df:2e:59:2b: 73:42:5e:be:d2:16:53:12:0a:a4:b8:79:39:ec:05: 7d:4a:ba:a2:67:5b:c5:64:b3:97:02:2e:55:be:5e: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:33:38:B3:C9:E0:65:E2:2F:0B:BB:1D:83:A1:06:10:62:FA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8bd22f6-1c73-3f59-8458-bfabc5e0b807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.157.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:2f:bc:d2:8e:c6:58:2f:9d:c0:c6:38:e6:40:dc:0e:c0:61: 45:f5:a9:2a:b7:0b:33:ca:f0:c0:95:b3:3f:31:b5:9c:09:a0: 6b:83:24:90:77:62:af:24:d7:d7:cc:28:51:e9:04:ad:20:0a: a6:ba:fc:3a:09:ee:8f:c4:d5:6f:6d:72:d5:2a:d6:20:89:3d: aa:a8:7e:64:73:00:eb:e3:3c:67:83:37:7f:0d:47:59:a9:d4: 90:1d:3f:ea:cb:f6:73:3f:a8:d6:30:c6:bc:86:6d:f4:2f:e3: ef:81:47:2f:9e:5b:77:03:d1:ad:a3:d2:d2:ad:10:21:1e:8d: ec:73:0f:d1:66:8f:78:5b:44:9d:40:04:5a:d3:03:b3:34:4d: 07:a2:ce:01:ce:7f:29:97:24:30:99:2b:7b:43:3d:ad:ef:16: d3:58:0e:8a:6a:12:21:b9:c9:22:70:f6:66:f1:f1:59:11:ac: af:89:4a:6e:c0:53:9b:1c:00:ef:dc:a3:de:c2:3e:c0:7f:cc: 34:af:ff:c2:6e:de:11:34:8f:49:ea:dd:79:84:17:16:7d:07: ff:72:f7:20:1e:4d:68:ef:46:2d:b4:70:93:ea:bb:7d:df:f5: 21:a4:7c:ca:ed:9f:77:25:d4:70:ca:9a:53:ff:d9:57:3e:c9: 4a:6e:db:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp8GmC4JsYsDHIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGEzMGM0OWMtMDQ5MC00ZGE3LWI1NDQtYzNlMWE0YmQxYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlijTx+4aIdDC4aTkR0Y3uvnUNlUyllXwdLeO cson3KcqE3pI2A9yMORBQ0R8nb+2dRBKkWQoetynkcy8nmnhXaQAkStkdSwS5fOv Gb1a0KFko3aTyoBOPoBYz02hv83ei6E24opC2n9z8gK+PzhSIFRNdy4Y70ut7hf7 bVq8K7xhppwyAEyxfxNCuSx3Mpi2wMTMkiWxnuqN1orCIzr4yJBL1ReBg/gBljNf ICQBnrNRhjMiB2jGJbda9XrjH4vD2yZL9TQv28MKxAccdF1yFW6R01j64PfQrqsf 3t8uWStzQl6+0hZTEgqkuHk57AV9SrqiZ1vFZLOXAi5Vvl6NcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeJMzizyeBl4i8Lux2DoQYQYvpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhiZDIyZjYtMWM3My0z ZjU5LTg0NTgtYmZhYmM1ZTBiODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZ3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkvvNKOxlgvncDGOOZA3A7AYUX1qSq3CzPK8MCVsz8xtZwJoGuDJJB3 Yq8k19fMKFHpBK0gCqa6/DoJ7o/E1W9tctUq1iCJPaqofmRzAOvjPGeDN38NR1mp 1JAdP+rL9nM/qNYwxryGbfQv4++BRy+eW3cD0a2j0tKtECEejexzD9Fmj3hbRJ1A BFrTA7M0TQeizgHOfymXJDCZK3tDPa3vFtNYDopqEiG5ySJw9mbx8VkRrK+JSm7A U5scAO/co97CPsB/zDSv/8Ju3hE0j0nq3XmEFxZ9B/9y9yAeTWjvRi20cJPqu33f 9SGkfMrtn3cl1HDKmlP/2Vc+yUpu20c= -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:31 2025 by rpki-client