$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce17209-2a5b-3124-9c29-81413cf22a8d.roa File: dce17209-2a5b-3124-9c29-81413cf22a8d.roa (raw, json) Hash identifier: Q5hvS7RLH1sUCBlX9xRLo54xdeALXsaj4VI5OqTrRVA= Subject key identifier: 95:10:EE:CA:B0:D8:8E:80:07:5C:89:5D:61:35:51:83:7D:29:C9:7A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD5D6377175F5D040225E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce17209-2a5b-3124-9c29-81413cf22a8d.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 73.203.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:5d:63:77:17:5f:5d:04:02:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=9204d13f-4fde-46d2-9616-c7f97b9dab7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:12:78:59:db:dc:7c:8c:55:72:22:a8:b8: 19:6a:03:ca:f4:dc:17:70:b5:69:b4:06:64:f0:49: e6:75:b4:e2:b9:45:cb:38:4d:1e:97:79:8e:15:24: 9d:79:d0:38:2c:04:ab:9f:52:0b:fb:92:91:09:84: 12:8a:ce:6b:50:d4:2d:66:34:15:e2:87:3b:58:af: 0f:44:d8:bc:e3:cb:c7:49:04:9e:45:e4:c6:e8:c3: f0:90:7c:10:e5:22:15:4c:ec:31:0d:63:67:b7:5a: bc:7c:2c:40:96:50:90:fc:a1:4e:93:e2:64:5d:99: 59:c0:11:93:af:03:75:ef:44:c2:a1:b2:7e:c5:67: 75:1f:3e:ab:db:e5:4c:6c:d4:0a:b4:46:c5:c2:85: c0:49:3d:e8:c8:7f:7e:03:29:64:71:e0:c6:40:84: 9d:dd:22:98:54:e1:27:f2:f8:e4:74:19:ec:6d:16: 13:eb:4b:ae:cc:e9:41:e5:76:4a:57:bd:53:0d:12: ba:05:68:15:59:d5:3f:8d:fc:9b:fe:8c:93:fd:50: 82:38:cc:18:53:71:b0:f6:39:cd:0e:b6:a1:9a:ff: 1c:df:99:7a:71:89:ae:a7:1b:dd:87:22:f7:f2:db: 7a:dd:d7:bf:ce:fa:04:a9:f8:3c:6b:3c:5d:88:5b: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:10:EE:CA:B0:D8:8E:80:07:5C:89:5D:61:35:51:83:7D:29:C9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce17209-2a5b-3124-9c29-81413cf22a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.203.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:43:2c:85:76:b4:98:b5:ae:95:fc:fa:80:1d:f3:21:cb:59: 94:7c:50:a1:1f:50:dd:ca:2c:c2:85:51:96:f5:da:2d:f5:ca: a1:25:c7:55:16:a7:1d:19:eb:f5:65:b2:f3:34:19:c8:9d:65: 1d:ce:54:ac:be:ae:60:9b:80:d9:2d:b6:fb:a3:1a:a6:3f:50: 51:66:b9:2d:5b:d4:c0:b4:9f:37:02:0e:eb:07:c9:96:04:b7: 58:d2:86:f7:52:8c:e5:f2:a4:4d:13:ca:ab:f4:8e:8c:21:b3: 62:e3:00:62:fa:41:d9:3d:b0:60:b6:99:3a:64:17:46:44:0f: df:7c:07:52:71:67:b3:b9:aa:53:31:c2:03:f6:ae:1f:ed:55: 68:0d:01:79:b5:21:5c:f8:0f:62:7a:cc:a6:26:27:e6:f3:d6: c4:4b:39:fe:40:f7:cf:60:05:ec:94:c6:d0:65:31:b5:dc:63: f9:06:f2:70:5e:6c:54:f8:98:74:da:1d:c9:94:42:6e:d7:f7: c1:46:d6:1d:d4:a8:59:22:41:15:3c:7a:85:66:ba:16:6a:ab: a8:10:36:fd:9f:ee:c5:b9:a5:74:51:6f:7c:5d:e6:7e:d2:ea: 31:2d:1e:da:4b:82:fa:ab:d6:6a:1d:7f:38:9f:aa:66:5d:d5: 97:67:be:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3V1jdxdfXQQCJeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OTIwNGQxM2YtNGZkZS00NmQyLTk2MTYtYzdmOTdiOWRhYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopgSeFnb3HyMVXIiqLgZagPK9NwXcLVptAZk 8EnmdbTiuUXLOE0el3mOFSSdedA4LASrn1IL+5KRCYQSis5rUNQtZjQV4oc7WK8P RNi848vHSQSeReTG6MPwkHwQ5SIVTOwxDWNnt1q8fCxAllCQ/KFOk+JkXZlZwBGT rwN170TCobJ+xWd1Hz6r2+VMbNQKtEbFwoXAST3oyH9+AylkceDGQISd3SKYVOEn 8vjkdBnsbRYT60uuzOlB5XZKV71TDRK6BWgVWdU/jfyb/oyT/VCCOMwYU3Gw9jnN Drahmv8c35l6cYmupxvdhyL38tt63de/zvoEqfg8azxdiFshSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUQ7sqw2I6AB1yJXWE1UYN9Kcl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGNlMTcyMDktMmE1Yi0z MTI0LTljMjktODE0MTNjZjIyYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtDLIV2tJi1rpX8+oAd8yHLWZR8UKEfUN3KLMKFUZb12i31yqElx1UW px0Z6/VlsvM0GcidZR3OVKy+rmCbgNkttvujGqY/UFFmuS1b1MC0nzcCDusHyZYE t1jShvdSjOXypE0Tyqv0jowhs2LjAGL6Qdk9sGC2mTpkF0ZED998B1JxZ7O5qlMx wgP2rh/tVWgNAXm1IVz4D2J6zKYmJ+bz1sRLOf5A989gBeyUxtBlMbXcY/kG8nBe bFT4mHTaHcmUQm7X98FG1h3UqFkiQRU8eoVmuhZqq6gQNv2f7sW5pXRRb3xd5n7S 6jEtHtpLgvqr1modfzifqmZd1ZdnvuU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:09 2025 by rpki-client