$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4ad1cf8-9df9-3a81-8ad6-05523c7db387.roa File: e4ad1cf8-9df9-3a81-8ad6-05523c7db387.roa (raw, json) Hash identifier: /mQ4z/RzHB28bZV9MXle3PTFvWRmBVsa6Dk3r7EX2mI= Subject key identifier: 7D:C3:D8:6C:13:13:25:1D:8F:99:49:3C:3A:89:46:86:26:90:A1:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9A911E0E5BC5B5879A100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4ad1cf8-9df9-3a81-8ad6-05523c7db387.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 73.228.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:a9:11:e0:e5:bc:5b:58:79:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5aff9090-3ea8-4e2e-b653-8cb1479adad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:d0:8d:eb:37:c1:26:ab:fa:d4:80:6f:92: 8f:df:36:1f:b4:ab:a8:db:36:ba:a8:bb:d9:1b:45: e9:b5:e0:60:63:fb:ae:f3:25:b5:ad:74:c8:09:d9: c5:8f:f0:c3:56:68:66:80:b4:d1:9f:2a:5b:13:de: ea:40:89:a4:83:6a:8d:ca:c8:af:e2:f1:dd:90:1c: 82:85:7b:15:07:e0:40:f4:4c:63:d4:eb:b6:92:d5: 40:58:49:5a:61:75:59:e2:1e:51:d6:e2:05:e9:3a: b0:92:13:69:d9:f8:79:95:85:58:da:2a:ea:79:79: 73:ca:2b:78:49:55:ee:9c:79:0e:f7:1f:e0:42:ff: 00:ca:b6:5e:bd:6a:8d:de:61:76:19:7d:69:fe:04: ed:2c:3b:58:b5:28:8d:82:83:d6:31:81:e5:b6:cd: 85:d1:a2:5a:33:fc:34:7d:85:de:de:a9:bc:b0:a1: 54:e0:7b:01:22:ff:aa:1d:13:b2:44:38:f3:74:f2: ca:50:b8:fa:d0:41:36:51:04:c7:66:6f:35:0f:26: a0:11:10:f7:31:6c:de:c3:8d:b5:39:54:f7:e3:1b: e0:15:47:dc:e6:15:04:18:bd:8d:99:d4:29:7f:53: 08:9c:ae:e6:82:89:67:40:a6:1d:ea:7d:f2:f7:68: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C3:D8:6C:13:13:25:1D:8F:99:49:3C:3A:89:46:86:26:90:A1:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4ad1cf8-9df9-3a81-8ad6-05523c7db387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fb:4f:d4:8d:6e:f9:38:2b:19:76:d8:9a:e6:fe:9e:49:77: 9c:19:e2:89:a5:d4:c6:6e:ec:84:b6:9a:ac:2b:27:06:b1:74: 19:47:ed:91:47:44:4a:e3:79:93:6d:6d:34:df:42:b0:b8:15: 88:ed:4c:25:01:40:cb:01:01:74:01:12:67:58:61:59:09:a5: eb:59:02:70:70:4a:9d:38:2e:80:5d:f9:90:42:19:87:db:94: 61:a2:37:56:e9:e5:34:ac:b3:36:c2:5f:4d:d1:8e:51:cc:02: 64:01:17:ba:5b:b5:44:33:f2:5f:da:b1:e0:93:22:1c:59:ec: 2b:d4:28:29:1b:8c:99:bb:c4:7d:d0:97:c1:84:6f:06:be:40: 01:14:5a:81:96:52:cf:05:af:c5:76:f0:1d:2b:9d:79:c2:1a: d4:90:c7:d3:e7:6b:1a:b0:47:03:89:b8:ed:06:2f:34:e8:2a: e5:cd:21:49:5a:a0:e3:c9:7b:4a:94:56:70:d5:2a:7c:1b:14: e8:26:3d:88:ae:73:2f:8b:c9:0b:90:5a:53:7e:63:95:20:d9: 32:53:97:92:70:fb:bd:45:98:8e:83:7c:20:4e:e8:86:d4:16: dd:f9:c8:43:99:7b:40:e7:03:3b:3d:38:2a:fd:91:e3:5d:83: 16:42:bb:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uakR4OW8W1h5oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWFmZjkwOTAtM2VhOC00ZTJlLWI2NTMtOGNiMTQ3OWFkYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuXQjes3wSar+tSAb5KP3zYftKuo2za6qLvZ G0XpteBgY/uu8yW1rXTICdnFj/DDVmhmgLTRnypbE97qQImkg2qNysiv4vHdkByC hXsVB+BA9Exj1Ou2ktVAWElaYXVZ4h5R1uIF6TqwkhNp2fh5lYVY2irqeXlzyit4 SVXunHkO9x/gQv8AyrZevWqN3mF2GX1p/gTtLDtYtSiNgoPWMYHlts2F0aJaM/w0 fYXe3qm8sKFU4HsBIv+qHROyRDjzdPLKULj60EE2UQTHZm81DyagERD3MWzew421 OVT34xvgFUfc5hUEGL2NmdQpf1MInK7mgolnQKYd6n3y92j1cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3D2GwTEyUdj5lJPDqJRoYmkKFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTRhZDFjZjgtOWRmOS0z YTgxLThhZDYtMDU1MjNjN2RiMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj7T9SNbvk4Kxl22Jrm/p5Jd5wZ4oml1MZu7IS2mqwrJwaxdBlH7ZFH RErjeZNtbTTfQrC4FYjtTCUBQMsBAXQBEmdYYVkJpetZAnBwSp04LoBd+ZBCGYfb lGGiN1bp5TSsszbCX03RjlHMAmQBF7pbtUQz8l/aseCTIhxZ7CvUKCkbjJm7xH3Q l8GEbwa+QAEUWoGWUs8Fr8V28B0rnXnCGtSQx9PnaxqwRwOJuO0GLzToKuXNIUla oOPJe0qUVnDVKnwbFOgmPYiucy+LyQuQWlN+Y5Ug2TJTl5Jw+71FmI6DfCBO6IbU Ft35yEOZe0DnAzs9OCr9keNdgxZCu5Q= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:08 2025 by rpki-client