$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12165a61-58a9-37df-b6c9-c29779522c2b.roa File: 12165a61-58a9-37df-b6c9-c29779522c2b.roa (raw, json) Hash identifier: xCKi9RjNx9FNjSSxhXFMzHsWyL3hQpfBd0sAI5GGVjM= Subject key identifier: 37:99:AA:62:A8:0E:9B:26:89:E0:AB:ED:B1:87:BF:13:DB:A6:E6:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B656D4E7FBBA95F4A2270 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12165a61-58a9-37df-b6c9-c29779522c2b.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 174.163.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:65:6d:4e:7f:bb:a9:5f:4a:22:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=cdd36576-432a-4c47-a432-9d79387ee5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7e:bd:eb:03:af:98:fa:ed:5e:6a:de:c2:43: 08:dd:a6:b8:d7:7e:2e:f4:50:84:d3:39:9e:35:ac: 4c:a5:60:b9:a7:17:8c:1b:05:58:3a:6a:40:d3:af: 0b:bc:58:69:a3:fd:0d:37:ef:0d:c9:94:d5:48:7c: 18:d1:54:61:1c:4c:a1:77:86:2d:7b:b9:f3:42:c8: 74:f2:4f:ba:7b:ef:13:90:e1:8d:6e:19:9f:84:02: a4:25:c5:40:f4:6f:fd:c8:8f:60:0d:c3:13:09:3b: 9b:35:2d:2c:0b:b6:45:5c:85:95:65:2e:66:9c:fe: ed:df:7f:f7:e9:f2:0e:ae:95:37:8c:70:52:13:c8: 3d:c3:0c:4e:c8:42:76:5a:39:44:4f:a3:8b:3b:6c: 02:9c:a3:77:e1:6b:a1:1f:55:e6:ae:03:df:23:4a: 7e:bb:92:32:ae:1e:06:24:72:29:5f:bc:ce:fd:bf: 03:2c:4d:e4:28:bb:b7:ee:fa:1c:49:72:db:77:9e: 07:0a:0f:00:fb:c9:3a:3f:f7:25:b4:95:4a:68:14: e9:25:b0:7d:bf:e2:e9:69:f8:6c:80:d6:aa:66:4c: 08:4d:d0:09:ae:64:04:c2:da:17:df:6a:0b:14:e2: ba:d6:b5:a5:6b:1c:fb:e7:c7:86:ae:43:dc:0e:6f: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:AA:62:A8:0E:9B:26:89:E0:AB:ED:B1:87:BF:13:DB:A6:E6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12165a61-58a9-37df-b6c9-c29779522c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.163.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:4f:b0:bb:19:af:8d:be:b8:19:2e:72:68:31:af:a0:19:fc: 54:2b:15:90:4c:30:6e:ff:0b:03:2a:b2:b5:1b:97:5b:61:70: e1:02:6f:21:d0:d7:c1:e9:8a:d6:db:76:1a:1e:1a:e6:ed:a0: 1d:ae:aa:aa:58:5c:69:e9:cc:15:4b:78:ae:83:b8:39:42:04: 15:21:c8:6f:d6:ab:a5:cc:37:43:3f:5b:92:4b:97:a1:88:68: 59:9f:53:63:9b:6b:2b:b7:83:b7:54:44:6d:d2:2d:ee:b1:a3: 2d:9d:11:1b:fd:c5:f7:66:1e:9e:fb:01:f7:c1:1a:2a:3d:68: 88:20:c8:c6:83:ba:cc:50:32:88:05:56:eb:a3:6d:ad:83:d6: 44:39:f5:62:96:b8:ec:4f:45:b4:42:b6:e0:8d:75:19:c4:4a: c0:df:58:08:29:b0:23:17:12:62:7d:ce:9e:f2:2c:ae:80:0f: 5a:b8:3b:69:fa:38:67:4b:69:b2:8d:20:61:6c:04:02:5c:2d: 71:c1:59:9d:09:1e:2b:4e:a2:9a:cf:63:71:f6:a7:63:8f:fb: 78:aa:05:a4:92:ef:2f:9e:86:0c:9b:22:8c:9d:a0:db:f9:1c: fe:4f:cf:a5:d9:be:78:0c:0d:a7:b3:3b:f4:4d:fa:c9:d1:62: 89:dd:aa:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC2VtTn+7qV9KInAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk Y2RkMzY1NzYtNDMyYS00YzQ3LWE0MzItOWQ3OTM4N2VlNWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH696wOvmPrtXmrewkMI3aa4134u9FCE0zme NaxMpWC5pxeMGwVYOmpA068LvFhpo/0NN+8NyZTVSHwY0VRhHEyhd4Yte7nzQsh0 8k+6e+8TkOGNbhmfhAKkJcVA9G/9yI9gDcMTCTubNS0sC7ZFXIWVZS5mnP7t33/3 6fIOrpU3jHBSE8g9wwxOyEJ2WjlET6OLO2wCnKN34WuhH1XmrgPfI0p+u5Iyrh4G JHIpX7zO/b8DLE3kKLu37vocSXLbd54HCg8A+8k6P/cltJVKaBTpJbB9v+Lpafhs gNaqZkwITdAJrmQEwtoX32oLFOK61rWlaxz758eGrkPcDm+rJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeZqmKoDpsmieCr7bGHvxPbpuY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTIxNjVhNjEtNThhOS0z N2RmLWI2YzktYzI5Nzc5NTIyYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFPsLsZr42+uBkucmgxr6AZ/FQrFZBMMG7/CwMqsrUbl1thcOECbyHQ 18HpitbbdhoeGubtoB2uqqpYXGnpzBVLeK6DuDlCBBUhyG/Wq6XMN0M/W5JLl6GI aFmfU2Obayu3g7dURG3SLe6xoy2dERv9xfdmHp77AffBGio9aIggyMaDusxQMogF Vuujba2D1kQ59WKWuOxPRbRCtuCNdRnESsDfWAgpsCMXEmJ9zp7yLK6AD1q4O2n6 OGdLabKNIGFsBAJcLXHBWZ0JHitOoprPY3H2p2OP+3iqBaSS7y+ehgybIoydoNv5 HP5Pz6XZvngMDaezO/RN+snRYondqtM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:06 2025 by rpki-client