$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/133c1bf8-e599-360f-8e06-32b15fb06c2e.roa File: 133c1bf8-e599-360f-8e06-32b15fb06c2e.roa (raw, json) Hash identifier: wEeeci6g18ExZM7mA4DJGdTGD6V2YNPfr7y0YwP8F4M= Subject key identifier: F9:97:7A:21:20:BC:84:6A:FE:6B:4D:6C:7F:64:8E:12:97:7B:31:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECE5C2F657E6502C6C3380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/133c1bf8-e599-360f-8e06-32b15fb06c2e.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 174.170.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:e5:c2:f6:57:e6:50:2c:6c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=eec0cb7e-a1e0-4d1e-81c8-7770296e1377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:23:f1:ef:e3:3e:29:9f:07:d0:8d:fe:2e: 8a:c4:90:cb:bf:0d:12:c7:82:89:24:60:ef:2e:1f: f3:09:be:d9:0f:b5:3f:76:5a:9d:91:d8:f5:85:46: 77:1e:70:7a:80:01:4f:53:9d:dc:11:79:ee:0b:7b: 61:23:86:fa:10:9a:98:f5:33:ec:f4:f5:74:9d:e7: 10:86:58:fb:16:0d:76:8a:b9:8a:81:3d:39:da:b4: f6:64:88:95:7c:3a:0c:be:75:49:ee:11:aa:f1:ef: 94:6c:c4:bd:8f:a5:c3:7f:3a:0d:a2:22:a7:4a:aa: 67:d8:a1:4d:90:cc:1e:74:bc:26:85:8a:57:8c:46: 88:d0:78:7b:b3:68:4c:04:69:89:cc:01:ed:e3:e8: da:a2:b7:e2:55:8d:0e:b2:c9:2b:5a:aa:87:cf:a6: df:b7:fb:0c:0c:3f:64:7c:b0:a3:61:44:d1:99:12: 5a:46:83:48:a1:13:ff:dd:42:96:1f:74:7f:bb:4d: 41:84:e2:8b:97:67:88:d3:56:be:81:bc:39:cd:bf: 5d:5e:2d:61:16:ce:09:d6:8e:d5:51:fc:a2:58:9a: 0c:c4:4f:c3:b9:d7:1e:8b:c3:77:f3:1a:70:c7:87: d7:10:90:67:f5:7c:d9:d7:b2:f7:10:dd:3b:90:df: a8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:97:7A:21:20:BC:84:6A:FE:6B:4D:6C:7F:64:8E:12:97:7B:31:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/133c1bf8-e599-360f-8e06-32b15fb06c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cc:e6:dc:30:a4:b4:ff:d0:d9:80:7a:f9:8b:a0:16:ab:d2: b7:48:02:45:66:a4:d0:f9:f8:fa:f0:6f:3c:6a:40:9c:42:57: 40:28:ae:9c:0d:1e:db:31:e1:90:27:ea:f2:f4:06:aa:f7:e6: 26:86:59:78:71:73:b7:65:91:fb:01:c7:06:77:6f:e3:a8:8d: 44:4c:0a:43:71:f1:f0:09:b6:45:60:6d:45:63:48:ca:35:9b: ba:9a:14:43:07:78:9e:84:c2:7c:08:1e:bb:2f:9f:01:35:70: eb:33:ae:f8:4b:ab:35:3d:21:55:eb:3c:72:c7:13:d5:ff:d7: 1d:74:66:b7:4d:e1:59:fd:73:88:19:3d:7b:ae:57:14:1a:48: c4:48:69:71:c0:56:1a:ce:5f:d5:e5:c4:df:29:90:e9:c7:b6: e4:d7:2b:83:41:e2:de:eb:37:ab:bf:f4:4f:ed:20:8b:4c:3c: 73:71:99:b4:f9:cb:b6:88:5e:e1:72:ba:ea:2d:5a:f8:a6:3c: dc:d4:db:38:3e:7c:06:67:f1:b1:a0:3b:43:cb:4e:6f:34:13: f9:4c:bc:cf:35:3c:ac:69:21:70:e8:50:34:ca:de:e9:cd:a4: ed:a0:a6:b8:ed:3e:50:dc:01:ea:3a:af:1b:28:55:72:c0:75: 7c:dd:16:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07OXC9lfmUCxsM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZWVjMGNiN2UtYTFlMC00ZDFlLTgxYzgtNzc3MDI5NmUxMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSYj8e/jPimfB9CN/i6KxJDLvw0Sx4KJJGDv Lh/zCb7ZD7U/dlqdkdj1hUZ3HnB6gAFPU53cEXnuC3thI4b6EJqY9TPs9PV0necQ hlj7Fg12irmKgT052rT2ZIiVfDoMvnVJ7hGq8e+UbMS9j6XDfzoNoiKnSqpn2KFN kMwedLwmhYpXjEaI0Hh7s2hMBGmJzAHt4+jaorfiVY0OsskrWqqHz6bft/sMDD9k fLCjYUTRmRJaRoNIoRP/3UKWH3R/u01BhOKLl2eI01a+gbw5zb9dXi1hFs4J1o7V UfyiWJoMxE/Dudcei8N38xpwx4fXEJBn9XzZ17L3EN07kN+ofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmXeiEgvIRq/mtNbH9kjhKXezFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTMzYzFiZjgtZTU5OS0z NjBmLThlMDYtMzJiMTVmYjA2YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPM5twwpLT/0NmAevmLoBar0rdIAkVmpND5+PrwbzxqQJxCV0AorpwN Htsx4ZAn6vL0Bqr35iaGWXhxc7dlkfsBxwZ3b+OojURMCkNx8fAJtkVgbUVjSMo1 m7qaFEMHeJ6EwnwIHrsvnwE1cOszrvhLqzU9IVXrPHLHE9X/1x10ZrdN4Vn9c4gZ PXuuVxQaSMRIaXHAVhrOX9XlxN8pkOnHtuTXK4NB4t7rN6u/9E/tIItMPHNxmbT5 y7aIXuFyuuotWvimPNzU2zg+fAZn8bGgO0PLTm80E/lMvM81PKxpIXDoUDTK3unN pO2gprjtPlDcAeo6rxsoVXLAdXzdFuM= -----END CERTIFICATE-----Generated at Wed Aug 6 18:36:29 2025 by rpki-client