$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa File: 36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa (raw, json) Hash identifier: ZK63rsWWkKN7/RZjCWHi2ZvLp0Trs9bAwCZFyH0aweE= Subject key identifier: 30:82:D4:62:53:77:67:20:89:E8:D0:A7:0E:6C:2C:92:48:5B:43:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EBCAA5AA7292F511EACE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 174.168.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:ca:a5:aa:72:92:f5:11:ea:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=858fb76c-3d05-441f-a672-f2284249e574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:ab:95:a0:96:45:fb:f3:61:17:f2:cf:bf: 91:46:99:06:ee:34:c9:94:91:85:72:6e:81:93:6f: 14:87:23:7a:6b:50:58:46:32:c7:bf:b7:2f:c6:d8: 44:ed:0b:c4:f7:19:fc:cc:69:36:f0:7d:92:b6:44: fb:4e:a0:ee:ae:59:73:75:f6:e8:12:f2:2d:9e:17: c8:2a:4e:4c:66:8c:70:bd:25:9d:a7:c0:b7:ce:08: ea:56:71:fd:35:3d:9b:00:85:b2:52:76:47:d5:25: e8:0c:ba:bc:63:bf:2d:3b:bb:f3:95:54:0b:2c:fc: 78:12:7b:7e:47:96:e4:ae:d2:8e:fc:d1:d2:0d:c8: da:66:33:ae:c5:65:ae:83:7d:42:56:d9:e0:6e:c0: 47:f6:e5:66:53:ca:f8:5b:dc:a0:ea:94:dc:81:16: 26:72:32:4f:17:cc:b5:e3:29:61:6b:76:4a:e7:4b: ee:db:9e:fa:73:12:de:74:77:a7:20:48:30:f4:fd: e3:4f:4d:8d:31:29:ec:0b:5e:f6:e0:3f:d2:10:cc: 9a:b1:e6:29:4e:7c:cc:1c:27:03:8d:6c:12:a1:00: 1f:84:e4:3a:d4:f5:fa:10:64:22:ca:23:d5:91:39: 93:27:5f:55:f9:b1:7e:87:aa:a1:35:d5:6f:24:cc: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:82:D4:62:53:77:67:20:89:E8:D0:A7:0E:6C:2C:92:48:5B:43:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:97:a5:59:54:91:0e:da:5a:c5:b3:d4:17:d4:77:07:9b:ff: 84:e1:13:2f:51:62:63:74:ec:cd:25:ed:dc:c4:b7:7e:54:1a: 63:0a:b3:37:5a:77:be:6e:ba:06:09:6a:5b:83:0e:63:c3:8b: e3:b0:6f:be:36:bc:8f:2c:86:30:a1:0d:de:35:a6:45:95:09: aa:76:ab:86:1d:d9:63:1b:03:d1:0c:0e:7c:17:f3:67:ff:f9: 1c:c7:df:03:67:a0:22:ae:84:9f:94:7d:94:6e:62:0a:bd:47: 97:2f:0a:b9:08:d2:0d:db:dd:b6:7c:3c:62:bc:9c:17:d7:96: 4f:42:e0:1d:48:d2:75:74:82:8d:c3:af:10:98:b2:0c:a2:20: 2a:35:14:e2:62:ad:57:0e:f0:80:5a:67:83:96:35:ec:0d:51: 00:d9:5a:40:4d:c0:12:81:9a:81:d2:4a:d0:35:9d:77:d6:31: 13:09:ee:af:0d:9b:80:4d:52:64:fe:0d:06:72:1e:7e:79:cf: 80:ef:3d:3e:2b:c8:7b:45:28:2c:75:0b:40:d7:3a:c8:b1:79: 11:46:ff:81:c6:c8:89:49:73:c3:df:93:b9:9f:0f:38:1b:b1: b2:e8:2f:80:6b:ce:70:a8:4f:c8:0a:27:0b:51:04:26:b6:6d: 62:76:61:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq068qlqnKS9RHqzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ODU4ZmI3NmMtM2QwNS00NDFmLWE2NzItZjIyODQyNDllNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1KrlaCWRfvzYRfyz7+RRpkG7jTJlJGFcm6B k28UhyN6a1BYRjLHv7cvxthE7QvE9xn8zGk28H2StkT7TqDurllzdfboEvItnhfI Kk5MZoxwvSWdp8C3zgjqVnH9NT2bAIWyUnZH1SXoDLq8Y78tO7vzlVQLLPx4Ent+ R5bkrtKO/NHSDcjaZjOuxWWug31CVtngbsBH9uVmU8r4W9yg6pTcgRYmcjJPF8y1 4ylha3ZK50vu2576cxLedHenIEgw9P3jT02NMSnsC1724D/SEMyaseYpTnzMHCcD jWwSoQAfhOQ61PX6EGQiyiPVkTmTJ19V+bF+h6qhNdVvJMzQLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCC1GJTd2cgiejQpw5sLJJIW0OtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzZjYzhhNDAtMWUxZi0z MTc3LWE0ZDAtYWJmMThmNjNjM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOXpVlUkQ7aWsWz1BfUdweb/4ThEy9RYmN07M0l7dzEt35UGmMKszda d75uugYJaluDDmPDi+Owb742vI8shjChDd41pkWVCap2q4Yd2WMbA9EMDnwX82f/ +RzH3wNnoCKuhJ+UfZRuYgq9R5cvCrkI0g3b3bZ8PGK8nBfXlk9C4B1I0nV0go3D rxCYsgyiICo1FOJirVcO8IBaZ4OWNewNUQDZWkBNwBKBmoHSStA1nXfWMRMJ7q8N m4BNUmT+DQZyHn55z4DvPT4ryHtFKCx1C0DXOsixeRFG/4HGyIlJc8Pfk7mfDzgb sbLoL4BrznCoT8gKJwtRBCa2bWJ2YcI= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:45 2025 by rpki-client