$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa File: 38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa (raw, json) Hash identifier: yboydRoXOwhr1m63I+6z+RzdWQd5b6+W4goFsoY+qBo= Subject key identifier: 23:42:95:A7:B6:5F:D9:9A:B1:B1:14:D5:F9:27:24:53:9F:F4:56:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB220E3772275AF0655DCFB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 22258 IP address blocks: 174.161.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:e3:77:22:75:af:06:55:dc:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=3ed2f79b-28bb-4bbb-9ad3-5544ea00437e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:8a:92:d9:c2:f3:8d:95:9c:cc:49:df:b7: 87:a7:53:b3:90:d5:4e:3f:6b:f3:ab:73:59:f8:5c: 32:4f:46:18:99:b4:a7:b5:6c:64:2f:e6:dc:8c:69: b9:af:d5:b1:da:c0:21:69:81:87:39:cd:13:fe:e0: e6:da:50:6f:85:01:f5:2f:34:e7:e9:94:1d:b8:b0: 92:b4:21:3f:59:07:26:e9:d4:a9:59:12:a7:25:f1: ab:d4:2a:55:55:f3:50:ff:1e:75:f9:cf:b1:b0:b7: 4a:bb:62:69:f2:26:0b:f7:a7:cf:95:49:87:e5:9e: fd:50:40:15:89:9e:90:5b:b5:55:2c:92:cf:38:ba: 51:f8:bb:84:f1:85:35:1c:d5:5d:b0:f8:db:62:86: 26:fd:8e:cf:f0:2a:20:6d:f1:e5:44:63:bf:e3:48: 13:3d:92:9c:3a:fb:eb:9a:12:4c:e7:83:f2:d5:ea: 9b:04:e9:ca:00:e9:72:22:45:49:b4:df:23:6d:14: 1c:f3:68:dd:8b:68:5e:37:0e:c0:e5:04:00:ba:a1: 2e:64:09:db:35:76:99:3e:eb:81:b2:b5:f9:a4:3a: e5:6f:c4:14:f4:d1:ae:6f:95:05:02:1c:86:90:30: c9:e1:de:67:59:02:5e:07:0e:7e:fc:b4:ce:1e:3e: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:42:95:A7:B6:5F:D9:9A:B1:B1:14:D5:F9:27:24:53:9F:F4:56:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4b:9a:f3:0a:06:8a:58:36:83:92:28:1d:01:01:cb:18:1f: 7c:7b:c2:d8:51:a3:55:eb:33:38:d7:e0:7f:64:bc:80:cc:98: cb:2f:52:85:c9:3e:4f:e5:d8:3f:3d:9d:99:77:59:84:66:99: 1f:4e:7d:4f:7b:6c:74:20:28:6d:48:a7:ce:f5:c8:95:d1:a4: 67:c0:68:52:c1:d3:d4:ef:6c:cd:eb:ef:4c:16:a1:3c:89:6f: fa:23:f1:2d:71:fe:89:e4:5f:51:d6:50:8d:dc:a7:a7:57:29: 73:38:68:24:7f:a5:51:5c:02:ff:c8:45:79:1e:77:e3:ab:ba: 8c:00:fa:f3:ff:65:25:f8:88:f8:fd:ac:3d:2d:0a:14:af:f0: 6e:03:72:ba:3e:57:cc:02:60:66:e6:17:c9:07:58:ae:13:de: 30:df:9b:61:c5:19:41:78:55:72:22:a1:a9:e3:87:03:32:f7: 13:da:c1:1b:2f:46:6b:20:aa:aa:cd:3e:92:72:54:0c:90:9f: 82:1a:c4:38:8a:97:ba:d8:ef:01:ed:06:3d:3b:c0:11:33:ea: fb:35:54:56:f9:c0:d5:13:1f:6f:b8:73:b9:17:d2:36:8d:4f: 75:89:cd:c1:57:45:be:97:ae:bf:e8:90:a3:16:44:8f:bd:df: 96:fb:da:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyION3InWvBlXc+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2VkMmY3OWItMjhiYi00YmJiLTlhZDMtNTU0NGVhMDA0MzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2qKktnC842VnMxJ37eHp1OzkNVOP2vzq3NZ +FwyT0YYmbSntWxkL+bcjGm5r9Wx2sAhaYGHOc0T/uDm2lBvhQH1LzTn6ZQduLCS tCE/WQcm6dSpWRKnJfGr1CpVVfNQ/x51+c+xsLdKu2Jp8iYL96fPlUmH5Z79UEAV iZ6QW7VVLJLPOLpR+LuE8YU1HNVdsPjbYoYm/Y7P8CogbfHlRGO/40gTPZKcOvvr mhJM54Py1eqbBOnKAOlyIkVJtN8jbRQc82jdi2heNw7A5QQAuqEuZAnbNXaZPuuB srX5pDrlb8QU9NGub5UFAhyGkDDJ4d5nWQJeBw5+/LTOHj5TuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNClae2X9masbEU1fknJFOf9FbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhlMGJiNWItMzliNC0z MDAwLTkzYmItYjdlNjEzYWIwOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBLmvMKBopYNoOSKB0BAcsYH3x7wthRo1XrMzjX4H9kvIDMmMsvUoXJ Pk/l2D89nZl3WYRmmR9OfU97bHQgKG1Ip871yJXRpGfAaFLB09TvbM3r70wWoTyJ b/oj8S1x/onkX1HWUI3cp6dXKXM4aCR/pVFcAv/IRXked+OruowA+vP/ZSX4iPj9 rD0tChSv8G4Dcro+V8wCYGbmF8kHWK4T3jDfm2HFGUF4VXIioanjhwMy9xPawRsv RmsgqqrNPpJyVAyQn4IaxDiKl7rY7wHtBj07wBEz6vs1VFb5wNUTH2+4c7kX0jaN T3WJzcFXRb6Xrr/okKMWRI+935b72vo= -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:18 2025 by rpki-client