$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/394e19e6-981e-3f41-93e9-872acc0e24fd.roa File: 394e19e6-981e-3f41-93e9-872acc0e24fd.roa (raw, json) Hash identifier: JcQ017kx5/L5m53FLl5H7mqM/ubnSKJDOFYrdb1zUhY= Subject key identifier: 0E:6D:78:64:D0:59:D7:27:85:E2:92:B0:9B:32:65:5C:5A:D9:F7:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECE5B111E0D3C7D61F6E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/394e19e6-981e-3f41-93e9-872acc0e24fd.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 174.170.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:e5:b1:11:e0:d3:c7:d6:1f:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9932f44d-5886-4844-971d-aade3f6ba149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:f0:e6:2e:82:54:8c:b8:0b:02:7d:8f:42: 8c:20:3c:ac:ca:97:3d:55:ef:c1:74:83:a0:e8:0e: ac:9b:0d:05:10:ed:c6:91:d3:ef:4d:1c:75:93:21: 40:b6:a0:7c:c6:10:b9:f1:8c:a8:de:7d:d7:9f:b2: 36:8a:c9:ed:d4:0c:9c:f0:6e:e6:8b:c2:e1:83:e8: 40:c0:aa:15:0b:62:7e:d9:69:e7:8c:68:25:9e:ac: 89:b0:7f:67:44:13:19:7b:25:c1:7c:50:92:7f:7c: b8:ad:55:e9:6e:b2:7b:43:91:89:8d:59:fd:41:11: 5d:f6:e3:0f:63:cd:c7:71:79:74:cf:f0:e2:0d:a2: dc:ac:a6:dc:6e:75:ba:8b:07:30:da:1b:fe:9f:1f: ae:fc:3c:72:c1:57:80:cf:c8:ee:4f:b4:58:15:c0: 06:73:95:9f:0b:1b:cb:47:ed:a9:84:8a:6d:63:f7: 6b:d7:d0:8a:19:e1:04:f3:3f:6a:30:9e:68:7c:b9: 29:fe:53:41:24:f3:e1:b1:01:45:d2:0a:e0:bd:9f: b3:65:f2:5f:8a:ed:cb:3e:05:e3:c4:a6:a6:ac:5b: 14:12:17:da:d5:27:fa:56:5a:d9:69:cd:fb:89:cc: 08:68:db:73:d8:bb:82:15:2a:ee:78:8e:8b:52:09: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6D:78:64:D0:59:D7:27:85:E2:92:B0:9B:32:65:5C:5A:D9:F7:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/394e19e6-981e-3f41-93e9-872acc0e24fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:cf:5e:c1:f2:39:cd:c3:c7:d1:c3:5c:52:d2:83:fe:54:b8: 3c:03:72:5c:23:c1:1f:85:9a:c0:b3:c1:c4:09:e1:f9:2d:10: b3:43:67:a1:2c:c3:7d:27:84:b3:46:2d:19:38:19:d2:a5:dd: 0d:fb:fc:c4:80:2e:6b:a6:21:2f:0f:7a:16:3a:ea:e7:04:a1: eb:9f:dd:82:83:d9:60:29:6a:e6:d9:73:f5:4e:92:8d:03:72: 60:89:77:1d:04:bc:9b:7d:a4:db:3c:c6:31:17:b4:34:fb:ae: 0e:49:c2:e8:cd:41:0c:d6:92:07:3a:71:7b:2e:c7:01:b2:ab: de:6e:13:03:b2:44:b3:bd:7a:ee:d9:12:a7:a2:62:0f:86:d9: 8a:f7:04:e8:c0:89:c1:0d:14:e1:96:07:9d:e1:f3:2f:aa:7d: f9:3f:c5:bc:1d:e9:6c:71:b2:4e:1b:fb:5e:20:80:79:96:6c: 4f:51:19:bc:a3:11:41:7b:8e:b0:8c:d1:5c:fd:5c:17:33:c4: 4d:d1:3e:68:35:8e:b0:b6:18:e8:8e:11:d5:22:ec:03:18:d3: 41:43:90:65:1a:47:5c:26:fe:03:98:11:90:f1:ca:6b:ea:c9: c8:b1:b0:39:54:f8:08:e3:dd:59:ae:c1:8c:c7:3f:78:93:73: 61:e7:7c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07OWxEeDTx9YfbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OTkzMmY0NGQtNTg4Ni00ODQ0LTk3MWQtYWFkZTNmNmJhMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj3w5i6CVIy4CwJ9j0KMIDysypc9Ve/BdIOg 6A6smw0FEO3GkdPvTRx1kyFAtqB8xhC58Yyo3n3Xn7I2isnt1Ayc8G7mi8Lhg+hA wKoVC2J+2WnnjGglnqyJsH9nRBMZeyXBfFCSf3y4rVXpbrJ7Q5GJjVn9QRFd9uMP Y83HcXl0z/DiDaLcrKbcbnW6iwcw2hv+nx+u/DxywVeAz8juT7RYFcAGc5WfCxvL R+2phIptY/dr19CKGeEE8z9qMJ5ofLkp/lNBJPPhsQFF0grgvZ+zZfJfiu3LPgXj xKamrFsUEhfa1Sf6VlrZac37icwIaNtz2LuCFSrueI6LUgmBxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5teGTQWdcnheKSsJsyZVxa2ffDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk0ZTE5ZTYtOTgxZS0z ZjQxLTkzZTktODcyYWNjMGUyNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPPXsHyOc3Dx9HDXFLSg/5UuDwDclwjwR+FmsCzwcQJ4fktELNDZ6Es w30nhLNGLRk4GdKl3Q37/MSALmumIS8PehY66ucEoeuf3YKD2WApaubZc/VOko0D cmCJdx0EvJt9pNs8xjEXtDT7rg5JwujNQQzWkgc6cXsuxwGyq95uEwOyRLO9eu7Z EqeiYg+G2Yr3BOjAicENFOGWB53h8y+qffk/xbwd6Wxxsk4b+14ggHmWbE9RGbyj EUF7jrCM0Vz9XBczxE3RPmg1jrC2GOiOEdUi7AMY00FDkGUaR1wm/gOYEZDxymvq ycixsDlU+Ajj3VmuwYzHP3iTc2HnfFc= -----END CERTIFICATE-----Generated at Thu Aug 7 14:51:03 2025 by rpki-client