$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dd2b523-b21f-3194-9749-b23a191558f9.roa File: 5dd2b523-b21f-3194-9749-b23a191558f9.roa (raw, json) Hash identifier: m1gDWgrHOYV+vRieSYREhJ72oKpnPCdE3icNumgExiE= Subject key identifier: 95:F3:16:66:6D:23:58:2F:4C:CB:9F:E9:54:32:7E:9A:3B:45:9C:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1777A5ECAE96FAB9EA980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dd2b523-b21f-3194-9749-b23a191558f9.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 174.52.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:77:7a:5e:ca:e9:6f:ab:9e:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b7ac4d39-26b5-48f1-b5c2-8db6c6f754b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:d9:c8:03:a8:e0:af:2b:9e:c4:cd:b6:4a: 7d:b7:14:4e:74:95:a2:ca:98:50:b6:ca:d2:5b:99: 45:56:44:1a:a7:09:72:f3:e1:c6:68:54:41:1c:21: ac:37:56:20:be:81:ce:cd:93:9d:a5:49:dd:8e:d3: c2:81:3d:fa:12:b3:b7:3f:d6:11:98:3d:3c:14:8c: f9:8e:28:91:01:20:5f:ea:cc:50:f0:83:d2:76:7b: c0:22:b6:35:5f:4c:c7:af:3c:04:d6:44:4a:e9:9b: a8:90:09:6f:9e:71:28:da:09:9d:76:44:05:2c:ea: 92:ab:5f:e5:9b:51:e8:77:95:d5:5e:82:17:ad:d0: 56:8f:01:75:df:07:71:b3:7a:76:7b:bd:cc:ae:13: 6a:ea:26:86:51:5c:97:4e:00:f4:26:56:38:b1:b1: b9:da:d7:4c:80:5e:0c:aa:36:a3:c3:2d:59:cc:bd: 3e:8f:1a:f1:62:bc:3c:87:38:f1:00:3a:95:ab:a0: 59:87:8e:89:06:68:1f:d5:b3:32:cb:e1:7f:68:04: 9b:ca:44:00:35:43:52:3d:c9:9a:6e:41:b0:da:99: 67:a8:4e:28:bb:d9:f2:5c:64:7f:1b:34:79:94:13: e4:0a:19:9f:57:81:98:bd:0b:f6:c2:b2:a6:0f:3d: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F3:16:66:6D:23:58:2F:4C:CB:9F:E9:54:32:7E:9A:3B:45:9C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dd2b523-b21f-3194-9749-b23a191558f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.52.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5f:b8:f0:00:bf:f7:42:25:4a:a6:16:69:58:30:af:7d:e3: a2:e7:70:56:1e:cd:83:30:38:26:ad:07:61:d8:7e:7f:f7:8a: c1:90:4b:b9:ed:d4:27:03:d3:09:fc:a8:13:9f:8b:3c:a4:02: 5e:89:c5:18:db:e0:38:55:03:e2:88:ab:15:09:be:64:28:77: 87:c8:c9:df:21:d6:af:e6:a4:cc:9e:fd:75:36:a2:c3:80:07: 6c:39:ea:73:04:af:99:04:fa:b3:91:49:f9:49:b0:e9:22:fb: a9:37:90:8a:a5:ca:0e:d4:1b:19:f1:0c:18:28:87:57:b7:ef: 43:bb:46:ad:0a:ae:3b:c9:4e:d1:ae:d9:ee:b1:a0:aa:f8:bb: cd:c2:88:c5:fe:a8:cb:01:fc:66:d7:26:09:b3:27:10:d4:c7: 86:0b:d1:6b:f7:63:d2:d6:4b:d5:7e:b0:75:cd:ff:b4:39:c6: fe:00:86:ef:66:36:05:ff:eb:4b:5d:16:2c:f3:5a:04:45:79: 8a:7d:08:0b:1f:47:2e:66:41:5c:c6:26:2a:0a:5b:7f:d4:49: 84:ff:3f:46:48:2b:96:95:55:e2:67:eb:97:f4:59:70:be:be: a5:d7:99:6a:13:0f:73:88:31:9d:5c:06:43:52:8e:b9:a1:3c: 36:2b:0e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswXd6Xsrpb6ueqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjdhYzRkMzktMjZiNS00OGYxLWI1YzItOGRiNmM2Zjc1NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvzZyAOo4K8rnsTNtkp9txROdJWiyphQtsrS W5lFVkQapwly8+HGaFRBHCGsN1YgvoHOzZOdpUndjtPCgT36ErO3P9YRmD08FIz5 jiiRASBf6sxQ8IPSdnvAIrY1X0zHrzwE1kRK6ZuokAlvnnEo2gmddkQFLOqSq1/l m1Hod5XVXoIXrdBWjwF13wdxs3p2e73MrhNq6iaGUVyXTgD0JlY4sbG52tdMgF4M qjajwy1ZzL0+jxrxYrw8hzjxADqVq6BZh46JBmgf1bMyy+F/aASbykQANUNSPcma bkGw2plnqE4ou9nyXGR/GzR5lBPkChmfV4GYvQv2wrKmDz0SUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXzFmZtI1gvTMuf6VQyfpo7RZx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRkMmI1MjMtYjIxZi0z MTk0LTk3NDktYjIzYTE5MTU1OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrjTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNfuPAAv/dCJUqmFmlYMK9946LncFYezYMwOCatB2HYfn/3isGQS7nt 1CcD0wn8qBOfizykAl6JxRjb4DhVA+KIqxUJvmQod4fIyd8h1q/mpMye/XU2osOA B2w56nMEr5kE+rORSflJsOki+6k3kIqlyg7UGxnxDBgoh1e370O7Rq0KrjvJTtGu 2e6xoKr4u83CiMX+qMsB/GbXJgmzJxDUx4YL0Wv3Y9LWS9V+sHXN/7Q5xv4Ahu9m NgX/60tdFizzWgRFeYp9CAsfRy5mQVzGJioKW3/USYT/P0ZIK5aVVeJn65f0WXC+ vqXXmWoTD3OIMZ1cBkNSjrmhPDYrDj8= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:34 2025 by rpki-client