$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67b7e9c6-3538-3d33-af6d-0d83ad2fea1e.roa File: 67b7e9c6-3538-3d33-af6d-0d83ad2fea1e.roa (raw, json) Hash identifier: nYCRVUAYlMh0Ay12jIIjiq04VEavQJYG7N+ZR9z80hs= Subject key identifier: 9E:F6:32:AC:88:95:7A:E9:25:54:C3:B0:2F:53:07:26:C9:04:FA:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA44EA4A9C5FF2CAF68C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67b7e9c6-3538-3d33-af6d-0d83ad2fea1e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 174.174.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:44:ea:4a:9c:5f:f2:ca:f6:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f6749e3c-90a8-4a21-bd91-bb4c137b7cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:0e:f9:2b:96:f0:35:f0:b8:ed:1e:3f:4c: fd:43:52:9a:cb:9d:68:6b:f2:ef:6e:1f:73:be:95: a7:ad:7c:93:3c:d6:e9:a5:9b:49:66:0e:ca:3a:00: 79:f4:ab:c4:03:1a:f4:f0:0e:be:7c:3f:b5:d5:44: 6a:5d:21:dd:7f:01:5b:3e:79:c6:92:cc:a3:8c:85: ef:63:51:a2:63:8a:72:b5:5f:a0:e0:13:c2:9c:f2: f1:95:df:14:9f:2b:6c:99:5b:37:5a:06:5e:0a:1e: e3:d4:30:75:a6:a3:2a:1a:4e:75:e8:5f:4f:19:66: 03:b2:ba:29:78:00:96:c1:eb:67:6c:f1:1f:49:36: ab:6c:ee:7d:10:4f:fc:0f:fa:dd:fc:89:65:a6:bf: 87:7c:a6:ee:b3:d1:24:e4:45:7d:e2:f3:f8:e9:be: cf:ee:f9:3e:b1:9f:cc:8b:c1:bb:a9:78:5b:5d:bc: 07:7f:cb:39:56:af:2d:1c:63:71:97:70:e5:09:bb: 99:e7:06:e5:76:d3:ad:91:52:b7:4a:9e:ac:a2:87: d7:ac:b2:a1:5c:b7:75:65:43:b0:92:68:19:73:27: 7d:aa:b5:77:51:08:09:90:ce:ad:8a:7e:90:47:3c: 41:2d:af:b0:70:56:98:95:19:a5:37:d5:c5:73:42: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F6:32:AC:88:95:7A:E9:25:54:C3:B0:2F:53:07:26:C9:04:FA:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67b7e9c6-3538-3d33-af6d-0d83ad2fea1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f7:d7:0a:08:f9:e8:2d:1a:d0:89:4c:8b:78:6a:12:e0:f1: fc:c2:7e:d8:d0:ce:53:35:c7:3d:b7:f4:b4:cb:e8:ef:62:99: 10:fb:9b:12:3d:ca:00:93:0f:a5:44:91:d6:63:31:74:28:03: 72:00:5c:38:b5:ec:e5:e8:2d:f7:db:3b:42:3e:21:88:8c:aa: 2f:de:d7:15:00:11:5a:ad:64:db:f9:cc:1e:b1:f8:75:63:76: d6:0c:e9:ae:d6:0d:8f:86:90:db:b1:62:55:cc:69:bd:71:03: c4:1a:a6:46:69:db:8e:18:39:28:d8:2c:86:17:cd:c1:95:63: 9b:e9:14:34:48:e0:e1:76:8e:b8:20:7f:99:73:36:87:b5:c9: 02:11:1c:2f:ee:33:d9:df:7c:8e:61:c3:10:72:8d:85:68:b8: b7:52:7c:aa:4d:2b:e9:b5:4b:fb:c6:5c:1c:5f:4f:e8:46:ad: 72:a6:78:38:82:ed:04:9f:10:cb:fa:fa:0d:5b:b1:6e:14:c9: 57:14:24:2c:30:b1:0a:08:4e:52:c4:24:e1:3f:24:79:b3:73: bc:02:4f:a2:3e:75:8e:19:ca:56:c9:02:e3:39:74:88:87:54: 15:93:a2:b0:64:53:fe:42:78:b1:1f:54:a5:5c:14:19:13:8e: 23:17:42:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqkTqSpxf8sr2jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjY3NDllM2MtOTBhOC00YTIxLWJkOTEtYmI0YzEzN2I3Y2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBAO+SuW8DXwuO0eP0z9Q1Kay51oa/Lvbh9z vpWnrXyTPNbppZtJZg7KOgB59KvEAxr08A6+fD+11URqXSHdfwFbPnnGksyjjIXv Y1GiY4pytV+g4BPCnPLxld8UnytsmVs3WgZeCh7j1DB1pqMqGk516F9PGWYDsrop eACWwetnbPEfSTarbO59EE/8D/rd/Illpr+HfKbus9Ek5EV94vP46b7P7vk+sZ/M i8G7qXhbXbwHf8s5Vq8tHGNxl3DlCbuZ5wbldtOtkVK3Sp6soofXrLKhXLd1ZUOw kmgZcyd9qrV3UQgJkM6tin6QRzxBLa+wcFaYlRmlN9XFc0IZ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ72MqyIlXrpJVTDsC9TBybJBPqZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjdiN2U5YzYtMzUzOC0z ZDMzLWFmNmQtMGQ4M2FkMmZlYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrq7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL31woI+egtGtCJTIt4ahLg8fzCftjQzlM1xz239LTL6O9imRD7mxI9 ygCTD6VEkdZjMXQoA3IAXDi17OXoLffbO0I+IYiMqi/e1xUAEVqtZNv5zB6x+HVj dtYM6a7WDY+GkNuxYlXMab1xA8QapkZp244YOSjYLIYXzcGVY5vpFDRI4OF2jrgg f5lzNoe1yQIRHC/uM9nffI5hwxByjYVouLdSfKpNK+m1S/vGXBxfT+hGrXKmeDiC 7QSfEMv6+g1bsW4UyVcUJCwwsQoITlLEJOE/JHmzc7wCT6I+dY4ZylbJAuM5dIiH VBWTorBkU/5CeLEfVKVcFBkTjiMXQj0= -----END CERTIFICATE-----Generated at Wed Nov 5 02:49:06 2025 by rpki-client