$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69085952-09df-38b1-9125-6d83914a97da.roa File: 69085952-09df-38b1-9125-6d83914a97da.roa (raw, json) Hash identifier: Tk3NtCCQWvh6XiqXMevNBDAF/E3gCoT7j0ZPJJ08TsM= Subject key identifier: 27:AA:36:8E:C6:0B:1D:7B:D4:99:C6:92:00:B3:BE:3D:D5:C9:50:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE9667A65CF70B533E3F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69085952-09df-38b1-9125-6d83914a97da.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 174.170.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:96:67:a6:5c:f7:0b:53:3e:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=02bde5b9-f095-40c1-9857-b3f10f2bc1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:04:60:2c:f2:49:41:f5:de:9a:90:39:27: c4:cc:07:0f:af:51:04:0c:b8:15:73:b9:17:2b:33: 4d:0a:14:f7:16:d5:51:32:70:30:de:8a:e9:08:fe: aa:a1:57:10:4d:01:61:d3:3c:f6:3d:22:b5:5d:e8: 8e:8c:96:dc:20:61:87:91:0e:7f:bc:5a:a9:f0:7f: 60:7c:74:80:42:1b:0f:a3:38:2e:77:ea:e9:e9:73: bd:38:c3:f4:06:1c:a3:79:cd:d1:93:41:de:71:35: 99:f8:b7:cb:fb:94:a9:ca:02:d6:85:3f:92:64:de: 8d:53:ed:13:3e:30:45:d4:28:7e:b4:ce:00:be:19: 19:92:a0:bc:30:62:89:1d:f5:7c:c5:06:08:0c:11: 8c:87:12:59:c2:5e:fe:f2:c8:4a:83:bd:b1:bf:04: 39:ba:69:d0:88:f9:09:cf:ae:75:05:ff:f7:4b:6f: a4:ed:86:f1:ba:89:5e:37:33:25:da:09:74:28:7c: 53:67:4a:e3:0f:92:05:fb:ad:52:a4:46:ff:5b:bc: da:05:7e:08:01:42:4b:95:86:e6:98:f8:bd:37:4f: 8e:73:33:79:75:ac:82:a2:50:8a:8f:8c:5f:24:b2: a8:37:de:af:4f:87:10:b9:eb:17:57:ad:cc:f0:e3: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AA:36:8E:C6:0B:1D:7B:D4:99:C6:92:00:B3:BE:3D:D5:C9:50:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69085952-09df-38b1-9125-6d83914a97da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4e:52:49:5b:e8:0c:b9:1d:fa:ff:6e:5e:9a:47:ee:03:3a: 44:d6:da:a1:8f:38:78:88:49:0f:d9:ac:6f:66:37:a9:58:a5: e7:dc:85:b0:d9:39:e0:e6:21:c9:55:8f:e9:60:e8:2c:bd:b8: e8:02:55:20:f6:3e:23:65:38:5c:77:ed:54:81:25:9f:4b:23: cf:e2:7b:f4:3a:5c:6c:0a:dc:fe:0b:d2:40:3d:5e:6b:54:26: 8e:fb:b8:ed:9e:f2:7c:7e:bd:7f:48:32:4f:80:ac:d8:49:05: ce:26:66:7f:e3:97:c8:51:6e:b1:da:59:08:ed:8e:ea:ad:73: bb:55:13:3b:b4:02:3d:f7:55:61:ba:31:94:28:d7:d8:d1:66: 69:58:2b:93:9a:93:e6:16:21:2b:fc:89:f4:11:0a:5f:b4:1b: 3c:07:3b:b3:5d:7f:d3:ba:60:a1:0a:bc:ed:fd:84:9c:43:d5: ad:78:2b:94:f9:d8:8a:0d:91:35:fd:c7:39:82:74:aa:ab:93: 7b:1e:cd:ce:47:41:57:5d:c0:60:3a:23:ff:01:3c:7c:3b:b2: ef:48:c0:12:c4:cb:df:0f:9e:39:8b:48:b5:e1:88:8d:a7:db: ac:8a:ce:13:d2:59:eb:e5:11:3c:39:cf:68:14:8a:c0:af:c6: a0:f6:2c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07pZnplz3C1M+P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDJiZGU1YjktZjA5NS00MGMxLTk4NTctYjNmMTBmMmJjMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVoEYCzySUH13pqQOSfEzAcPr1EEDLgVc7kX KzNNChT3FtVRMnAw3orpCP6qoVcQTQFh0zz2PSK1XeiOjJbcIGGHkQ5/vFqp8H9g fHSAQhsPozgud+rp6XO9OMP0Bhyjec3Rk0HecTWZ+LfL+5SpygLWhT+SZN6NU+0T PjBF1Ch+tM4AvhkZkqC8MGKJHfV8xQYIDBGMhxJZwl7+8shKg72xvwQ5umnQiPkJ z651Bf/3S2+k7YbxuoleNzMl2gl0KHxTZ0rjD5IF+61SpEb/W7zaBX4IAUJLlYbm mPi9N0+OczN5dayColCKj4xfJLKoN96vT4cQuesXV63M8OOi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeqNo7GCx171JnGkgCzvj3VyVBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjkwODU5NTItMDlkZi0z OGIxLTkxMjUtNmQ4MzkxNGE5N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJOUklb6Ay5Hfr/bl6aR+4DOkTW2qGPOHiISQ/ZrG9mN6lYpefchbDZ OeDmIclVj+lg6Cy9uOgCVSD2PiNlOFx37VSBJZ9LI8/ie/Q6XGwK3P4L0kA9XmtU Jo77uO2e8nx+vX9IMk+ArNhJBc4mZn/jl8hRbrHaWQjtjuqtc7tVEzu0Aj33VWG6 MZQo19jRZmlYK5Oak+YWISv8ifQRCl+0GzwHO7Ndf9O6YKEKvO39hJxD1a14K5T5 2IoNkTX9xzmCdKqrk3sezc5HQVddwGA6I/8BPHw7su9IwBLEy98PnjmLSLXhiI2n 26yKzhPSWevlETw5z2gUisCvxqD2LO4= -----END CERTIFICATE-----Generated at Fri Aug 8 12:56:48 2025 by rpki-client