$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa File: 72f257e2-6423-3442-9857-a4c23f84fc11.roa (raw, json) Hash identifier: qy/dXyrKNEGo7xDrXTobSnkGtgaFdbgLQ7FU2svNBMo= Subject key identifier: 63:62:F9:6B:43:C0:99:5A:1B:82:FC:90:1C:A2:70:C4:E0:66:DE:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECE686AA612EB34D9C5680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 174.170.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:e6:86:aa:61:2e:b3:4d:9c:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=3a9973bf-92e9-4264-bb5d-f5a7a5a9747e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:29:b5:a0:c6:4a:d2:18:60:e5:e9:ba:f6: 04:7c:7c:3d:2e:0b:cc:07:4c:eb:52:87:a0:14:d6: 6a:f6:4d:50:04:b5:50:89:47:84:c4:0b:c8:23:ad: 29:c7:02:76:bc:53:45:58:d2:1b:df:a5:16:1c:d3: 6e:cf:27:97:1e:ee:72:f8:45:e2:78:a4:05:54:1d: 77:25:4a:23:90:6d:2b:a3:c8:19:9b:43:b6:65:82: 90:3d:d5:9a:45:26:b3:70:29:22:fd:d6:14:97:a2: 54:3b:7e:76:42:f5:f7:44:5b:50:0d:34:3e:3f:d1: 0c:b5:a4:1e:e5:87:77:06:ad:13:7e:0d:4b:c2:e7: 5f:e0:70:62:0d:8b:43:52:1d:04:95:c1:8b:02:25: 56:a0:d2:4c:bd:17:53:a0:15:ef:c8:58:d4:3f:36: a0:8b:96:15:ab:d5:c6:9e:3d:e3:6f:cb:15:a0:12: 9b:3b:b8:66:7d:1f:5d:27:ed:c3:27:59:b2:ea:27: e1:62:7e:fa:de:bf:9a:8e:cd:b6:79:b1:d2:95:78: d7:e3:96:7c:cd:e1:94:f2:c3:8e:9e:a0:1c:ec:5a: 88:d1:ce:1c:eb:11:73:05:69:80:f7:68:d5:08:c9: 33:25:49:62:09:92:ca:58:e4:e5:99:d0:ca:39:ee: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:62:F9:6B:43:C0:99:5A:1B:82:FC:90:1C:A2:70:C4:E0:66:DE:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e5:e8:6b:84:f7:c2:0c:08:6b:6e:77:72:33:ef:59:5c:a9: 14:fa:30:6c:61:8e:0a:df:53:04:15:d6:37:55:e5:c6:d9:28: 94:6d:0b:61:da:5e:41:8d:e8:36:0b:b4:94:a6:96:a9:fa:1b: 57:de:23:c9:15:87:88:31:cb:e4:87:24:c4:0e:79:ed:b4:31: 9a:51:bb:e1:20:0b:08:36:9b:85:18:32:53:b3:f6:9b:1b:22: 0e:0e:2d:2f:e4:03:56:91:22:16:89:e2:d9:95:58:16:7d:5d: a3:ba:4b:10:e7:cf:9e:8a:38:6d:19:c7:1c:2c:16:60:3e:af: e4:59:9c:0e:e5:63:e5:44:9b:a6:5a:3e:7b:4b:7e:73:8a:1b: 7c:e4:f9:bd:59:ba:41:06:ce:ee:eb:31:bd:0b:eb:ba:04:52: e7:ca:a0:32:34:ad:78:7b:0b:f6:83:f1:bd:a5:41:56:6d:71: a1:21:d8:05:12:73:58:1a:21:96:51:39:69:87:45:e3:11:df: c8:3d:84:0d:bc:21:b0:d3:68:18:66:c0:a7:6d:b7:de:a4:37: cc:d0:75:e2:37:f5:af:e9:fd:9b:9a:12:f2:57:4b:1f:97:5b: 7f:88:a2:99:89:69:ed:4b:b4:42:00:93:4d:5a:6a:9f:b0:a3: 53:c2:10:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07OaGqmEus02cVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2E5OTczYmYtOTJlOS00MjY0LWJiNWQtZjVhN2E1YTk3NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxsptaDGStIYYOXpuvYEfHw9LgvMB0zrUoeg FNZq9k1QBLVQiUeExAvII60pxwJ2vFNFWNIb36UWHNNuzyeXHu5y+EXieKQFVB13 JUojkG0ro8gZm0O2ZYKQPdWaRSazcCki/dYUl6JUO352QvX3RFtQDTQ+P9EMtaQe 5Yd3Bq0Tfg1Lwudf4HBiDYtDUh0ElcGLAiVWoNJMvRdToBXvyFjUPzagi5YVq9XG nj3jb8sVoBKbO7hmfR9dJ+3DJ1my6ifhYn763r+ajs22ebHSlXjX45Z8zeGU8sOO nqAc7FqI0c4c6xFzBWmA92jVCMkzJUliCZLKWOTlmdDKOe5ZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNi+WtDwJlaG4L8kByicMTgZt57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJmMjU3ZTItNjQyMy0z NDQyLTk4NTctYTRjMjNmODRmYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDl6GuE98IMCGtud3Iz71lcqRT6MGxhjgrfUwQV1jdV5cbZKJRtC2Ha XkGN6DYLtJSmlqn6G1feI8kVh4gxy+SHJMQOee20MZpRu+EgCwg2m4UYMlOz9psb Ig4OLS/kA1aRIhaJ4tmVWBZ9XaO6SxDnz56KOG0ZxxwsFmA+r+RZnA7lY+VEm6Za PntLfnOKG3zk+b1ZukEGzu7rMb0L67oEUufKoDI0rXh7C/aD8b2lQVZtcaEh2AUS c1gaIZZROWmHReMR38g9hA28IbDTaBhmwKdtt96kN8zQdeI39a/p/ZuaEvJXSx+X W3+IopmJae1LtEIAk01aap+wo1PCEPg= -----END CERTIFICATE-----Generated at Thu Aug 7 02:03:10 2025 by rpki-client