$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8534b069-08a7-3c39-9a01-404ee3f66e22.roa File: 8534b069-08a7-3c39-9a01-404ee3f66e22.roa (raw, json) Hash identifier: 3vF1ACimimtv/8eb+biLk6hdEaivAPDzzc8NQ8dMRkI= Subject key identifier: 24:00:DA:96:7E:EB:EF:69:70:2A:F2:AF:4C:B6:78:54:AB:42:6F:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC40C95C8EA65919CE1C080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8534b069-08a7-3c39-9a01-404ee3f66e22.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 174.173.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:0c:95:c8:ea:65:91:9c:e1:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e1a24620-8c0b-4983-8720-42cf439f96cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:f7:b7:e2:ed:6d:18:b2:8f:ae:74:8e:b0: 45:0a:af:49:8e:43:d3:12:88:20:0b:8e:3d:f0:3d: d3:9f:7d:d5:f6:57:b5:4a:74:cb:ed:1f:46:2e:d0: d5:cb:80:a0:5d:22:65:0b:0e:be:d0:a8:f3:b6:5c: 31:28:5a:34:9e:5c:57:1a:28:29:0a:0d:6f:f3:fc: e4:0a:d7:d4:69:75:b2:d7:0d:20:4d:a3:38:35:20: 59:b6:5a:b8:1e:ed:2d:11:43:95:fb:ea:1c:16:3f: e5:6c:24:c7:29:f2:de:77:d9:22:26:3d:8d:ff:82: 74:98:83:2d:94:a0:11:cb:86:fc:b7:ce:4f:06:b1: cb:c7:2b:29:1e:a6:d8:1c:92:91:48:f6:3b:b6:aa: d5:3d:1a:bb:b8:b1:c1:12:57:7b:44:d4:8b:83:a9: 37:9b:7a:5d:0c:c9:29:fc:94:a4:36:21:70:c6:f5: ec:18:a0:a7:0a:15:88:5f:a3:65:81:4a:b9:01:9a: 1d:19:79:e7:13:dc:11:91:02:3b:a5:48:3c:38:7c: 77:d9:fc:38:12:6f:68:65:b3:87:ac:fc:6f:1d:0d: 08:4f:bd:1b:31:e1:68:1b:67:05:48:2b:23:84:c2: 8c:a9:22:f8:83:58:bd:f5:76:97:a5:08:55:24:7b: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:DA:96:7E:EB:EF:69:70:2A:F2:AF:4C:B6:78:54:AB:42:6F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8534b069-08a7-3c39-9a01-404ee3f66e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.173.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:ce:e5:ce:37:14:ab:06:90:c3:27:a7:09:f2:93:36:44:86: 60:34:56:9c:0e:e6:95:cd:77:4f:f2:22:ac:a7:ad:b7:67:7c: 05:07:a7:58:ae:23:05:00:89:85:e6:cf:fb:99:89:d2:99:1a: a4:00:08:14:4b:cf:9b:85:ed:f6:dc:6f:64:54:3f:85:32:d3: d4:d1:b4:4b:a6:ba:89:38:69:f6:ef:5b:5f:3d:ef:8d:85:98: 65:ba:72:ab:46:73:49:96:9c:13:86:d4:43:88:ec:b9:4c:90: 4c:63:8c:b2:83:94:0f:80:37:33:c1:30:47:e0:b4:b3:49:df: 6b:68:aa:6e:20:85:a4:eb:94:58:57:1f:4e:af:99:5e:41:a0: e0:df:12:f5:92:06:d2:57:8b:16:ea:dc:ff:78:b0:3a:37:02: 49:91:41:2f:6b:ff:1a:4a:e6:e7:14:97:82:c1:9b:b8:ef:49: 5c:fc:a8:59:15:df:5b:c0:aa:21:8a:61:55:81:c8:b4:d4:d1: b1:35:98:16:b8:4b:53:d5:a3:23:21:f4:97:ba:08:14:f4:b5: 40:f7:b7:01:19:13:00:70:3c:37:6d:5f:e9:38:d8:f1:cb:bc: c9:fe:79:a0:19:32:c1:0a:fe:fa:74:d5:dd:54:91:2b:57:c8: ae:af:e8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxAyVyOplkZzhwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTFhMjQ2MjAtOGMwYi00OTgzLTg3MjAtNDJjZjQzOWY5NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUX3t+LtbRiyj650jrBFCq9JjkPTEoggC449 8D3Tn33V9le1SnTL7R9GLtDVy4CgXSJlCw6+0KjztlwxKFo0nlxXGigpCg1v8/zk CtfUaXWy1w0gTaM4NSBZtlq4Hu0tEUOV++ocFj/lbCTHKfLed9kiJj2N/4J0mIMt lKARy4b8t85PBrHLxyspHqbYHJKRSPY7tqrVPRq7uLHBEld7RNSLg6k3m3pdDMkp /JSkNiFwxvXsGKCnChWIX6NlgUq5AZodGXnnE9wRkQI7pUg8OHx32fw4Em9oZbOH rPxvHQ0IT70bMeFoG2cFSCsjhMKMqSL4g1i99XaXpQhVJHsPfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQA2pZ+6+9pcCryr0y2eFSrQm+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODUzNGIwNjktMDhhNy0z YzM5LTlhMDEtNDA0ZWUzZjY2ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrq18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvO5c43FKsGkMMnpwnykzZEhmA0VpwO5pXNd0/yIqynrbdnfAUHp1iu IwUAiYXmz/uZidKZGqQACBRLz5uF7fbcb2RUP4Uy09TRtEumuok4afbvW189742F mGW6cqtGc0mWnBOG1EOI7LlMkExjjLKDlA+ANzPBMEfgtLNJ32toqm4ghaTrlFhX H06vmV5BoODfEvWSBtJXixbq3P94sDo3AkmRQS9r/xpK5ucUl4LBm7jvSVz8qFkV 31vAqiGKYVWByLTU0bE1mBa4S1PVoyMh9Je6CBT0tUD3twEZEwBwPDdtX+k42PHL vMn+eaAZMsEK/vp01d1UkStXyK6v6Kc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:26:34 2025 by rpki-client