$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa File: 89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa (raw, json) Hash identifier: zKISKMCeVs6dHO/IaPx3qoiCQRc1yUDz47I1C2kEJ0Q= Subject key identifier: 3E:CA:FE:02:D4:D3:D3:6A:5E:EB:16:11:DE:F2:E4:EC:51:75:C6:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10AE5A91C5FBCB943844600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 174.163.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0a:e5:a9:1c:5f:bc:b9:43:84:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=3802668b-dd68-4fc2-9d00-04ad23715596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:21:bd:79:b6:6f:e0:53:a2:c7:a7:d3:32: 9b:c4:dc:ea:a9:46:e6:7b:c8:25:c1:23:a3:12:29: 4a:74:12:70:c4:aa:51:9b:98:13:a8:a8:28:00:fe: f4:f3:23:2c:11:ee:28:ca:63:50:8d:a6:6a:05:89: cc:02:fa:6e:f9:77:40:a3:57:01:ad:fc:a6:8d:dd: 6d:30:38:1f:d6:36:ff:8b:a9:0c:18:e0:6e:5b:03: fc:9a:33:5a:0f:b6:0b:7f:d8:c4:e3:3f:ac:27:47: 6b:c2:fe:bd:d1:d6:72:a4:eb:b5:35:b7:2e:66:b3: 32:52:09:f5:49:6b:d7:3e:77:47:2f:37:4e:59:a3: 6b:7c:f1:ca:ce:3a:f9:1e:84:01:34:e5:85:28:8f: 89:12:9f:4e:66:3f:45:b8:c7:8e:9b:39:94:2f:34: 40:f9:ea:d8:8a:5f:83:c3:0b:0b:7a:d0:6d:fa:32: 4d:19:18:68:7e:4c:c0:40:7e:ae:f8:df:22:51:c9: 42:21:d5:95:96:a2:61:ad:99:d0:15:8b:40:21:9f: d1:86:d9:0b:55:68:7b:4b:cc:a1:22:e8:8c:51:0a: 33:fd:57:e3:93:62:8e:b6:81:e5:91:6a:15:20:65: 21:66:90:66:d4:bb:ac:ef:f5:69:9f:4c:d0:17:13: 9f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CA:FE:02:D4:D3:D3:6A:5E:EB:16:11:DE:F2:E4:EC:51:75:C6:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.163.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:c5:f0:e2:3d:54:de:2d:e6:05:cd:32:70:70:36:fd:a4:c8: a0:4e:86:ad:4d:4d:f2:5f:f7:f9:3a:0a:6c:57:54:2a:08:1f: 9a:92:23:ea:d0:3f:c3:41:6a:22:87:7a:ff:9c:1b:2e:c4:cc: 7c:b3:08:78:bb:3e:ac:3d:57:6d:c4:f8:de:5e:89:da:1e:2d: 32:12:f8:e4:3d:18:e0:26:23:33:1d:60:f9:18:c5:14:32:4c: b5:a9:ce:cc:5d:2f:01:1d:6d:d9:42:e0:d0:e6:1b:72:9d:51: fe:85:82:1b:23:eb:53:8c:0f:01:b3:82:2a:65:71:9e:05:7e: d0:35:aa:b0:22:10:be:df:8b:f7:eb:69:ea:ad:c5:ae:d0:9d: fc:00:2b:7e:ce:f4:e6:67:c6:1a:b8:89:4e:4a:cf:ed:96:eb: 71:65:0f:dd:be:34:f4:52:6b:30:be:cf:0c:d9:61:84:5d:98: 65:4d:2d:c6:bc:18:10:9e:e0:2b:5b:f1:00:e8:d0:b8:01:57: 66:b2:66:fa:34:db:b9:b6:ec:69:58:2c:13:ea:a4:f1:0f:0c: b3:42:30:da:d3:61:63:eb:fd:1e:93:14:a7:63:ca:e9:63:9b: 2d:29:46:6d:c4:4a:ed:d0:b0:d8:5e:c1:4a:0c:e4:17:fe:9f: 22:b4:06:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCuWpHF+8uUOERgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MzgwMjY2OGItZGQ2OC00ZmMyLTlkMDAtMDRhZDIzNzE1NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHohvXm2b+BTosen0zKbxNzqqUbme8glwSOj EilKdBJwxKpRm5gTqKgoAP708yMsEe4oymNQjaZqBYnMAvpu+XdAo1cBrfymjd1t MDgf1jb/i6kMGOBuWwP8mjNaD7YLf9jE4z+sJ0drwv690dZypOu1NbcuZrMyUgn1 SWvXPndHLzdOWaNrfPHKzjr5HoQBNOWFKI+JEp9OZj9FuMeOmzmULzRA+erYil+D wwsLetBt+jJNGRhofkzAQH6u+N8iUclCIdWVlqJhrZnQFYtAIZ/RhtkLVWh7S8yh IuiMUQoz/Vfjk2KOtoHlkWoVIGUhZpBm1Lus7/Vpn0zQFxOfKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7K/gLU09NqXusWEd7y5OxRdcYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODliOWE0OWYtMWE5Zi0z ZTA3LWI1MmEtY2YxZmJkM2U2MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMbF8OI9VN4t5gXNMnBwNv2kyKBOhq1NTfJf9/k6CmxXVCoIH5qSI+rQ P8NBaiKHev+cGy7EzHyzCHi7Pqw9V23E+N5eidoeLTIS+OQ9GOAmIzMdYPkYxRQy TLWpzsxdLwEdbdlC4NDmG3KdUf6Fghsj61OMDwGzgiplcZ4FftA1qrAiEL7fi/fr aeqtxa7QnfwAK37O9OZnxhq4iU5Kz+2W63FlD92+NPRSazC+zwzZYYRdmGVNLca8 GBCe4Ctb8QDo0LgBV2ayZvo027m27GlYLBPqpPEPDLNCMNrTYWPr/R6TFKdjyulj my0pRm3ESu3QsNhewUoM5Bf+nyK0Bl4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:56:51 2025 by rpki-client