$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d396d1f-6d9a-37b6-aeb6-d241c4f88803.roa File: 8d396d1f-6d9a-37b6-aeb6-d241c4f88803.roa (raw, json) Hash identifier: Zm+4F8l3JJThOVpC1c9gFeyA4I/nKTFrDimkOzzzbYc= Subject key identifier: FB:D6:66:79:73:D0:A0:57:59:E6:47:4F:C7:D6:2D:9D:4D:CB:49:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE3C9F109DBB0C6721D230 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d396d1f-6d9a-37b6-aeb6-d241c4f88803.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 174.162.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:3c:9f:10:9d:bb:0c:67:21:d2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=70384664-458e-4937-8ee6-3d05d769e5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:a1:03:7a:14:d7:46:47:bb:7b:cb:98:bc: be:b1:67:0b:a0:ca:7b:7c:12:59:6f:f6:f9:15:58: c6:92:1a:30:d4:9d:fc:14:f5:41:02:b5:e3:51:11: 99:9a:fa:2f:26:4f:b4:48:6f:39:60:92:e5:4a:e5: 00:f7:6b:c9:a0:f3:c2:c3:ef:5f:cb:28:48:e9:9b: 85:52:c5:be:72:d0:68:f1:da:6e:61:fd:af:64:c4: 35:cc:4f:23:8b:f3:88:05:d5:3f:56:03:36:fe:9e: ed:17:9f:3e:ef:58:0d:e1:ce:e3:9f:27:81:d3:41: 88:9a:cc:07:ac:04:38:c2:5e:56:91:6a:da:6c:2d: de:94:96:f3:98:cb:81:8d:a2:21:34:13:d2:f0:2f: 01:0a:7c:aa:1d:a3:b7:f9:e1:ad:c1:30:41:bb:bc: af:74:e3:55:31:f6:e4:60:ce:41:db:5b:b5:b3:4a: e6:70:c2:fe:cd:f8:7b:e5:89:4f:7d:47:48:73:15: a9:37:c7:d0:be:d8:4b:1e:9b:88:2c:02:44:c0:f6: 5b:a9:6d:0a:39:f9:4a:b0:95:12:4a:d4:20:57:8b: e5:42:6a:1e:53:16:e9:c0:d1:1c:45:77:20:7e:26: f4:5b:00:aa:ac:55:8b:fc:ef:38:35:20:6f:c0:19: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D6:66:79:73:D0:A0:57:59:E6:47:4F:C7:D6:2D:9D:4D:CB:49:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d396d1f-6d9a-37b6-aeb6-d241c4f88803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.162.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d5:3f:f8:a1:ac:2c:67:d2:ba:d4:fe:df:41:0a:2c:b8:0f: 48:91:3e:37:f9:32:93:47:aa:48:55:f8:14:5e:48:92:c6:2e: a8:24:67:ef:b9:00:d6:34:38:66:8f:74:9c:0f:46:10:d0:1a: 60:e6:22:d3:a4:81:7f:4a:88:a3:ca:49:64:f2:de:7d:f1:51: 4e:8c:3c:0f:98:f2:18:c0:0b:54:10:2d:5c:1b:48:66:0a:3f: 5e:43:09:6e:41:cc:b9:85:30:a6:a8:fe:c2:2d:c3:19:f0:d3: 28:c1:46:cf:62:92:25:ed:ba:de:9a:34:dc:96:ca:ac:89:88: e4:bd:88:55:b6:a6:66:94:0a:b5:f1:8c:99:cb:60:ba:ae:a8: aa:e4:d4:66:43:92:e8:2a:b6:dc:87:a2:f0:91:da:57:27:ce: a4:5a:5f:23:4f:88:c6:2d:58:f5:71:2c:4d:c0:c0:7d:5d:24: ee:e2:eb:be:b1:70:9b:8b:89:72:20:a0:00:fe:3a:2b:59:ec: c0:7e:08:13:4e:7c:64:50:1e:7e:11:2f:87:80:fa:a1:0f:5b: b3:69:f5:f0:ce:cb:e4:99:be:7d:1a:f0:d4:47:e7:e9:e6:a5: 0b:2f:00:25:b0:a0:2e:ce:5d:91:8b:87:59:99:06:4d:c4:cf: 47:3f:6a:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07jyfEJ27DGch0jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NzAzODQ2NjQtNDU4ZS00OTM3LThlZTYtM2QwNWQ3NjllNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR6hA3oU10ZHu3vLmLy+sWcLoMp7fBJZb/b5 FVjGkhow1J38FPVBArXjURGZmvovJk+0SG85YJLlSuUA92vJoPPCw+9fyyhI6ZuF UsW+ctBo8dpuYf2vZMQ1zE8ji/OIBdU/VgM2/p7tF58+71gN4c7jnyeB00GImswH rAQ4wl5WkWrabC3elJbzmMuBjaIhNBPS8C8BCnyqHaO3+eGtwTBBu7yvdONVMfbk YM5B21u1s0rmcML+zfh75YlPfUdIcxWpN8fQvthLHpuILAJEwPZbqW0KOflKsJUS StQgV4vlQmoeUxbpwNEcRXcgfib0WwCqrFWL/O84NSBvwBm0zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvWZnlz0KBXWeZHT8fWLZ1Ny0nkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQzOTZkMWYtNmQ5YS0z N2I2LWFlYjYtZDI0MWM0Zjg4ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbVP/ihrCxn0rrU/t9BCiy4D0iRPjf5MpNHqkhV+BReSJLGLqgkZ++5 ANY0OGaPdJwPRhDQGmDmItOkgX9KiKPKSWTy3n3xUU6MPA+Y8hjAC1QQLVwbSGYK P15DCW5BzLmFMKao/sItwxnw0yjBRs9ikiXtut6aNNyWyqyJiOS9iFW2pmaUCrXx jJnLYLquqKrk1GZDkugqttyHovCR2lcnzqRaXyNPiMYtWPVxLE3AwH1dJO7i676x cJuLiXIgoAD+OitZ7MB+CBNOfGRQHn4RL4eA+qEPW7Np9fDOy+SZvn0a8NRH5+nm pQsvACWwoC7OXZGLh1mZBk3Ez0c/avs= -----END CERTIFICATE-----Generated at Wed Aug 6 13:19:33 2025 by rpki-client