$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d396d1f-6d9a-37b6-aeb6-d241c4f88803.roa File: 8d396d1f-6d9a-37b6-aeb6-d241c4f88803.roa (raw, json) Hash identifier: NKMgPvk3LO02g6Bl4vptjCJtmbMxZL1Ddp4cV6NkdtE= Subject key identifier: B3:A2:63:72:64:AA:54:2B:91:C6:15:47:3D:8A:8B:A8:1F:AD:59:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA443CCF223FA15776B680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d396d1f-6d9a-37b6-aeb6-d241c4f88803.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 174.162.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:44:3c:cf:22:3f:a1:57:76:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7e4deb6e-3910-4505-a0e3-fad032c1a211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:ee:22:4f:3c:f5:1a:94:fe:e8:cb:b6:59: aa:b8:21:72:f1:d9:15:d0:23:58:7f:90:26:38:22: ee:08:cb:98:e1:99:39:6a:73:3a:7d:7c:52:8e:9f: 8c:44:f2:16:8d:fa:55:38:37:60:61:c0:86:05:d5: 4f:7a:37:9d:42:84:49:ee:3c:25:f2:f3:a7:29:82: c6:8c:fa:13:33:1a:9e:8a:16:c2:4b:48:ce:1d:3c: aa:60:0c:25:bd:6c:2a:1f:cb:e8:b1:b8:f0:13:d0: 4c:a4:86:ec:26:00:76:92:9d:d2:03:33:33:3e:42: 5d:7b:1b:b0:c7:51:be:0c:80:5f:44:64:f7:77:0d: 26:10:de:d4:3e:b2:91:f1:f5:a4:87:06:d1:77:d0: 51:7d:76:0c:bb:71:a8:55:b8:e4:e9:8b:2b:a1:a5: 5d:99:11:24:de:15:0f:26:17:f2:04:25:ef:f9:21: 29:aa:ae:cb:d2:7f:e7:1c:64:88:c4:03:24:99:47: 23:af:c5:f2:2b:93:23:e4:86:51:98:b9:b6:77:15: b2:37:b7:c4:c8:d8:14:9e:65:92:d1:bb:2a:f8:a0: db:0b:10:36:04:78:da:d8:dd:d7:80:7c:ab:8b:9e: a1:d0:74:78:a2:2a:87:9e:4c:c2:e5:c5:90:7b:75: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A2:63:72:64:AA:54:2B:91:C6:15:47:3D:8A:8B:A8:1F:AD:59:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d396d1f-6d9a-37b6-aeb6-d241c4f88803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.162.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:31:74:6f:a0:18:b4:73:4d:9f:54:ec:3b:d3:ed:0f:5f:30: 16:d3:d8:a9:7d:9a:ef:75:de:6a:bc:4d:26:6d:a6:62:e5:d9: 68:b9:73:4c:e6:b3:dc:ba:5f:82:b9:28:91:5d:b4:09:8d:bb: 15:fc:5b:1b:75:6e:d8:d3:56:cf:e7:3c:61:c9:6d:ee:58:de: d7:de:19:9f:31:66:39:e1:a7:e8:90:d1:71:d5:94:77:d6:90: 3d:ff:6c:89:c0:34:fa:d1:84:4a:84:0c:15:07:78:6e:06:e0: 6d:eb:71:0d:8e:55:20:de:23:4c:d1:e9:0f:7d:6a:0e:c7:51: 7a:25:b0:96:ee:97:04:d5:94:65:6c:3a:b2:07:a1:49:06:40: c8:68:b9:20:59:c0:7f:b3:43:93:56:21:c4:4e:62:90:a7:68: c2:b4:82:3c:66:36:40:7c:ba:b3:ad:d1:48:80:d4:89:4d:4f: 3f:ae:94:80:98:11:61:d4:12:18:2b:19:84:31:ce:d4:61:5b: 29:75:8c:95:06:d9:8d:8d:6c:26:83:dc:72:6d:7b:06:b1:83: 7a:2f:34:eb:15:d7:43:64:bb:92:b6:16:ba:87:df:bb:ff:b3: 4f:e8:5b:19:a7:a1:87:fe:d8:fe:cf:20:0f:28:f5:4c:14:c6: 23:31:5c:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqkQ8zyI/oVd2toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2U0ZGViNmUtMzkxMC00NTA1LWEwZTMtZmFkMDMyYzFhMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj43uIk889RqU/ujLtlmquCFy8dkV0CNYf5Am OCLuCMuY4Zk5anM6fXxSjp+MRPIWjfpVODdgYcCGBdVPejedQoRJ7jwl8vOnKYLG jPoTMxqeihbCS0jOHTyqYAwlvWwqH8vosbjwE9BMpIbsJgB2kp3SAzMzPkJdexuw x1G+DIBfRGT3dw0mEN7UPrKR8fWkhwbRd9BRfXYMu3GoVbjk6YsroaVdmREk3hUP JhfyBCXv+SEpqq7L0n/nHGSIxAMkmUcjr8XyK5Mj5IZRmLm2dxWyN7fEyNgUnmWS 0bsq+KDbCxA2BHja2N3XgHyri56h0HR4oiqHnkzC5cWQe3X0rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOiY3JkqlQrkcYVRz2Ki6gfrVm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQzOTZkMWYtNmQ5YS0z N2I2LWFlYjYtZDI0MWM0Zjg4ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUxdG+gGLRzTZ9U7DvT7Q9fMBbT2Kl9mu913mq8TSZtpmLl2Wi5c0zm s9y6X4K5KJFdtAmNuxX8Wxt1btjTVs/nPGHJbe5Y3tfeGZ8xZjnhp+iQ0XHVlHfW kD3/bInANPrRhEqEDBUHeG4G4G3rcQ2OVSDeI0zR6Q99ag7HUXolsJbulwTVlGVs OrIHoUkGQMhouSBZwH+zQ5NWIcROYpCnaMK0gjxmNkB8urOt0UiA1IlNTz+ulICY EWHUEhgrGYQxztRhWyl1jJUG2Y2NbCaD3HJtewaxg3ovNOsV10Nku5K2FrqH37v/ s0/oWxmnoYf+2P7PIA8o9UwUxiMxXFU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:03:19 2025 by rpki-client