$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae2ed5b-f4b9-3d75-86a1-6ff9896a52c6.roa File: bae2ed5b-f4b9-3d75-86a1-6ff9896a52c6.roa (raw, json) Hash identifier: ZtGEivjWujBIHxj+QOMP3A7jz+9XM8Hzj2zmsAL8Gwk= Subject key identifier: 2F:DC:06:CD:5F:71:02:83:17:52:39:B0:E6:58:2A:A3:48:17:BC:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECE58CC2C44EEBE5C30700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae2ed5b-f4b9-3d75-86a1-6ff9896a52c6.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 174.170.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:e5:8c:c2:c4:4e:eb:e5:c3:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=161095e7-57d3-4b40-9c22-11a2baa49990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9e:64:73:bf:39:9d:68:ed:22:e4:6b:0f:3e: d2:6c:34:bf:77:46:76:6e:a1:9f:53:38:5b:5f:8e: e7:3e:87:47:8e:54:16:b8:4f:50:f7:01:7b:11:2f: e3:57:5a:68:cd:e9:f6:47:a7:46:58:fd:6a:87:5b: 5d:36:bc:76:b2:a9:a3:12:33:40:be:1e:44:e6:e9: 42:32:96:2b:58:e4:1f:a3:17:75:34:93:18:c6:ea: 2c:1c:85:03:ef:6d:7f:80:d8:36:58:69:c4:89:d9: 74:f0:8b:56:7d:10:67:dc:a8:de:28:86:b1:88:6e: a1:db:0e:01:02:2b:b9:76:85:0b:1e:2a:c8:a5:db: c6:22:6d:44:d2:dc:22:fa:ed:84:c1:a6:67:47:19: 06:1b:a0:7c:ff:34:fa:db:74:cd:a1:b7:1e:95:cc: 4f:88:b9:d0:f9:02:2f:b0:32:a5:1d:d0:12:48:02: 2a:f2:7a:89:fb:f9:f6:2a:4d:c8:00:11:ac:b2:ca: 36:ec:c6:b2:f9:ee:7e:d8:7f:82:d7:3a:75:d6:48: 38:72:a2:4f:bb:e8:9c:27:0f:47:65:6c:cb:be:69: 90:08:0b:5f:c1:6b:76:b9:73:16:03:be:3b:4c:96: f1:68:62:20:f2:0a:d6:81:26:a1:b9:53:6b:35:9b: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DC:06:CD:5F:71:02:83:17:52:39:B0:E6:58:2A:A3:48:17:BC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae2ed5b-f4b9-3d75-86a1-6ff9896a52c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:68:ce:cb:54:8f:29:fb:a0:5a:a6:57:25:a4:0d:03:57:07: 86:d2:01:2a:aa:5e:be:7e:aa:7c:00:db:32:b5:4e:c2:06:0f: 30:ca:c2:03:3d:7e:6a:01:29:eb:42:46:e6:7c:d1:5d:a8:1f: 4f:70:1d:cf:3f:54:6c:9c:da:10:92:9b:b2:a4:84:80:c3:0a: 23:2c:27:9a:86:93:7f:6e:a4:53:b7:ed:0c:89:cc:2e:5a:9b: bb:09:8a:5f:3b:31:cf:f0:4a:43:4a:be:95:09:81:19:7a:40: 4a:80:90:9e:74:1e:26:0a:cf:32:ab:23:6f:47:33:f9:00:41: 6f:06:39:d0:b6:10:11:3d:bd:ae:31:1f:28:4c:98:f5:b8:92: 7e:3f:b2:18:10:fe:a1:ba:49:3c:71:2c:8c:f9:c8:a3:1a:62: c2:61:5b:2f:dc:7e:01:c3:48:88:67:56:d6:ca:08:a6:f7:25: 01:1e:e9:30:83:65:88:d2:cd:f3:65:79:39:b6:4f:a1:ba:5e: a5:8e:5b:f6:57:2e:ec:f0:57:22:1a:59:42:8d:a2:db:7f:09: 8e:76:51:20:22:73:9f:51:e7:ff:8a:cc:8d:cb:8d:1a:b4:fe: bc:e4:f7:da:d0:50:ae:92:3f:d8:de:8e:1f:3b:d5:2a:27:b1: 9f:63:47:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07OWMwsRO6+XDBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MTYxMDk1ZTctNTdkMy00YjQwLTljMjItMTFhMmJhYTQ5OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ5kc785nWjtIuRrDz7SbDS/d0Z2bqGfUzhb X47nPodHjlQWuE9Q9wF7ES/jV1pozen2R6dGWP1qh1tdNrx2sqmjEjNAvh5E5ulC MpYrWOQfoxd1NJMYxuosHIUD721/gNg2WGnEidl08ItWfRBn3KjeKIaxiG6h2w4B Aiu5doULHirIpdvGIm1E0twi+u2EwaZnRxkGG6B8/zT623TNobcelcxPiLnQ+QIv sDKlHdASSAIq8nqJ+/n2Kk3IABGssso27May+e5+2H+C1zp11kg4cqJPu+icJw9H ZWzLvmmQCAtfwWt2uXMWA747TJbxaGIg8grWgSahuVNrNZubFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/cBs1fcQKDF1I5sOZYKqNIF7wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFlMmVkNWItZjRiOS0z ZDc1LTg2YTEtNmZmOTg5NmE1MmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtozstUjyn7oFqmVyWkDQNXB4bSASqqXr5+qnwA2zK1TsIGDzDKwgM9 fmoBKetCRuZ80V2oH09wHc8/VGyc2hCSm7KkhIDDCiMsJ5qGk39upFO37QyJzC5a m7sJil87Mc/wSkNKvpUJgRl6QEqAkJ50HiYKzzKrI29HM/kAQW8GOdC2EBE9va4x HyhMmPW4kn4/shgQ/qG6STxxLIz5yKMaYsJhWy/cfgHDSIhnVtbKCKb3JQEe6TCD ZYjSzfNleTm2T6G6XqWOW/ZXLuzwVyIaWUKNott/CY52USAic59R5/+KzI3LjRq0 /rzk99rQUK6SP9jejh871SonsZ9jR5s= -----END CERTIFICATE-----Generated at Wed Aug 6 18:44:25 2025 by rpki-client